Aadhaar Number Validator: Complete Guide to Aadhaar Format, Verhoeff Algorithm & Privacy in 2026

India's Universal Identity Infrastructure

Aadhaar (meaning "foundation" in many Indian languages) was conceptualized in 2009 and the first number was issued in 2010. Unlike a PAN card (which is a tax identifier) or a voter ID (which is electoral), Aadhaar is a universal identity — tied to your biometrics (fingerprints and iris scans) and demographic data (name, date of birth, address). UIDAI maintains the central Aadhaar database called CIDR (Central Identities Data Repository).

The 12-digit Aadhaar number is the key that links a person to their biometric record in CIDR. Every time someone "authenticates" with Aadhaar — at a bank, a ration shop, an e-KYC request — they're essentially saying: "This 12-digit number + my biometric/OTP proves I am who I claim to be." If the 12-digit number is invalid, the entire authentication chain breaks.

Why Format Matters Before Authentication

Before you submit an Aadhaar number anywhere — to a bank form, an ITR, a subsidy application — running a format check is essential because:

• A structurally invalid Aadhaar number will immediately fail the authentication API
• Entering someone else's valid Aadhaar by mistake ties your transaction to the wrong identity
• Typos in Aadhaar can cause KYC failures that delay account opening, loan processing, or subsidy delivery by weeks
• For businesses doing bulk Aadhaar-based verification, format pre-validation reduces API costs by filtering out invalid numbers before they're submitted

Basic Format Rules

Is There Hidden Information in Your Aadhaar Number?

This is one of the most common misconceptions about Aadhaar. People assume, by analogy with PAN (which encodes taxpayer type and name initial), that Aadhaar digits encode geography, date of birth, or gender. They do not.

UIDAI explicitly designed Aadhaar to be a random number with no personally identifiable information encoded in the number itself. This is a deliberate privacy decision — if the number itself revealed your state or birth year, it would make certain inferences possible just from the number.

What IS Encoded in an Aadhaar Number

How Aadhaar Numbers Are Actually Assigned

When you enroll at an Aadhaar enrollment center, your biometrics and demographics are captured and sent to UIDAI's CIDR. CIDR checks for uniqueness (no existing biometric match), then generates a new Aadhaar number using a cryptographically secure random number generator. The last digit is computed as the Verhoeff check digit. The number is then permanently linked to your biometric record.

The "No Information" Design Is Also a Security Feature

Since Aadhaar numbers are random (beyond the format rules), you cannot "guess" a valid Aadhaar number for a specific person based on their demographics. Even if you know someone's name, date of birth, and address, you cannot derive their Aadhaar number. This is fundamentally different from systems like the US Social Security Number, where the first three digits used to correspond to the state of issuance.

What Is a Checksum and Why Does Aadhaar Need One?

A checksum is a calculated value derived from the other digits of a number. It serves as a built-in error detector. When you type an Aadhaar number, a validator can compute the expected checksum from the first 11 digits and compare it to the 12th digit. If they match, the number is structurally valid. If they don't match, at least one digit was entered incorrectly — no database query needed.

UIDAI chose the Verhoeff algorithm for Aadhaar's check digit. Named after Dutch mathematician Jacobus Verhoeff, this algorithm was specifically designed to detect the types of errors most common in human data entry:

• Single-digit errors: Changing any one digit (e.g., 5 → 6)
• Adjacent transpositions: Swapping two neighbouring digits (e.g., ...34... → ...43...)
• Most twin errors: 55 → 44 or similar patterns

How Verhoeff Works — Simplified

The Verhoeff algorithm uses three mathematical tables:

1. Multiplication table (d): A 10×10 table defining how to combine two digits
2. Permutation table (p): A 10×8 table that "mixes" digits based on their position
3. Inverse table (inv): Maps a value to its inverse in the multiplication group

For validation: you start with a check value of 0. For each digit (right to left), you apply the permutation based on position, then combine with the running check value using the multiplication table. If the final check value is 0, the Aadhaar number is valid.

