Secure element

A secure element is a tamper-proof chip with pre-installed software that can store confidential and cryptographic data and run secure applications.

If you have used contactless payments, tapped a passport at a border gate, or unlocked a phone with a fingerprint, you have already relied on one. The technology is mature and unglamorous — which, for something holding central bank money, is exactly the right property.

Its role in the digital euro#

The secure element is where the offline digital euro actually lives. Value is stored on the secure element on the user's device, and payments happen device-to-device over NFC.

This is what makes offline payment possible at all. If the value were merely a number in an app's database, nothing would stop a user copying it, rolling it back, or spending it twice while disconnected. A tamper-proof chip is the answer to the double-spend problem when there is no central platform available to arbitrate — because there is no connection.

Why "tamper-proof" is load-bearing#

Take the guarantees apart:

• Storing confidential and cryptographic data — the keys never leave the chip in a form software can read.
• Running secure applications — the logic that decides whether a payment is valid executes inside the protected boundary, not in the phone's ordinary operating system.

The security assumption is that an attacker with full control of the device still cannot extract or forge what is inside the element. Everything about offline digital euro integrity rests on that.

The practical consequence#

Offline digital euro is bounded by hardware. It requires a device that has a secure element and can expose it for this purpose — which is a supply chain and device-support question as much as a software one.