Answer first. The AIMA renewal portal error "Credenciais de acesso inexistentes" is a systemic SEF-to-AIMA migration authentication bug. The same account that works on Finanças and the legacy SAPA-SEF portal is rejected by the new renewal portal because the migration to the new identity store was incomplete for a subset of residence-permit holders. Four documented workarounds are available: Chave Móvel Digital authentication; contactenos password reset; lawyer-filed renewal under a procuração; and the legacy SAPA-SEF portal route. If none work and the card is days from expiring, the Despacho n.º 4154-A/2025 framework protects against irregular-status consequences provided the failure is documented in writing.
The Bug: Valid Credentials, Wrong Rejection
The bug surfaces as a recurring complaint on r/PortugalExpats and on consumer-complaint portals. As one user described in this r/PortugalExpats thread: "I'm trying to sign into AIMA to see if I can renew. I can sign into financas just fine but when I got to the renewal site I just keep getting 'Credenciais de acesso inexistentes!'" The same applicant could access the legacy SAPA-SEF portal at sapa.sef.pt with the same email and password — only the AIMA renewal portal rejected the login.
The pattern is documented across multiple complaint channels. A May 2025 entry on portaldaqueixa.com reports the same phrase verbatim, with the user identifying that the SEF portal had been deactivated while the new AIMA portal refused credentials they had used successfully before. AIMA's published response to complaint channels acknowledges the migration issue without offering a single canonical fix — the workarounds below are the four that have produced results in practice through May 2026.
The error message is misleading. "Credenciais de acesso inexistentes" literally translates as "access credentials do not exist", which suggests the applicant has typed the wrong username or password. In the bug case, the credentials do exist — the renewal portal simply cannot find the migrated record. Confirming this by trying the same credentials at app.aima.gov.pt versus the standalone renewal portal at renovacao-ar.aima.gov.pt sometimes produces different results — the renewal subdomain is the more affected one. Try both before concluding the credentials are wrong.
Why It Happens — The SEF-to-AIMA Migration
SEF (Serviço de Estrangeiros e Fronteiras) was dissolved on 29 October 2023 and replaced by AIMA (Agência para a Integração, Migrações e Asilo) under Decreto-Lei n.º 41/2023. The dissolution involved migrating tens of thousands of existing user accounts from the SEF platform — the old SAPA portal at sapa.sef.pt and its associated identity stores — to the new AIMA platform. The migration was scheduled in stages and is acknowledged in AIMA's public communications to have been imperfect, with some account records not transferring cleanly.
The accounts most likely to be affected fall into three groups. First, applicants whose original SEF account was created before the 2022 SEF platform refresh — many of these used a legacy email-only login that the new AIMA platform required to be paired with a NIF, and the pairing was sometimes not completed during migration. Second, applicants whose email or NIF changed between SEF account creation and the AIMA migration — for example, residents who moved to a new email provider or whose NIF was reissued after a name change or marriage. Third, applicants whose case was open at the time of the SEF dissolution and was transferred to AIMA mid-process — the case may have migrated but the account login record did not.
AIMA has not published a definitive fix for the underlying bug. The agency's contactenos team can manually reattach a missing account record to a known NIF on request, but the volume of cases and the absence of a self-service repair tool means the four workarounds documented below are usually faster than waiting for the manual repair.
Workaround 1: Chave Móvel Digital Fallback
Chave Móvel Digital (CMD) is the Portuguese government's national digital identity authentication. AIMA accepts CMD as an authentication method on the renewal portal, bypassing the local password layer entirely. If your credentials are rejected at the standard email-and-password login, switch to CMD authentication.
On the renewal portal login page, look for the "Autenticação com Chave Móvel Digital" option (or the equivalent button labelled "CMD"). Click it; you will be redirected to the autenticacao.gov.pt single-sign-on flow. Enter your CMD PIN, receive the SMS code on your registered mobile, and enter the code. You will be returned to the AIMA portal authenticated against your NIF directly — bypassing whatever account-record problem was producing the "Credenciais de acesso inexistentes" error.
If you do not yet have CMD, register one at autenticacao.gov.pt. Registration requires a Portuguese mobile phone number, a NIF, and either an in-person verification at a Loja de Cidadão or a remote video verification with a recognised identity provider. The full setup takes roughly 30 minutes if done in person, longer remotely. CMD is the default authentication for most Portuguese digital services and is worth registering even if the AIMA login problem clears — see our piece on digital signatures for residency applications for the broader CMD use case.
Workaround 2: Contactenos Password Reset
The AIMA contactenos portal at contactenos.aima.gov.pt can trigger a manual password reset and, more usefully, a manual re-link of your existing account record to your current NIF. Filing the request properly is the difference between a one-week resolution and a four-week silence.
File the request as follows. Open contactenos.aima.gov.pt and use the unauthenticated request flow (since by definition you cannot log in). Select Assunto = "Problema de acesso à plataforma" or, if not available, "Outros". In the free-text field, write in Portuguese: your full name as on the residence card; your NIF; your residence permit number; the email address you have been using; the URL of the portal that rejects you (renovacao-ar.aima.gov.pt or app.aima.gov.pt); and an explicit request for a password reset or account re-link. Example sentence: "Solicito a reposição da minha conta na plataforma de renovação, dado que a tentativa de login devolve 'Credenciais de acesso inexistentes' apesar de o meu email e NIF estarem corretos."
