The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Short answer: the Autumn Budget delivered a specific additional £300 million of NHS technology capital investment. The often-quoted £1.8 billion for digital ID was different: a provisional Office for Budget Responsibility (OBR) estimate of what the proposed scheme could cost over three years, not a clearly itemised new Budget grant. The government says the scheme will be funded from existing budgets, while the OBR noted that specific savings had not been identified.
The two headline figures are not equivalent
Autumn Budget 2025, delivered on 26 November 2025, put a defined extra capital commitment beside an estimated future cost. Treating both as Budget allocations overstates what was actually appropriated.
| Figure | What it represents | Status |
|---|---|---|
| £300m | Additional NHS technology and digital-transformation capital investment | Budget announcement, focused on the NHS in England |
| Up to £10bn by 2028–29 | Wider NHS technology and transformation settlement, including the NHS App and a single patient record | Spending Review 2025 commitment, not all newly announced in the Budget |
| About £1.8bn over three years | Provisional estimated implementation cost for the proposed digital-ID scheme | OBR forecast reported from its supporting analysis; not a specified new Treasury allocation |
The Budget document describes the NHS money as additional capital investment. The digital-ID number comes from fiscal forecasting reported by Computer Weekly, which said the OBR split the estimate into approximately £500m of operating expenditure and £1.3bn of capital expenditure.
What the £300m NHS technology investment is intended to do
The government’s Budget description links the additional capital to productivity, staff support and patient outcomes. It is intended to help the NHS:
#1 Best Overall
- FIDO2 SECURITY: Advanced USB-C security key providing FIDO2 authentication protocol support for enhanced login protection
- NFC COMPATIBILITY: Features both USB-C connection and NFC wireless capability for flexible authentication options across devices
- UNIVERSAL SUPPORT: Works seamlessly with major platforms and services that support FIDO2 authentication standards
- COMPACT DESIGN: Small, portable form factor makes it easy to carry on a keychain or in a pocket for security on-the-go
- DURABLE CONSTRUCTION: Robust blue casing protects the internal components while providing clear visibility of the device status
- expand the NHS App as a single, easier-to-navigate front door;
- improve communication between primary and secondary care;
- give patients better access to digital health records;
- make it easier to move between primary care, hospital care, self-care and urgent care; and
- provide digital tools that reduce avoidable administrative work for staff.
A government announcement before the Budget also highlighted automation of administrative tasks, faster access to patient information and more coordinated care. Those are policy objectives, not evidence that the benefits have already been achieved.
What the announcement does not specify
The headline material does not allocate the £300m between the NHS App, interoperability, cyber security, artificial intelligence, infrastructure, procurement or local NHS organisations. Nor does “capital investment” mean that every pound is immediately spendable cash: projects still need business cases, procurement and implementation capacity.
The wording also concerns the NHS in England. Scotland, Wales and Northern Ireland operate different health systems and funding arrangements, so the English announcement should not be read as a uniform UK-wide NHS technology grant.
Why the wider £10bn programme matters
The £300m is best understood as an increment to a larger programme set out in the Spending Review 2025, which provides up to £10bn for NHS technology and transformation by 2028–29.
Rank #2
- Bio-Tap to login: Truly PASSWORDLESS and PINless security key. Cross-device, phishing-resistant login. Fingerprint stays with you—never lost or copied. FIDO2 (Passkey) and U2F login via fingerprint. Works with usb fingerprint reader & USB-C.
- Online web login (Windows): Use WebAUTHN browsers (Chrome, Edge) with contactless NFC or smart card reader to log in to Passkey-enabled sites. Supports laptops, usb hub setups, and fingerprint reader functionality.
- Online web login (Mac & iPhone): Works on Safari with contactless NFC or card reader, or use iPhone NFC. Supports Apple Mac devices and Passkey login. Ideal for two-factor authentication and users of usb security key or yubico alternatives.
- Digital Business Card: Partner with Tapni to activate card as NFC-enabled digital business card. Tap to Phone or Bio-Tap to connect instantly. Share profile like a smart thumb drive. Supports encrypted flash drive-style data linking.
