Digital identity verification methods for notaries by jurisdiction

Digital identity verification methods for notaries vary by jurisdiction, and the method you select must match the specific legal requirements of your commission. A notary in Texas must use a different combination of techniques than one in England or Dubai. This guide explains the three primary methods, how they work together, and what the rules are across the US, EU, UK, Hong Kong, and the UAE.

Remote online notarization is only permitted in US states that have explicitly authorized it, and only when the notary has confirmed their own specific authorization. In the EU, the notarial act stays in the notary's office. Digital tools handle intake, identity, and signing preparation. The UK is subject to faculty rules. Hong Kong and the UAE permit digital verification in the front office only.

The role of identity verification in notarial integrity

Identity verification protects the legal validity of a notarial act by confirming the person signing is who they claim to be. Notarial fraud depends on impersonation, and the notary's commission depends on stopping it.

There is a distinction between verifying the person and verifying the document. Credential analysis checks whether a government-issued ID is genuine and unaltered. Biometric liveness checks whether the person holding that ID is physically present and alive during the session. Knowledge-based authentication checks whether the person can answer questions only the real identity holder would know. A notarial act that skips any required layer risks being challenged or invalidated.

The liability falls on the notary. If a signer uses a forged document or impersonates another person, the notary who failed to follow the required verification protocol can face civil liability, commission revocation, or criminal referral. The National Association of Secretaries of State maintains electronic notarization standards that track how each state expects its notaries to mitigate this risk.

Common digital identity verification techniques

Three techniques form the backbone of remote online notarization identity proofing. Jurisdictions require different combinations, but the methods themselves are standard across the industry.

Knowledge-based authentication (KBA)

KBA presents the signer with a timed quiz drawn from public and proprietary data sources. The signer must answer within a set window. In states that mandate KBA, the quiz typically includes at least five questions, each with five possible answers, and the signer must score at least 80% to pass. If the signer fails, they may retest once within 24 hours, with a portion of the questions replaced. A second failure triggers a mandatory lockout, preventing another attempt with that specific notary for 24 hours.

Credential analysis

Credential analysis uses automated technology to scan a government-issued photo ID for visual, physical, or cryptographic security features. The system checks whether the credential is fraudulent or altered and may cross-reference records against issuing databases. The notary then performs a visual comparison during the live audio-video session, confirming the person on camera matches the photo on the analyzed credential.

Biometric liveness detection

Biometric liveness detection confirms the person on camera is a live human being, not a photograph, video replay, or deepfake. The technology may ask the signer to move their head, blink, or follow an on-screen prompt. Some systems use facial geometry matching to compare the live image against the photo on the analyzed credential. Faculty Office rules in England and Wales treat the biometric and machine-readable parts of a passport as providing a high level of security because they interrogate these elements directly.

US jurisdictional variations in remote online notarization identity proofing

In the US, remote online notarization is legally valid only where state law explicitly authorizes it. Each state's Secretary of State dictates which combination of identity proofing methods a notary must use. There is no federal standard, and a notary commissioned in one state cannot assume another state's rules apply.

Texas: strict KBA and credential analysis

Under Texas Secretary of State rules, identity proofing must be executed through dynamic KBA with at least five questions and five answer choices. The signer must achieve 80% within two minutes. Signers who fail may retest once within 24 hours, with at least 60% of questions replaced. A second failure triggers a mandatory 24-hour lockout. Automated credential analysis must confirm security features and cross-check records against authoritative databases, followed by the notary's visual comparison during live audio-video communication.

Identity proofing is the means by which the principal (signer of a document) affirms their identity. This is done through a third party who uses dynamic knowledge based authentication (KBA).

Office of the Texas Secretary of State, Notary Public Licensing Authority

Florida: baseline KBA and credential analysis

Florida mandates the same KBA structure: five questions, five choices, two minutes, 80% to pass. Credential analysis must verify visual, physical, or cryptographic features of a government-issued photo credential. Florida also imposes a 10-year retention requirement for electronic journals and audio-video recordings of RON sessions. The Florida Secretary of State provides a portal for remote online notary public services.

Virginia: alternative pathways

Virginia provides alternative identity proofing pathways rather than relying exclusively on KBA. Under Virginia Code § 47.1-2, satisfactory evidence requires personal knowledge, the oath of a credible witness, or satisfaction of at least two independent validation methods. These can include credential analysis, antecedent in-person identity proofing, authorized statutory methods, or a valid digital certificate accessed via biometric data.

EU and UK regulatory frameworks for digital identity

In the European Union, the notarial act remains anchored in the notary's office. Digital tools are for intake, identity preparation, and signing workflow. The notarial act itself does not move online.

EU: eIDAS and national notarial competence

The eIDAS framework, under Regulation (EU) No 910/2014 and its 2024 recast, establishes rules for electronic signatures, seals, and qualified trust services. A qualified electronic signature has legal equivalence to a handwritten signature. However, eIDAS does not harmonize substantive notarial acts or authenticate public instruments across borders. Authentic instruments remain subject to domestic notarial legislation and chamber standards. A remote client can complete preliminary intake, digital identity pre-checks, and signing preparation digitally, but the authentic instrument stays within the notary's office jurisdiction.

UK: faculty rules and the default of physical inspection

In England and Wales, notaries operate under the Faculty Office of the Archbishop of Canterbury. The default baseline is inspecting physical credentials in person. Digital identity checks are permissible only when the tools interrogate machine-readable and cryptographic or biometric security elements of the credential. Flat digital images or scans are explicitly inadequate.

