Agência Nacional of Segurança Cibernética (ANCI) of Chile recommended the immediate change of passwords for Chave Única users after confirmation of an active leak in public bodies and telecommunications companies. Michelle Bordachar, acting national director of ANCI, revealed that an employee at one of the affected institutions had their credentials stolen, allowing unauthorized access to government data. Secretaria of Governo Digital clarified that the platform remains 100% operational and secure for all online procedures.
The leak was discovered over the weekend by the cybersecurity company Vecert Analyzer, which identified breaches in the Registro Civil and Identificação systems, leading thousands of Chilean citizens to seek guidance on data protection. Bordachar explained the mechanism of the incident: “An employee of this institution had his username and password stolen, and someone gained access posing as him. Assim we alerted the institution, they closed all access points and the information leakage stopped.”
What exactly is Chave Única
Chave Única works as an official unified digital authentication system for Chilean citizens over 14 years of age who have a valid identity document. Criada in 2010 as a government policy to expand electronic administration, the platform allows access to more than 1,600 Estado procedures and services. Ela links to Cadastro Nacional Único (CNU) and works exclusively with a personal password, as defined by Secretaria of Governo Digital.
The importance of this credential lies in its centrality to digital identity. Lilio Tapia Zagal, Cibersegurança and Desenvolvimento Seguro expert at Nodoware, compared the situation: “It’s a single key that opens your house, your car, your safe and your office, all at the same time.” With Chave Única, users request background checks, apply for social benefits, transfer money with Receita Federal, view information on Fonasa, and sign documents on Registro Civil.
Processo to get Chave Única
Cidadãos can obtain Chave Única through two channels: via video conference requested on the Registro Civil website or in person at service units. In both cases, the procedure follows similar steps: verifying identity with a document, providing a photograph of the face and confirming or updating personal information. Dados such as email address, home address and telephone number must be updated as necessary.
The process is free for candidates and is valid for life. However, authorities recommend regular maintenance of registration data. Secretaria of Governo Digital highlights that the platform offers a “paperless office” service for most Chilean public procedures.
Passo step by step to change password
ANCI advised that changing your password only takes five minutes and presents a much lower risk than omitting security. Usuários with active access can follow a simple procedure:
- Acesse the official portal at claveunica.gob.cl
- Dirija go to the “My Perfil” section
- Selecione the “One-key password” option
- Siga instructions for creating a new password with at least eight characters, including capital letters, numbers and symbols
Para For those who have forgotten their password but still have access to the linked email, there is an online recovery alternative. Citizens access the official website, click on “Recover your ClaveÚnica online” at the bottom of the page, enter their routine and choose a verification method between email or SMS. Após receive verification code, user clicks recovery link, enters RUT with code and creates new secure password.
Cidadãos without access to the registered email must reactivate Chave Única in person with Registro Civil or via video call, presenting a valid national identity document and requesting an activation code.
Verificando exposure of personal data
ANCI launched the Ciberlupa tool a few months ago for Chileans to check whether personal data has been leaked since mid-2025. The platform represents an official initiative to protect against fraud, identity theft and cybercrime. Usuários enter their email address on the website Cyberlupa.anci.gob.cl and receive information about detected vulnerabilities.
The verification process follows six steps. Primeiro, go to the official Ciberlupa website and click “Authenticate”. Then review information associated with the email in the tool’s database. If data appears, check whether it corresponds to accounts that are still active, especially important services like banks. Para accounts still used, change the password immediately on the corresponding website and, if you use the same password on other platforms, update it on those places as well.
If the service offers two-factor authentication, activate it as an additional layer of protection. Caso multi-factor authentication use email, also change the email account password. ANCI also offers an “Senhas Generator” that creates random words to increase account security.
Recomendações in case of confirmed breach
Bordachar emphasized that citizens who have not changed their Chave Única for more than a year or two should do so, as they probably reuse the same password on multiple platforms that may have suffered leaks. “The problem is using the same key for everything”, warned the director.
ANCI recommends three immediate actions for those affected by leaks: change leaked passwords on all services, check that account security data has not been modified and activate multi-factor authentication methods that are not yet active. Essas measures significantly reduce risks of unauthorized access and digital identity fraud in the context of the incident confirmed by authorities.