- Device login (Windows only): Use Bio-Tap for Entra ID logins via contactless or contact reader. Or subscribe to ATKey.Login to use ATKey.Card NFC for secure access. Compatible with usb ports and Apple PC biometric authentication.
That programme envisages the NHS App becoming a “digital front door” for tasks such as medicines and prescriptions, secure communications and direct access to some services, including tests. It also includes a single patient record intended to give authorised users a unified view of medical history and support two-way communication with patients.
The App is the user-facing layer; it is not, by itself, a complete electronic patient-record system. Delivering the promised experience depends on connecting GP, hospital, community and other systems, improving data quality and changing clinical workflows. A central app cannot solve fragmented underlying systems on its own.
Why calling £1.8bn a digital-ID “budget” is misleading
The £1.8bn figure is a provisional forecast for the next three years from the Budget planning horizon. It is not presented as a separately itemised new department-by-department allocation.
According to Computer Weekly’s account of the OBR analysis, approximately £500m is operating expenditure and £1.3bn is capital expenditure. The government said it expected to meet the cost from existing budgets; the OBR reportedly said that no specific savings had been identified. That leaves unanswered questions about which departments will absorb the spending, what services could face trade-offs and how later operating costs will be funded.
Rank #3
- PKI FIDO2 SECURITY KEY: This USB-A security key combines X509 digital certificates (PKI) and FIDO for maximum protection. Supports digital signatures, file encryption, and phishing-resistant authentication based on FIDO or PKI. FIDO 2.0 level 1 and U2F certified
- PASSWORDLESS CONVENIENCE: Replace frustrating passwords with a simple 4-digit PIN for accessing apps and sites. Seamlessly login to web apps and Windows sessions
- BROAD COMPATIBILITY: Works with Windows, Linux and USB-A devices. Seamlessly integrates with Identity Providers or Credential Management Systems supporting FIDO2, ensuring secure use across various platforms, including Thales, Microsoft, AWS, and Google
- ENHANCED USER ADOPTION: Features a sensitive presence detector on the USB key, providing ease of use and superior security. Certified for U2F and FIDO2, ideal for individuals who want to secure access to their personal online accounts - Microsoft, Google, Twitter, Facebook, GitHub
- THALES: We offer a wide range of FIDO authenticators, providing robust, phishing-resistant MFA that comply with stringent regulations. With almost three decades of experience, Thales is a pioneer in passwordless authentication devices, supported globally by the FIDO Alliance and industry analysts
It is therefore accurate to call £1.8bn an OBR cost forecast or estimated implementation cost. It is not accurate to say the government has spent £1.8bn, or that the Budget transferred that amount to a digital-ID programme.
What the proposed digital ID would be
The government’s 26 September 2025 announcement describes a digital credential stored on a person’s phone, rather than a conventional physical identity card. It is intended to be available to UK citizens and legal residents.
Proposed information includes a name, date of birth, nationality or residency status and photograph. Address or other attributes could be added following consultation. Stated uses include applying for a driving licence, childcare or welfare, accessing tax records and using public services.
What is mandatory
The confirmed mandatory use is for Right to Work checks by the end of the Parliament. That does not mean every interaction with government, or every private-sector identity check, will automatically require the credential. Availability, mandatory employment checks and any future expansion are separate policy questions.
Recommended Free Tools
Rank #4
The announcement says credentials can be revoked and reissued if a phone is lost or stolen. The practical test will be whether recovery works quickly for people without a working device, reliable connectivity or easy access to support.
Architecture and governance questions remain open
Spending Review documents also refer to the GOV.UK Wallet, GOV.UK App and verifiable digital credentials. Public material does not yet fully establish whether the proposed identity is a new platform, a credential layer built on GOV.UK infrastructure, an extension of GOV.UK One Login or a separate system that will later integrate with it.
Before large-scale procurement, Parliament and the public will need clarity on:
- the technical architecture and identity-proofing standards;
- which department owns the service and who is accountable for failures;
- how records are matched and corrected when names, dates of birth or status data are wrong;
- what non-smartphone and assisted-digital routes remain available;
- how much long-term operation, support, replacement and cyber security will cost; and
- what prevents use expanding beyond the original policy purpose.