Why Not Just Use the Luhn Algorithm (Like Credit Cards)?

The Luhn algorithm (used by credit cards) detects all single-digit errors and most adjacent transpositions — but it misses some twin errors (e.g., 22 → 44). The Verhoeff algorithm is strictly more powerful and detects all transposition errors, not just most of them. UIDAI specifically chose Verhoeff for this reason — Aadhaar is used for high-stakes authentication where even rare error patterns must be caught.

What Verhoeff CANNOT Detect

The Crucial Difference

Format validation and Aadhaar authentication are often confused — even by developers building KYC systems. Here's the definitive clarification:

Level 1: Format Validation (What Our Tool Does)

Checks: Is the number 12 digits? Does it start with a non-zero digit? Does the Verhoeff check digit match?

Result: "This number could be a valid Aadhaar" or "This number has a structural error."

No internet required. No UIDAI API call. No data transmitted. Instant.

Level 2: Aadhaar Existence Check

UIDAI's "Verify Aadhaar" service (available at myaadhaar.uidai.gov.in) checks whether a given 12-digit number actually exists in the CIDR database. It confirms existence but doesn't authenticate identity.

Level 3: Aadhaar Authentication

This is what banks and telecom operators use for KYC. The person presents their Aadhaar number AND provides biometric (fingerprint/iris) or OTP-based verification. UIDAI's authentication API confirms: "Yes, this Aadhaar number exists AND the biometric/OTP matches the record."

The Ecosystem: What Each Level Is Used For

• Format validation: Data entry, form validation, bulk Aadhaar list cleaning
• Existence verification: Initial check before KYC, checking a beneficiary's Aadhaar before subsidy disbursement
• OTP authentication: Online bank account opening, mutual fund KYC, SIM card activation
• Biometric authentication: Ration shop PDS, Jan Dhan account opening, EPFO attendance
• eKYC: Full digital onboarding with demographic data for financial products

The Problem With Sharing Your Full Aadhaar

Aadhaar has become so ubiquitous that photocopies of Aadhaar cards are routinely collected by landlords, hotels, petrol stations, courier services, gyms — entities that have no legal right to collect or store Aadhaar data. This creates a massive identity theft risk because anyone with your full 12-digit Aadhaar number can try to misuse it in Aadhaar-enabled services.

UIDAI has created two solutions to this problem: Masked Aadhaar and Virtual ID (VID).

Masked Aadhaar

A Masked Aadhaar is a version of your Aadhaar card/PDF where only the last 4 digits of your 12-digit Aadhaar number are visible — the first 8 digits are replaced with "XXXX XXXX." The rest of the card (name, address, photo, QR code) remains intact.

• Purpose: Share for identity proof where the actual Aadhaar number isn't needed for authentication
• Where to get it: Download from myaadhaar.uidai.gov.in → Download Aadhaar → select "Masked Aadhaar" option
• Legally valid: Yes — Masked Aadhaar is an officially recognized identity proof
• QR code: The QR code on a Masked Aadhaar still contains encrypted identity data; do not share with untrusted parties

Virtual ID (VID)

A VID is a temporary, revocable 16-digit number that maps to your Aadhaar. Instead of sharing your actual Aadhaar number, you can share a VID. Organizations can authenticate you using the VID, but they cannot derive your actual Aadhaar number from the VID.

UIDAI's Rules on Who Can Collect Aadhaar

Under Section 29 of the Aadhaar Act and subsequent UIDAI circulars:

• Aadhaar can only be collected with the explicit consent of the Aadhaar holder
• The collector must inform the holder of the purpose
• Aadhaar data cannot be stored in physical or digital form by entities not authorized by UIDAI
• Hotels, landlords, gyms, and similar entities have no legal basis to collect or store your Aadhaar number
• Violation of Aadhaar data protection provisions can result in imprisonment up to 3 years and/or fine

Aadhaar-PAN Linking: The Current Status (2026)

