NIMC Takes over NITDA PKI for Nigeria Digital Identity

In Short

NIMC is now responsible for Nigeria’s Public Key Infrastructure, after a formal handover from NITDA.

What Happened

Nigeria’s National Identity Management Commission, NIMC, has taken over the Public Key Infrastructure, PKI, framework previously managed by the National Information Technology Development Agency, NITDA.

PKI is the security system that uses digital certificates and encryption to prove who is who online, like a tamper-proof digital ID card used by websites and apps. It helps prevent impersonation and makes it safer to sign documents, log in to services, and approve transactions digitally.

NITDA announced the transfer during a handover ceremony at its headquarters in Abuja. NITDA’s Director General, Kashifu Inuwa Abdullahi, said the agency has done foundational work on PKI and Digital Public Infrastructure, DPI, and will support NIMC to ensure a smooth transition.

DPI is the shared technology rails that let governments and businesses build services faster, like identity systems, payment rails, and data exchange layers. In Nigeria’s case, this includes identity verification tied to the National Identification Number, NIN.

The handover follows the signing of the NIMC Act 2026, which expands NIMC’s powers. Under the amended law, NIMC is positioned at the centre of Nigeria’s digital identity, authentication, and electronic trust framework, and it is designated as the Root Certification Authority for the national PKI.

Why It Matters

For founders, banks, fintechs, and developers building products that depend on KYC, onboarding, and authentication, a clearer owner for PKI could reduce duplication across agencies. It may also make integration decisions more predictable as identity databases are harmonised around NIN.

For citizens and public services, stronger PKI governance can improve the security of digital government services, especially where login and identity checks are required. The real test will be how quickly NIMC can operationalise the infrastructure, publish technical guidelines, and keep the system reliable at national scale.