Overview
- The Digital Ministry unveiled the brand d‑you and set 2 January 2027 as its target go‑live date, announcing about 40 initial launch partners that will offer services with the wallet.
- Officials published portions of the app’s source code and plan a bug‑bounty to let outside experts probe for vulnerabilities before wider promotion of the service.
- Federal security authorities and independent researchers say important work is still outstanding, including the BSI’s technical certification (TR‑03189), unresolved architectural choices over signed credentials versus authenticated channels, and formal security reviews.
- Banks and regulated service providers lack public API and integration specifications, which leaves key use cases such as strong customer authentication for account opening and other financial services technically limited at launch.
- The wallet will store official documents on the user’s device, use a PIN for access and remain voluntary, offering near‑term benefits like digital ID and age checks while carrying the risk of a delayed or restricted start if residual risks are judged unacceptable.