The Supreme Court and the Finance Ministry have made Aadhaar-PAN linking mandatory for individuals who are eligible to obtain Aadhaar. The implications are significant:

• Deadline passed (2023): PANs not linked to Aadhaar by the government's deadline were made "inoperative"
• Late fee: You can still link Aadhaar to PAN in 2026 by paying a penalty of ₹1,000 (late fee under Section 234H)
• Inoperative PAN consequences: TDS at 20%, TCS at twice the normal rate, refunds withheld, investment limit violations
• How to check: incometax.gov.in → Link Aadhaar → check status
• How to link: Same portal — enter PAN and Aadhaar, pay ₹1,000 challan (if applicable), request link, validate OTP on Aadhaar-linked mobile

Aadhaar-Mobile Number Linking

Your mobile number must be linked to your Aadhaar for:

• Receiving OTPs for Aadhaar-based authentication
• Using the m-Aadhaar app
• Generating and updating Virtual ID
• Downloading e-Aadhaar and Masked Aadhaar
• Using DigiLocker (which uses Aadhaar OTP for some functions)

How to Update Mobile in Aadhaar

Mobile number updates in Aadhaar must be done offline — at an Aadhaar enrollment center. You cannot update your mobile number online through the UIDAI portal if your current mobile is not linked (because the OTP verification uses the existing linked mobile). The offline update requires:

1. Visit any Aadhaar enrollment center (Aadhaar Seva Kendra, post offices, banks)
2. Fill in Aadhaar Update/Correction Form
3. Provide biometric verification (fingerprint or iris)
4. Pay the update fee (currently ₹50)
5. Mobile is updated within 7–10 working days

Aadhaar in EPFO and Pension Systems

Your Aadhaar is now the primary identifier for EPFO accounts. Linking Aadhaar with your UAN (Universal Account Number) enables:

• Online PF withdrawal without employer approval
• Auto-transfer of PF when changing jobs
• e-Nomination for PF and pension

Issue 1: Name Mismatch Between Aadhaar and PAN/Bank

This is the most common issue. Your name in Aadhaar (as it appears in the UIDAI record) must exactly match your name in PAN, bank accounts, and other official documents for KYC and linking to work seamlessly. Minor mismatches (different spelling, missing middle name) cause linking failures.

Resolution: Update your name in Aadhaar to match your PAN (preferred, since PAN name is harder to change) via myaadhaar.uidai.gov.in → Document Update — or visit an Aadhaar Seva Kendra.

Issue 2: Aadhaar OTP Not Received

This typically means your mobile number is not linked to your Aadhaar, or your registered mobile number has changed/been deactivated.

Resolution: Visit an Aadhaar enrollment center to update your mobile number (offline process, takes 7–10 days). In the interim, use the TOTP (Time-based OTP) from the m-Aadhaar app if your old mobile is still accessible.

Issue 3: Aadhaar Locked / Biometric Lock

UIDAI provides a biometric lock feature that prevents your Aadhaar biometrics from being used without your explicit unlock. If biometric authentication fails consistently, check if your Aadhaar biometrics are locked.

Resolution: Unlock biometrics at myaadhaar.uidai.gov.in → Biometric Lock/Unlock. Temporarily unlock for authentication, then re-lock immediately after.

Issue 4: Aadhaar Number Shows "Invalid" Everywhere

If your Aadhaar passes format validation (Verhoeff check) but fails at actual authentication or verification sites, possibilities are:

• Aadhaar may be deactivated by UIDAI (rare, typically for fraud cases)
• Demographic data mismatch (name/DOB entered doesn't match UIDAI record)
• Technical issues with UIDAI servers (check status.uidai.gov.in)

Issue 5: Lost Aadhaar Card — How to Get It

You don't need the physical card. The e-Aadhaar PDF is legally equivalent to the physical card. Download from myaadhaar.uidai.gov.in → Download Aadhaar using your Aadhaar number or enrollment ID + OTP. If you've forgotten your Aadhaar number, retrieve it via "Retrieve Lost UID/EID" on the same portal using your registered mobile.