From 18 November 2025, identity verification became a legal requirement for directors, the equivalent of directors – including general partners and managing officers – and persons with significant control (PSCs).
Companies House estimates that 6 to 7 million individuals will need to verify their identity. To help everyone prepare, new details were released on how the personal code – issued after identity verification – should be used and managed.
What is a personal code?
Once an individual’s identity is verified, they are issued an 11-character personal code that is unique to them – not to any specific company. For directors of multiple companies, identity verification is only required once, as the same personal code can be used to confirm their verified status for each appointment The location of the code depends on the verification method:
- Those using GOV.UK One Login can find it under ‘Manage account’.
- Individuals verified through an Authorised Corporate Service Provider (ACSP) will receive their code by email.
Individuals verifying their identity through an ACSP should also save their personal code to a Companies House account. To do so, they must sign in, confirm their identity has been verified, and enter both their personal code and date of birth.
PSCs have a 14-day period during which they must submit a statement confirming they have verified their identity, along with their personal code – this will be done via an online service that goes live from 18 November. Further details on the requirements for PSCs can be found here.
What the Personal Code is used for
The code will be required for a range of activities, including filing a confirmation statement. New directors will also need to provide it as part of their appointment filing or when they incorporate a company.
Looking ahead, the code may also be needed to file documents on behalf of a company.
Security and sharing
Personal codes should only be shared with trusted individuals who file documents on the individual’s behalf – such as an accountant – and must be stored securely.
If a personal code is shared in error or compromised, Companies House can issue a new one. The replacement code will be sent by email, and the previous code will be cancelled to maintain security.
Remain alert
With the identity verification scheme rolling out over 12 months, there is an extended window during which fraudsters may attempt to exploit the process. Directors and PSCs should remain alert, use only official channels for verification, and be wary of any unsolicited requests for personal or sensitive information.
How M+A Partners can help
For any queries on filing information with Companies House or the new identity verification requirements, please get in touch with your usual M+A Partners’ contact or email enquiries@mapartners.co.uk. Further details on the identity verification requirements and timeframe can be found here in our earlier release.