Phones & Tablets
CAC on mobile is real but limited. Here's what works on iPhone, iPad, and Android — and when Purebred is the better answer.
Last reviewed: July 2026
Set expectations first
Mobile CAC access exists, but it's the least polished corner of the ecosystem. A laptop with a $15 reader will always beat a phone setup for reliability. That said, if you mainly need to check webmail or approve something while traveling, mobile can work.
Two different approaches
| Approach | What it is | Best for |
|---|---|---|
| Hardware reader + app | A physical smart card reader (USB-C or Lightning) plus a mobile app that understands CAC and provides a built-in browser. | Personal devices; occasional access. |
| DoD Purebred | DoD's official program that derives credentials from your CAC and installs them on the device itself — no reader needed afterward. | Government-managed phones; regular mobile work. |
iPhone & iPad
- Get a compatible reader USB-C readers work with modern iPhones and iPads; older Lightning devices need a Lightning-native reader or a certified adapter. Check the reader maker's compatibility list before buying.
- Install the reader's companion app iOS doesn't expose smart cards to Safari directly, so CAC browsing happens inside the reader vendor's app, which bundles its own browser. Install the app the vendor documents for CAC use.
- Import DoD certificates in the app The app will need the DoD certificate bundle — most CAC-focused apps ship with it or fetch it for you.
- Browse from inside the app Open your webmail or portal in the app's browser, select your authentication certificate, enter your PIN.
Android
Same pattern: a USB-C CCID reader plus a CAC-capable app with an embedded browser. Some Android apps can also register card certificates with the system keystore, letting Chrome itself prompt for the card. Support varies widely by device and Android version — again, check the reader vendor's documentation.
About Purebred
If you have a government-issued phone, ask your unit about DoD Purebred enrollment instead of buying anything. Purebred installs derived credentials directly on the device, which then works with approved mail and browser apps with no reader dangling off the port. It requires enrollment through a Purebred agent — it's not something you self-install on a personal device without your organization's involvement.