A national bet on a continental deadline
Germany has committed €79.3 million to build its European Digital Identity (EUDI) Wallet, targeting a public launch on January 2, 2027 (Biometric Update, Aug 2026). That is real money and a firm date, attached to a project the rest of the bloc is visibly struggling to deliver on schedule. A January 2026 readiness assessment by Signicat, cited in the same reporting, found only 12 of the EU's 27 member states on track to have a functioning wallet available by the end of 2026 — the deadline the European Commission set for every state to offer at least one certified wallet (European Commission, EU Digital Identity Wallet). Germany is racing to be an over-achiever in a rollout that, bloc-wide, is behind.
The case for a common wallet is real
It's worth stating plainly why the EU built this framework in the first place. Regulation (EU) 2024/1183 — eIDAS 2.0, in force since May 2024 — exists because national eID schemes were fragmented, cross-border authentication was clunky or nonexistent, and citizens had no standard way to prove an attribute (age, a professional qualification, residency) online without oversharing their entire identity file (EUR-Lex, Regulation 2024/1183). Selective disclosure — proving you're over 18 without revealing your birthdate, address, or full name — is a genuine privacy improvement over the photocopy-your-ID-card status quo. A wallet that lets someone present a driving licence or a university diploma from their phone, recognized in all 27 member states, is a plausible reduction in bureaucratic friction that businesses and citizens both have reason to want. Germany's own push, including expanded hackathons and sandboxes, reflects a genuine attempt to make the deadline work rather than just declare compliance on paper.
Where the timeline collides with the technical reality
The problem is that a mandatory-by-date rollout is running ahead of the security architecture meant to underpin it. The EU cybersecurity agency, ENISA, is developing the EU-wide certification scheme for wallet security — but that scheme has only been in public review since April 2026, and full EU-wide certification isn't expected until after the 2026 deadline member states are being held to (ENISA, certification scheme). Until it arrives, member states are certifying wallets under national regimes of uneven rigor. In Germany, opposition Left Party lawmakers have specifically flagged a lack of transparency in the wallet's cloud-based architecture and insufficient post-quantum cryptographic preparedness — a live concern given that credentials issued today are meant to remain trustworthy for years, well into the window when quantum-capable attacks on current encryption become plausible (Biometric Update, Aug 2026). Building the certification floor after the systems are already live inverts the normal order of a security-critical national identity product.
Nobody has told the users
The more immediate problem is one of basic public communication. A July 2026 IDnow consumer survey found 51% of respondents in France and Germany had never heard of the EUDI Wallet at all (Biometric Update, Aug 2026). This is not a niche fintech product — it's meant to become, per eIDAS 2.0, the credential businesses in banking, telecoms, and large platforms must accept by late 2027. Launching a mandatory-acceptance identity infrastructure that half the target population doesn't know exists is a recipe for either a flat rollout or a rushed, top-down adoption push once the business-acceptance deadline bites — neither of which builds durable public trust in a system that, by design, touches every citizen's core identity documents.
The proportionate path
The instinct to hit a hard date is understandable — momentum matters for infrastructure this large, and slipping deadlines is how EU digital projects historically stall for a decade. But a proportionate approach would decouple the political deadline from the technical one: let member states that are ready launch on schedule, while making the ENISA certification scheme and post-quantum roadmap binding before the November 2027 business-acceptance mandate takes effect, not concurrently with it. Germany's €79.3 million and firm date are the right kind of state investment in digital infrastructure — the risk is spending it to hit a calendar milestone that the underlying security certification and public awareness haven't caught up to. A wallet nobody trusts because nobody explained it, built to a security standard that arrives after launch, defeats the purpose eIDAS 2.0 was written to serve.