Civil Cryptography License Vietnam 2025 – Full Guide

1. What is a Civil Cryptography License?
A Civil Cryptography License is an official permit issued by competent Vietnamese authorities, allowing businesses to import, export, or trade encrypted products used for civil (non-military) purposes. These products include IT equipment like routers, firewalls, servers, and POS machines.
As of 2025, regulations are based on:
- Decree 58/2016/ND-CP
- Decree 32/2023/ND-CP
- Circular 22/2023/TT-BQP
- Law on Network Information Security
2. Which Products Require a License?
Vietlabo advises that the following product groups are subject to cryptography licensing:
Product Category | Examples |
---|---|
Encrypted Hardware | Routers with IPsec, Firewalls, Load Balancers |
Wi-Fi Modules with Encryption | Access Points, IoT devices with WPA/WPA2 |
POS and Data Encryption Devices | Card readers, payment terminals |
Encryption Software | VPN apps, digital signature software |
3. How to Determine if a Product Requires a License
To avoid errors, businesses should:
- Check HS codes containing keywords like “encryption”, “security”, “cryptography”
- Reference Circular 32/2023/BQP
- Request Vietlabo for expert product classification and written confirmation
4. Is Licensing Mandatory?
YES, if you:
- Import encrypted equipment into Vietnam
- Sell products with encryption functions
- Use encryption devices in government or critical infrastructure
Non-compliance may result in legal penalties.
5. Types of Licenses and Their Validity
License Type | Validity | Applicable To |
---|---|---|
GPKD MMDS (Business License) | 30 working days | For traders and resellers |
GPNK/XK MMDS (Import/Export License) | 10 working days | For importers/exporters |
Starting June 18, 2025, all licenses may be issued with a validity of up to 36 months.
6. Required Documents for License Application
With Vietlabo’s full support, you’ll need:
Dossier preparation:
- Application form
- Business registration certificate
- Technical documents
- Sales contract (if applicable)
Submission: Submit to the Civil Cryptography Management Department (NACIS)
Follow-up: Vietlabo will coordinate communications and status updates
Result: Receive valid licenses
7. Processing Time & Government Fees
License Type | Processing Time | Estimated Fee (VND) |
---|---|---|
GPKD MMDS (Business License) | 30 days | 3,000,000 – 10,000,000 |
GPNK/XK MMDS (Import/Export License) | 7 – 10 days | 1,000,000 – 2,000,000 |
8. What Happens if You Don’t Get a License?
⚠️ Violations may result in:
- Fines from VND 40,000,000 to 90,000,000
- Confiscation of products
- Suspension of operations
- Disqualification from public tenders or contracts
9. How Vietlabo Supports Your Business
With over a decade of experience in cybersecurity compliance and legal consulting, Vietlabo provides:
✅ Product classification and HS code verification
✅ Complete document preparation and submission
✅ Support for conformity certification if needed
✅ Fast-track licensing with guaranteed timelines
10. Frequently Asked Questions (FAQs)
1. Do Wi-Fi routers require a license?
➡ Yes, if they include WPA/WPA2 encryption and fall under HS code 8517.62.51.00.
2. Are POS terminals considered cryptography products?
➡ Yes, since they encrypt card data and require both business and import licenses.
3. Do internal-use devices still require a license?
➡ Yes, if the product is listed under civil cryptography classification.
4. How long does it take to obtain a license?
➡ On average, 7–30 days depending on the license type.
5. Can Vietlabo support businesses outside Ho Chi Minh City?
➡ Absolutely. We support nationwide via remote and onsite consultations.
6. What if my product’s HS code is unclear?
➡ Contact Vietlabo for free classification support.
11. Conclusion
Starting in 2025, all companies dealing with encrypted IT products must comply with Vietnam’s civil cryptography regulations. Without proper licenses, your business could face severe legal consequences.
Let Vietlabo handle the paperwork while you focus on growth. We ensure full compliance and smooth operations – from import, sales, to usage.