Logging into TK-Safe and DiGA with the TK-HealthID

In TK-Safe:
Log in with the TK-Ident App

In a DiGA (digital health app):
Log in with the insurance app. Then log in via the TK-Ident App using your preferred method.

You don’t have a TK-HealthID yet?
In order to log into a DiGA with your TK-HealthID or the TK-Ident App, you first have to register for your TK-HealthID in the TK-Ident App. 

Have you already got a TK-HealthID?
To log into TK-Safe using your TK-HealthID, select "Login with TK-Ident App".  To log into a DiGA, e.g., the E-Rezept-App, select "Login with insurance app"

Which health apps are supported?
You can log into TK-Safe and all other digital health apps which already or will belong to the telematics infrastructure. These include, for example, the E-Rezept-App. Please note that both these links are in German.

DiGA can be both apps and web-based apps.

A DiGA and the TK-Ident App can be used on either the same or different devices. The TK-Ident App must be installed on a suitable device.

Possible constellations:

• TK-Ident App and DiGA (app or web-based app) on the same device (smartphone or NFC-enabled tablet)
• TK-Ident App: smartphone A, DiGA (app or web-based app): smartphone B
• TK-Ident App: smartphone, DiGA (app or web-based app): tablet
• TK-Ident App: smartphone, DiGA (desktop app or web-based app): desktop PC or laptop

TK-App with TK-Safe/DiGA and TK-Ident App on the same device
The TK-Ident App opens. You log into the TK-Ident App using your preferred method to use your TK-HealthID to log in.

The data required by TK-Safe or the DiGA are displayed. A DiGA should only request data which it actually needs. In case of doubt, ask the DiGA provider about the data required. 

You tick the data which you consent to being sent to the DiGA. If you do not consent to all the data being sent, it may not be possible to log into the DiGA. You will then have to start the DiGA login process again.  

Once you have given your consent, the requested data are transmitted to the DiGA and you will be logged in. 

TK-Ident App is not installed on the same device as the TK-App and TK-Safe/DiGA 
If you want to log into TK-Safe or a DiGA on a device on which the TK-Ident App is not installed, a TK website will be displayed in your standard browser. Here you can choose from the following options: 

• Install the TK-Ident App on this device
  If you select this option, you will be taken to your device’s app store. Here you can download, install and set up the TK-Ident App on this device. Open and start the DiGA again to log in as described in "TK-App with TK-Safe/DiGA and TK-Ident App on the same device".
• Install the TK-Ident App on another device
  If you select this option, you can scan the QR code shown with the other device. You will then be taken directly to the app store. There you can then download, install and set up the TK-Ident App. Open and start the DiGA again to log in as described in "Use the TK-Ident App on another device".
• Use the TK-Ident App on another device
  If you select this option, you can use your TK-Ident App on another device. Follow the steps below to do this:
  • Enter your insurance number on the website so that we can identify your request. 
  • Either start your TK-Ident App directly or scan the QR code using the device on which the TK-Ident App is installed.
  • Ensure that the information shown in the TK-Ident App relates to the DiGA you wish to use. If so, log in to the TK-Ident App using your preferred method.
  • Tick the data which you consent to being transmitted to the DiGA.
  • An authorisation code is shown in the TK-Ident App. 
  • Enter this authorisation code on the website.
  • On pressing "Next" the necessary data are transmitted to the DiGA and you are logged into the DiGA with your TK-HealthID.

Important
If you do not consent to the transmission of all the data requested by a DiGA, it may not be possible to log into this DiGA. In this case you have to start the login process again.
When you log in again (with the same authorisation) for the same DiGA, you do not have to consent to transmission again provided you have not revoked this. The TK-Ident App remembers what you have already consented to.

You can view the following in the settings / login & change history of the TK-Ident App: 

• when
• with which device and
• for which DiGA

you logged in using your TK-HealthID.

The use of biometrics to log into the TK-Ident App is currently not permitted by law.

In this case, you should firstly check the following:

• You have allowed all the data required for the DiGA to be transmitted.
• Your TK-HealthID and/or device are not blocked.
• Your authorisation to use the TK-HealthID with this device has not expired.
• Your TK-HealthID has not been deleted.
• The selected DiGA can be used with the TK-HealthID.

DiGAs should only request the data from the TK-HealthID which are required for login. If you have not ticked all the data and have thus not consented to transmission, it may not be possible for you to log in.

The TK-Ident App will notify you if the device or the TK-HealthID cannot be used (blocked, expired authorisation, TK-HealthID deleted, TK-HealthID PIN blocked). The app provides troubleshooting options and details on how to contact TK.

Check that your DiGA can be used together with the TK-HealthID. 

You will find an overview in German of all the DiGA offered by gematik here:

DiGA from gematik

Start the TK-Ident App and log in using your preferred method: 

• TK-HealthID PIN
• System PIN or password
• eHealth card and PIN
• ID card and PIN

When setting up the TK-Ident App, save your TK-HealthID PIN for the app on this device. You can then use this PIN to log into the TK-Ident App to manage your TK-HealthID and devices and to view your history (use of devices and the TK-HealthID).

You can also set the system PIN or system password as the preferred login method when setting up the TK-Ident App. 

You can change your preferred login method at any time in the TK-Ident App settings.

You can choose from the following:

1. The TK-HealthID PIN (valid for the device on which the TK-Ident App is installed)
2. The system PIN / system password (for the device in use) 
3. Your eHealth card with PIN 
4. Your ID card with PIN

If you cancel the login process when using methods 2, 3 or 4, you will be offered the option of logging in using method 1. 

The last two login methods are also offered as alternatives. These can be used, for example, if you have forgotten your TK-HealthID PIN.

The current legislation does not permit the use of biometrics to log into the TK-Ident App.

Start the forgotten "TK-HealthID PIN" function in the TK-Ident App. If your TK-HealthID PIN has already been blocked, either log in via an alternative method or identify yourself again to specify a new TK-HealthID PIN. 

Is your TK-HealthID PIN not blocked? In that case, you will be offered the forgotten "TK-HealthID PIN" function to renew your PIN on this device in the TK-Ident App.

Is your TK-HealthID PIN blocked? You can also renew your PIN from the screen with the error message in the TK-Ident App. For this, select "Identify" or "Login with an alternative".

You then identify yourself using your ID card and PIN or your eHealth card and PIN and specify a new TK-HealthID PIN. 

The law requires that you identify yourself again at certain intervals.

The TK-Ident App shows you when your access for the TK-HealthID on your device will expire. This means you can renew this authorisation in good time. 

To do so, identify yourself using either your ID card and PIN or your eHealth card and PIN.