A scanned copy of a passport, for example, is not a secure way of verifying identity as the document could easily have been forged. Using the biometric and machine readable parts of a passport on the other hand amount to a high level of security, if not absolute.

The Faculty Office of the Archbishop of Canterbury, Regulator of Notaries Public in England and Wales

The notary must remain physically in England or Wales during the session, establish a sufficient connecting factor to the jurisdiction, and confirm the receiving jurisdiction accepts acts executed via remote appearance.

Hong Kong and UAE: front-office compliance

In Hong Kong and the UAE, digital identity verification tools serve front-office intake and record-keeping. The notarial act itself remains tied to physical execution or state-controlled digital platforms.

Hong Kong: physical execution standard

Under the Hong Kong Notaries Public Ordinance (Cap. 159), notaries public are appointed by the High Court from senior solicitors. They are held to common law physical execution standards. Identity verification occurs through in-person inspection of original physical documents. Remote digital identity verification is limited to front-office administrative intake: collecting client information, scanning documents for preliminary review, and preparing the file before the client appears in person.

UAE: state-controlled platforms

Under Federal Decree-Law No. 46 of 2021 and local court regulations such as Dubai Resolution No. 137 of 2022, remote notarial acts are permitted solely through official government-controlled digital platforms. These platforms integrate with the national digital identity registry. Private notaries cannot independently conduct video-call notarizations outside these sanctioned state portals. A private notary's use of digital identity verification is confined to front-office preparation: verifying the client's identity before they appear at the office or before directing them to the official government platform for the executed act.

Optimizing the client pre-check workflow

The pre-check workflow moves identity verification and document intake to before the live appointment. The notary reviews a completed package before the signer appears on camera, reducing friction during the session and catching problems early.

1. Send the intake link after bookingThe client receives a link to a secure portal where they upload their government-issued ID and complete any required KBA quiz. This happens asynchronously, before the appointment.
2. Run credential analysis and KBA automaticallyThe system scans the ID for security features and cross-references issuing databases. If KBA is required, the client takes the timed quiz. The notary receives the results.
3. Review the completed packageBefore the live session, the notary confirms that credential analysis passed, KBA passed (or was not required), and the uploaded documents match the requested notarial act. The file is prepared.
4. Conduct the live session for visual confirmationDuring the audio-video call, the notary performs the visual comparison required by most RON statutes: the person on camera matches the photo on the analyzed credential.

Handling intake asynchronously means the notary enters the live session with a prepared file rather than discovering problems in real time. Automating client intake to save time and reduce errors in notary practice management walks through the mechanics of this workflow.

Legal security considerations and data handling

Storing identity documents triggers obligations under data privacy laws. In the EU, the General Data Protection Regulation governs how personal data is collected, processed, and retained. In California, the California Consumer Privacy Act imposes similar requirements. Notaries must understand which rules apply to their clients based on where those clients are located.

Identity documents, biometric data, and session recordings are sensitive personal information. Transmission must be encrypted. Storage must be tamper-evident, meaning any alteration to a stored record is detectable. Best practices for managing e-journals and tamper-evident records in a notary practice covers the record-keeping standards that protect both the notary and the client.

Retention periods are statutory. Florida requires 10 years. Texas has its own requirements. The notary must know the specific retention rule for their jurisdiction and ensure their storage system enforces it automatically rather than relying on manual deletion.

Protocol for failed verification attempts

When a client fails KBA or credential analysis, the notary must not proceed. Do not guess. Do not execute the act and figure it out later. The statutory presumption of identity has failed, and the notarial act cannot be completed.

1. Terminate the session immediatelyIf the signer fails KBA after all allowed attempts or if credential analysis rejects the identity document, stop. Do not attempt a workaround or ask leading questions to salvage the session.
2. Record the failure in the notarial journalEnter the date, time, purported identity of the principal, requested notarial act, specific method of verification attempted, reason for non-completion, and confirmation of refusal. This documentation protects the notary if the signer later claims the act should have been completed.
3. Retain session recordings and logsAudio-video recordings and session logs from the failed attempt must be retained for the statutory period. Florida requires 10 years under Fla. Stat. § 117.245. Check your jurisdiction's specific requirement.
4. Offer manual review or rescheduling where appropriateIf the failure was due to a technical issue, such as a poorly lit room causing a biometric check to fail, offer to reschedule. If the failure was substantive, such as a forged ID flagged by credential analysis, decline the notarization.
5. Observe lockout rulesIn Texas, a signer who fails KBA twice is locked out from retrying with that specific notary for 24 hours. Do not override this. Do not refer the signer to another notary in the same practice to circumvent the lockout.

The distinction between a technical failure and a substantive failure is the notary's judgment call. When in doubt, decline. A lost client is preferable to a compromised commission. Notary compliance across jurisdictions addresses how to handle these decisions when your practice serves clients in multiple states.

What to do next

Match your verification method to your jurisdiction before you accept your next remote client. Confirm which combination of KBA, credential analysis, and biometric liveness your state or country requires. Build your pre-check workflow so that identity steps, document upload, and initial validation happen before the live session, leaving you with a prepared file to review. When a verification fails, follow the protocol: terminate, record, retain, and either reschedule or decline.

A branded client portal that handles intake, identity pre-check, scheduling, and secure document collection in one workflow gives you a prepared package before the signer appears. You can see pricing or get started with a setup that matches your jurisdiction's requirements. The Florida Senate publishes the full Online Notarization Act statute text and the New York Secretary of State details notary public licensing requirements. If your practice handles transactions in the UAE, the Abu Dhabi Global Market authority publishes its own electronic transactions framework.