eCPF

eCPF is a digital certificate for individuals issued within Brazil’s public key infrastructure, ICP-Brasil. It provides a digital identity for online authentication and for creating legally binding digital signatures. The certificate associates a person’s CPF number with a pair of cryptographic keys, enabling the holder to prove their identity to online services and to sign documents electronically.

eCPF certificates are issued by certification authorities recognized by ICP-Brasil. After identity verification, the CA issues the certificate and the private key is stored either in software (e-CPF A1) or on a hardware token or smart card (e-CPF A3). A1 certificates are software-based and typically stored on a computer or server; A3 certificates are hardware-based and offer portability and generally longer validity.

Common uses include accessing government portals such as gov.br and Receita Federal services, signing electronic documents, and authenticating in private-sector systems that accept ICP-Brasil credentials. The legal framework under ICP-Brasil gives digital signatures produced with eCPF a high level of legal recognition for many transactions, with the exact status depending on the certificate type and the service used.

Obtaining an eCPF requires selecting an ICP-Brasil-certified certification authority, completing identity verification (often in person at an authorized location), and installing any necessary software or drivers. If the private key is lost or the certificate is compromised, it must be revoked through the issuing CA and renewed.

Security considerations include keeping the private key secure, using a strong PIN or password, and promptly revoking a certificate if exposure is suspected. Compatibility varies by service, and some platforms may require particular CA providers or additional authentication methods alongside eCPF.