Attach a clear photograph of your residence card and your passport identification page. Attach a screenshot of the login error. Submit. AIMA's published service standard is 15 working days; the account-recovery cases are typically resolved faster — three to seven working days in the May 2026 sample — because they are routed to the identity-recovery team rather than the case-processing team. Note the contactenos case reference number for follow-up.
Workaround 3: Lawyer Procuração
Immigration lawyers in Portugal have enterprise access to AIMA filing systems through the Ordem dos Advogados framework. A lawyer holding a procuração from you (a power of attorney specific to immigration matters) can file the renewal request on your behalf without using the consumer portal authentication layer at all. This is the fastest workaround in absolute terms — typically same-day filing once the procuração is in place — though it carries the cost of the lawyer's fee.
The procuração itself is straightforward. A short Portuguese document signed before a notary (notário) or at a Loja de Cidadão authorising the named lawyer to act on your behalf for immigration purposes (pedidos, renovações, recursos, audiências with AIMA). Standard cost is €50 to €150 at the notary. The procuração can be signed remotely if you cannot attend in person — a notary in your home country can prepare it and apostille it, after which it is recognised in Portugal under the Hague Apostille Convention.
Lawyer fees for a single renewal filing range from €300 to €800 in most Lisbon and Algarve practices, higher in Cascais and Setúbal. For wealthy clients on D8, D7, or Golden Visa renewals where the underlying case is straightforward and the login bug is the only blocker, the lawyer route is the proportionate response — the cost is small relative to the consequences of missing the renewal window. For clients with a more complex case (category change, family additions, contested file), the lawyer was likely the right route anyway.
Workaround 4: Legacy SAPA-SEF Portal Route
The SAPA-SEF portal at sapa.sef.pt remains partially accessible in May 2026. For account-holders whose original SEF credentials were never migrated to the new AIMA platform, SAPA still recognises the login and allows certain renewal sub-flows. The route is not universally available — it works for some standard residence-permit renewals and not for others — but it is the fastest test to run before pursuing the other workarounds.
Try the SAPA login with the email-and-password combination you used at SEF before the transition. If the login succeeds, you will see a residence-permit dashboard inherited from the SEF platform. Look for a "Renovação" or "Pedido de Renovação" option. If available, the option may launch the renewal flow directly within SAPA, or redirect you back to the AIMA portal with a session-token that authenticates you for the renewal without requiring the AIMA password layer. The redirect-token pattern is the more common outcome and is the reason SAPA sometimes works when AIMA does not.
SAPA is being progressively decommissioned by AIMA. The portal still functions but receives no new features and is not the long-term solution — even if your renewal succeeds through SAPA, register a working AIMA account afterward through the CMD or contactenos paths above so that subsequent renewals and any case communications do not depend on the legacy portal. If SAPA returns its own "Credenciais inexistentes" message, the account was successfully migrated and the AIMA-side bug is the issue — move to Workaround 1 (CMD).
When Your Card Expires Within Days
If the bug is preventing you from filing a renewal and the residence card expires within days, the legal protection is in place but documentation matters. Despacho n.º 4154-A/2025 and successive extensions established that a residence permit expired due to AIMA administrative failure does not place the holder in irregular status — the prior card remains valid for all legal purposes pending the renewal. The documentation requirement is what triggers the protection.
Document the bug now. Take timestamped screenshots of every login attempt showing the "Credenciais de acesso inexistentes" error and the timestamp on your device. File a contactenos report under "Problema de acesso" and note the case reference number. Send an email from your registered address to the AIMA office where your file is held, identifying the bug and asking for confirmation that your card remains valid pending resolution. The triple-track creates the evidence base.
If asked at a border crossing, at a Finanças office, or at any institution for which the residence card is required, present the expired card together with the contactenos case reference and a printed copy of the most relevant timestamped screenshot. The Despacho framework is now well-known to most public administrations and a brief in-person explanation is usually accepted. The court route is available as a fallback if any administration refuses to recognise the protection — the acção administrativa for compulsion of AIMA to process the renewal is the same procedure described in our piece on the 12,000-order STA wave.
Frequently Asked Questions
Does the bug affect first-time applications or only renewals?
The bug is specific to the renewal portal (renovacao-ar.aima.gov.pt) and the account-record migration. First-time applicants who have no SEF history are not affected because their account is created directly on the new AIMA platform without a migration step. The bug exposure runs from October 2023 (SEF dissolution) forward, against accounts that existed at SEF.
Can I clear the bug by changing my registered email address?
No, and attempting to change the email through the unauthenticated flow usually deepens the problem by creating a second account record against the same NIF. The contactenos manual repair is the route to update an outdated email.
What if my CMD also does not authenticate against AIMA?
That is rare. If both CMD and standard credentials fail, the bug has likely produced a NIF-level mismatch, where the renewal portal has no account record for your NIF at all. Move to the contactenos manual repair (Workaround 2) and reference that CMD also failed in the request body. The identity-recovery team has the tools to reattach a NIF to a fresh account record.
Is there a published AIMA bug tracker or status page for the renewal portal?
No. AIMA does not maintain a public bug tracker or status page for its portals. The only public signal is the periodic notice on the AIMA newsroom and the agency's social-media communications during major outages. Subscribe to the AIMA noticias RSS if you want pushed updates.
Will this bug get fixed?
The agency has not announced a target fix date for the underlying identity-store migration. Operationally, the bug case-count appears to be decreasing as accounts are manually repaired through contactenos and as new applicants come in directly to the new platform. For practical purposes, plan around the bug rather than wait for the fix — the four workarounds above are the working tools as of May 2026.