Director identity verification: what you must do

Last reviewed: 29 September 2026 · Reviewed by IFM's qualified accountant

The requirement is part of the Economic Crime and Corporate Transparency Act reforms. Its purpose is to make it harder to use the companies register dishonestly and to give Companies House more confidence that people are who they say they are. It applies to people, not companies: one person verifies once and can use the same personal code for every company role they hold.

This guide covers the practical position for directors of UK companies. It does not cover every category of person who may need to verify, and Companies House is introducing requirements for some roles in stages. Check the current GOV.UK guidance before acting.

What must a company director do?

There are two distinct steps:

verify your identity; and
connect that verified identity to each company role by providing your Companies House personal code when required.

Verification alone does not complete the process for a particular directorship. The personal code is the link between the verified person and the company record.

Existing directors normally provide their code as part of the company's confirmation statement process during the applicable transition arrangements. A person becoming a director must follow the process that applies to a new appointment. GOV.UK explains the current timetable and the point at which a code must be supplied. Because implementation is staged, use the live service instructions rather than relying on an old checklist.

How can a director verify their identity?

There are two principal routes.

You can verify directly with Companies House through GOV.UK One Login. The online service asks questions about your identity and may use a smartphone app, web browser or Post Office route, depending on the documents and technology available to you. GOV.UK lists the accepted evidence and explains what to do if you cannot use a particular route.

Alternatively, you can use an Authorised Corporate Service Provider, or ACSP. An ACSP is an organisation registered with Companies House to provide identity verification services. Accountants and company formation agents do not become ACSPs automatically. If you want an adviser to verify you, first confirm that the organisation is registered for that purpose and ask what evidence it will need.

Which evidence may be needed?

The evidence depends on the route and the information available. GOV.UK may ask for a biometric passport, a UK photocard driving licence, answers based on your financial history or an in-person check at a Post Office. An ACSP must follow the Companies House identity-checking standard and retain appropriate records.

Use your current details and make sure names are consistent across the identity document, Companies House record and application. A difference caused by a middle name, previous name or spelling is not something to work around informally. Follow the service prompts and provide supporting evidence where requested.

Verification is not the same as sending a copy of a passport to Companies House by email. Use the official GOV.UK service or the secure process specified by a registered ACSP. Be cautious with unexpected messages asking for identity documents or a personal code.

What is a Companies House personal code?

After successful verification, Companies House issues an 11-character personal code. It is personal to you, not to one company. If you are a director of several companies, the same code connects your verified identity to each relevant role.

Keep the code secure. Companies House says you may need to share it with a trusted person who files on your behalf, such as an accountant, solicitor or company secretary. Share it only where necessary and through an agreed secure method. Do not publish it or include it in general correspondence.

The code is not a password for signing in to GOV.UK One Login, and knowing it does not give somebody access to that account. It is still sensitive because it is used to connect your verified identity to company appointments.

If you verified through an ACSP, the provider should give you the personal code after the process is complete. Confirm that you have received it and retain it somewhere accessible to the people who control statutory filings.

How do existing directors use the confirmation statement?

For an existing director, the transition is tied to the company's confirmation statement. Companies House guidance says that each director must provide their personal code for the first confirmation statement filed during the relevant transition period. The company cannot simply state that verification happened; it must provide the code in the required way.

This makes preparation important. Before the confirmation statement is due:

list every current director;
ask each director to complete verification;
obtain the personal code through an appropriate secure channel;
check that the director's name and details match the register; and
allow time to resolve a failed or incomplete verification.

The confirmation statement is a legal filing in its own right. Identity verification does not replace the need to review the registered office, officers, people with significant control, share information and other register details. The company must still confirm that its information is correct.

Use the Deadline Finder for standard first accounts, first confirmation statement and Corporation Tax dates. For VAT, payroll, personal tax and other obligations, check the tax deadlines calendar and your official records.

What must new directors and companies do?