Delivery risks for a national credential
Legacy integration and data quality
Every department and participating employer must be able to accept and verify the credential reliably. Inconsistent standards, departmental silos and poor-quality identity records could absorb substantial funding. A false mismatch could delay work or exclude someone from a service, while correcting it may require human support.
Free tools Windows power users keep installed
One-click scans. No signup required.
Best Value
- FIDO2 CERTIFIED: FIDO Alliance Certified FIDO2 v2.1 and CTAP Level 1 for 2FA and MFA on Google Microsoft Apple GitHub login.gov AGOV SwissID and any WebAuthn service
- PASSKEY READY: Works as a hardware passkey for passwordless sign-in where the service enables it and as a U2F and WebAuthn security key everywhere else
- CERTIFIED SECURITY: NXP JCOP 4.5 secure element rated Common Criteria EAL6+ (augmented)
- TAP OR INSERT: Dual NFC ISO 14443 and contact ISO 7816 interface in an ID-1 format smart card that is passive and battery-free
- BUILT TO LAST: Passive smart card made in Switzerland designed by Swiss company Cryptnox and backed by a 2 year manufacturer warranty
Inclusion
A phone-held credential creates practical problems for people without smartphones, with limited connectivity or digital confidence, disabilities affecting device use, an uncharged or broken phone, or unstable housing. A lost phone must not become a lost ability to work or access public services. “Free to users” would not mean free to taxpayers, employers or departments if assisted enrolment and alternatives must be maintained.
Security and fraud
Digital credentials may reduce some document fraud while concentrating risk elsewhere: account takeover, SIM-swap attacks, phishing, device theft, fraudulent enrolment, insider misuse and compromise of central infrastructure. Strong authentication, selective disclosure, recovery controls and independent oversight matter as much as initial enrolment.
Function creep
The initial employment-check purpose could create pressure to use the credential for benefits, tax, renting, banking, age assurance, education or health services. Those are possible extensions, not all confirmed uses. Each would require its own legal, privacy and value-for-money assessment.
What the programmes could mean for suppliers
The NHS investment could generate procurements in electronic patient records, interoperability, patient-identity matching, workflow and administrative automation, secure messaging, cloud infrastructure, cyber security, data quality, digital diagnostics and accessibility. The £300m does not automatically become vendor revenue: NHS governance, clinical-safety obligations, data-protection rules, frameworks and local implementation capacity determine which projects proceed.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →For digital ID, potential categories include identity proofing, document or biometric verification, credential issuance, mobile-wallet technology, authentication, fraud detection, data matching, access management, cyber security, integration and citizen support. The £1.8bn estimate does not establish that any supplier will receive that amount, nor that government will outsource every component.
How to judge whether the spending delivers value
NHS technology
- Clinical usefulness: measurable reductions in administrative burden or better decisions.
- Interoperability: reliable exchange across GP, hospital, community and social-care settings.
- Adoption: funding for training, workflow redesign and local implementation, not just software.
- Resilience: cyber security, backup and recovery designed in from the start.
- Accessibility: non-digital routes for patients who cannot use the App.
- Benefits tracking: published effects on waiting times, staff time, appointment capacity and outcomes.
Digital ID
- an open cost model showing what is included in the £1.8bn and what is recurring;
- clear liability and correction processes for inaccurate identity data;
- usable alternatives and assisted support for people without smartphones;
- privacy-preserving selective disclosure rather than unnecessary data sharing;
- independent security, equality and civil-liberties oversight; and
- parliamentary review of benefits, exclusion rates, fraud, cost per active user and long-term operating expense.
Bottom line
Budget 2025 made one clear new technology commitment: £300m of additional NHS capital investment, on top of the wider NHS technology programme worth up to £10bn by 2028–29. The digital-ID story is less settled. Its £1.8bn headline is an OBR estimate of likely implementation cost, with an unresolved funding route—not a transparent new Budget allocation. The decisive questions are now delivery, inclusion, security, governance and whether either programme produces measurable public value.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
