◉ Mobile & IoT

eSIM: what it is, how it works and when it makes sense

The eSIM explained in practical terms: downloadable profiles, QR code activation, dual numbers, travelling abroad and what to do when you change phones.

For decades the SIM was a small piece of plastic with a chip that you slotted into your phone. The eSIM does the same job without the plastic: the chip is soldered inside the device and the carrier's data is downloaded over the network. It seems like a detail, but it changes how you activate a line, travel and switch phones.

What a SIM contains

A SIM, physical or virtual, holds the subscriber's identity on the mobile network: a unique identifier and the cryptographic keys the phone uses to authenticate with the carrier. Without this information the network doesn't know who you are and won't let you in. The chip is designed never to let the keys out: it uses them internally to answer the network's challenges.

In an eSIM the chip is called an eUICC and has one extra feature: it can receive and store profiles from different carriers. A profile is the digital equivalent of a SIM: it can be downloaded, enabled, disabled or deleted.

How it is activated

There are three common methods:

  1. QR code: the carrier provides a QR code to scan from the mobile network settings; the phone contacts the carrier's server and downloads the profile;
  2. carrier app: some carriers handle activation directly in their app, with no code to scan;
  3. transfer from the old phone: on recent systems you can move the line from one device to another with a guided procedure, if the carrier supports it.

The process needs an Internet connection, via Wi-Fi or another line. In store the carrier checks your identity as it would for a physical SIM; online the verification process varies from company to company.

One important detail: the QR code is usually valid only once. Once the profile has been downloaded, scanning it again won't work. That's why it should be treated as a confidential document, not photographed or shared casually.

Dual SIM with an eSIM

Many phones combine a physical SIM and an eSIM, or two eSIMs active at the same time. This lets you:

  • keep personal and work numbers separate;
  • use one line for calls and another for data;
  • add a local data line while travelling without removing your own.

The phone can store more profiles than it can keep active at once: the extra ones stay installed but switched off, ready to be re-enabled.

eSIM when travelling

This is one of the most practical uses. Before leaving you buy a data plan for the destination country, install the profile and activate it on arrival. Your main SIM stays in the phone, perhaps with data turned off, so you keep receiving calls and texts, including your bank's verification codes.

A few precautions:

  • install the profile while you still have a good connection, that is, before you leave;
  • check in the settings which line is used for data, to avoid roaming charges;
  • find out whether the plan includes a phone number or data only.

Changing or resetting your phone

This is where care is needed. With a physical SIM you just move the card. With an eSIM you need to:

  • use the transfer procedure, if available between the two devices;
  • or ask the carrier for a new profile for the new phone.

Before a factory reset it's worth knowing whether the phone will also delete your eSIMs: usually the procedure explicitly asks whether to keep or erase them. Deleting the profile by mistake means requesting a new one from the carrier, with the delays and checks that involves.

Advantages and limits

Aspect eSIM Physical SIM
activation remote, in a few minutes you need the card
multiple lines several stored profiles one per slot
phone theft the thief can't pull it out can be removed and discarded
changing phones transfer or new profile needed moved by hand
compatibility supported devices only universal

The theft point is interesting: with a physical SIM, someone who steals the phone can remove the card and make it unreachable. With an eSIM this is harder, and the phone remains locatable for longer.

Line security

An eSIM doesn't remove the risk of someone persuading the carrier to move your number to another device. The defence stays the same: a protection code on your carrier account where available, and authentication methods for important services that don't rely on text messages alone, such as authenticator apps or security keys.

The SIM PIN still makes sense with an eSIM too: it's set in the mobile network settings and stops anyone who restarts the phone without knowing it from using the line.

In short

  • An eSIM is a built-in SIM that receives carrier profiles over the network.
  • The activation QR code is usually single-use and should be kept safe.
  • It allows several lines on one phone and is very handy for data when travelling.
  • When changing or resetting a phone, the profile must be handled with care.
  • Line security depends on protecting your carrier account and setting a PIN.
MM
Marco Marzaduri

Marco Marzaduri works in cybersecurity, digital forensics and web development. With degrees in computer science and psychology, he combines technical analysis with an understanding of the human factor.

Read also