Someone appointed as a director must meet the verification requirements that apply at the time of appointment. For a new incorporation, the filing process may require personal codes for proposed directors. For a later appointment, the person or filer must provide the relevant information through the prescribed route.

Do not appoint somebody on the assumption that verification can be sorted out indefinitely afterwards. Ask the proposed director to verify early, especially if an incorporation, bank application, investment or contractual commitment depends on the appointment being recorded promptly.

Identity verification does not decide whether a person is legally eligible to act. The company must still consider age, disqualification, restrictions and any conflict or governance requirements. Companies House acceptance of a filing is not legal advice on the appointment.

How does verification apply to PSCs and other roles?

The reforms extend beyond directors. Companies House guidance describes how identity verification applies, or will apply, to people with significant control and to people who file information. Commencement dates and processes are not identical for every role.

If the same person is both a director and a person with significant control, keep a record of both capacities. One verified identity and personal code can be used, but the company may need to connect that identity to more than one role.

Check the current guidance if the company has corporate directors, overseas officers, trustees, nominee arrangements or a complex ownership structure. Those cases can require additional analysis and should not be reduced to a standard small-company checklist.

What should you do if verification fails?

A failed online attempt does not mean you can ignore the requirement. Read the reason shown by the service and follow the alternative route it offers. You may be able to use different evidence, attend a Post Office or use an ACSP.

First compare the details carefully. Common practical issues include an expired document, a recently changed address, a name presented differently across records, or a document that the selected route does not accept. Correct genuine errors through the proper process rather than altering accurate information simply to force a match.

If a deadline is close, keep evidence of the steps taken and seek help promptly. Do not send identity documents to an unverified email address or upload them to a service reached through an unsolicited link.

What verification records should the company keep?

Maintain a simple verification register showing each relevant person, the roles held, whether verification is complete, when the personal code was connected to each role and who controls the secure filing record. Avoid copying passports into a general company folder unless there is a clear lawful and security reason to retain them.

Personal codes and identity evidence require sensible access controls. Limit access to the people who need it, use secure transfer methods, and review whether documents should be deleted after the relevant retention obligation ends. If an ACSP handled the check, it has its own legal record-keeping duties.

Update onboarding and appointment procedures so identity verification happens before it becomes a filing emergency. Include it in the annual confirmation statement review, while remembering that a person ordinarily verifies once rather than every year.

What practical action should directors take now?

Start by identifying all directors and other people currently brought into scope. Ask each person which route they will use and set an internal date well before the statutory filing. Store the resulting code securely, confirm that it has been connected to every required role, and keep an audit note of the filing acceptance.

If somebody else makes Companies House filings, agree who will request and enter codes. Responsibility should be explicit: a vague assumption that another adviser has the information is a common source of last-minute delay.

For help coordinating company records and filing preparation, see the company formation and secretarial service. The director remains responsible for completing personal identity steps and for the accuracy of information supplied.

What should you read next?

What do people also ask about this topic?

When did Companies House identity verification become compulsory?

Identity verification became a mandatory legal requirement from 18 November 2025. The way a person connects their verified identity depends on whether they are an existing director, a new director or a PSC. Check the current GOV.UK route before the relevant filing.

How do I verify my identity for Companies House?

You can verify directly through GOV.UK One Login or use an Authorised Corporate Service Provider. The available direct route can use an app, browser, security questions or an in-person Post Office check depending on your documents and circumstances. Use only official or authorised services.

Do I need a different personal code for each company?

No. Companies House issues one 11-character personal code to the verified individual. The same code is used to connect that person to each director or PSC role. Keep it secure and share it only with a trusted person who genuinely needs it for filing.

What happens if I cannot verify my identity online?

Follow the alternative route offered by the service. Different documents, a Post Office check or an authorised agent may be available. Compare your legal name, date of birth and address details carefully. If a filing deadline is close, start resolving the issue immediately.

Which official sources support this guide?

General guidance, not advice for your situation.