Guides

A1 or A3 digital certificate for people living abroad: the decision explained with three scenarios and a matrix

A1 is a file installed on a computer or phone, valid for one year; A3 lives on a token, card or in the cloud and lasts up to three years. In Brazil the choice is routine; thousands of kilometres from a certification shop, it becomes strategy. This page frames the A1 or A3 digital certificate decision for people living abroad through three real-life scenarios, a matrix of questions and an honest list of the risks of each model. By the end you'll know which to ask for — and can do so on WhatsApp with the answer ready.

  • A1 and A3 issued from abroad
  • Storage and backup guidance
  • PT and EN support at an agreed time
  • Certisign-accredited RA in London

⚠️ Important notice

This is not a government website. Certificado Digital Global is a Registration Authority accredited to the Certisign network, a brand of Kindness in Business Consulting Ltd (UK Company No. 10386293), serving clients from London. Issuance depends on identity validation, documentation and ICP-Brasil rules. Do not send CPF, passport or sensitive documents via WhatsApp or the initial form.

O que é

A1 is a file installed on a computer or phone, valid for one year; A3 lives on a token, card or in the cloud and lasts up to three years. In Brazil the choice is routine; thousands of kilometres from a certification s…

Para quem

A1 and A3 issued from abroad · Storage and backup guidance

Como resolve

PT and EN support at an agreed time · Certisign-accredited RA in London

Limite

Não é site do governo. Emissão sujeita a validação de identidade, documentação e normas da ICP-Brasil.

The two models in one sentence each

A1 — file

Private key stored as a file on the computer or phone, protected by a password. Valid for one year. Can be copied to another device with the right password.

A3 — token, card or cloud

Private key generated inside a device (token or card) or in a cloud service with a PIN. Valid for up to three years. Cannot be copied: either you have the device, or you have the cloud access.

Three people, three answers

Real case

Illustrative scenario. A Brazilian freelance designer in Berlin signs at most one contract a month with clients in Brazil and logs into e-CAC once a year. He wants the least friction possible: no gadget in a drawer. He picks A1, installs it on his laptop and keeps a copy of the file somewhere safe, with the password stored in a password manager. When he changes computers, he copies the file and carries on. — Occasional use, a single device, simplicity first → A1

Decision matrix

How often do you sign or log in?

A few times a month or less · Weekly or every day

How many devices do you use?

One main computer · Several, including a phone

Do you change computers often?

Rarely; and you know how to copy files · Yes, or you'd rather not depend on the machine

Renew in one year or three?

One year is fine · You'd rather forget about it for up to three years

Do you need to sign in systems that require hardware?

No · Yes — some systems ask for A3

Do you have a safe place for a token?

You don't want physical objects · Yes, or you prefer the cloud

The risks of each model far from Brazil

A1: changing computers without a backup

If the file was never copied and the machine breaks or is wiped, the certificate is gone. The RA cannot recover it: it is revoked and another is issued, with a new validation. The fix is simple — copy the file and keep the password — but it has to happen on issuance day.

A1: forgotten password

The file is useless without its password, and nobody can reset it. Use a password manager and test access right after installing.

A3 on a token or card: loss, theft or damage

The device is one of a kind. Losing it in another country means revoking and issuing anew — and sometimes waiting for another token to arrive. For frequent travellers, that's the strongest argument for the cloud.

A3 on a token: readers and drivers

Tokens need driver installation and don't always work on every operating system; a new or corporate computer may block the install.

Cloud A3: dependence on the app and the phone

Access goes through the cloud service's app; changing mobile number or losing the phone means redoing the link. Keep the service's recovery details up to date.

Before deciding

“Can I change my mind later?”

Yes. At renewal you choose again. Many people start with A1 and move to cloud A3 as their use grows.

“Is the token shipped to my country?”

Physical devices involve international logistics, which we assess case by case. Cloud and A1 need no shipping at all.

“Which is more secure?”

Both are ICP-Brasil and carry the same legal weight. A3 protects better against key copying; A1 depends on your discipline with the file and password.

“Does the price change much?”

Model and validity make up the price; the quote comes before any decision, so you choose with the number in hand.

Transparent pricing

From €200

The starting point applies to the simplest model; A3 and longer validity periods have their own figures, presented before issuance. In every case, video validation and installation guidance are included.

We send the A1 vs A3 price comparison on WhatsApp as soon as we know your purpose.

Compare A1 and A3 prices

Frequently asked questions

Related guides

Already know which model suits you?

Send “A1” or “A3” — or “not sure” — and the country you live in. We confirm the choice, send the quote and book video validation.

Choose my model

Solicite orientação

Formulário curto para lead inicial. Não solicitamos CPF, data de nascimento, passaporte, upload de documentos ou dados financeiros nesta etapa.