An eSIM profile is the digital equivalent of the contents of a SIM card: a package of subscriber identity, secret authentication keys, network settings and operator applications that is downloaded over the air and stored on an embedded chip called an eUICC. In telecommunications, the profile is what actually connects a device to a mobile network, while the eSIM hardware is only the secure container that holds it.
One eUICC can store several profiles from different operators, but each profile belongs to exactly one subscription. Installing, enabling, disabling and deleting profiles follows the GSMA remote SIM provisioning specifications, which keep the keys protected from the device, the user and other operators.
What an eSIM profile contains
A profile reproduces the file system and applications of a physical SIM. It carries the identifiers that the network uses to recognize the subscription and the cryptographic material that proves the subscription is genuine, plus optional operator services. Its key elements are listed in the table below.
| Component | Purpose | Visibility |
|---|---|---|
| ICCID | Unique number of the profile itself | Shown in device settings |
| IMSI | Subscriber identity used by the core network | Hidden from most users |
| Authentication key (Ki or K) | Shared secret for network authentication | Never leaves the eUICC |
| Authentication algorithm data | Parameters for Milenage or TUAK | Internal to the profile |
| Network settings | Preferred networks, roaming lists, APN hints | Partly visible |
| Applets and policy rules | Operator services and restrictions | Partly visible |
Because the authentication key never leaves the secure chip, an eSIM profile cannot simply be copied as a file from one phone to another. Moving a subscription always means creating or re-issuing a profile for the new device, which the operator must authorize.
How a profile is downloaded and installed
In the consumer architecture defined by GSMA SGP.22, the operator prepares the profile on a server called the SM-DP+ (Subscription Manager Data Preparation). The device runs a Local Profile Assistant (LPA), which is the eSIM menu in phone settings, and contacts the SM-DP+ after the user scans a QR code, opens an operator app or accepts a carrier offer.
The SM-DP+ and the eUICC authenticate each other with certificates issued under the GSMA PKI. The profile is then encrypted specifically for that eUICC as a Bound Profile Package, so even if it were intercepted, no other chip could install it. The steps are summarized below.
| Step | What happens | Main actor |
|---|---|---|
| Activation code | Code contains SM-DP+ address and matching ID | Operator and user |
| Mutual authentication | Server and chip verify certificates | SM-DP+ and eUICC |
| Binding | Profile is encrypted for this eUICC only | SM-DP+ |
| Installation | Profile is written into secure storage | eUICC |
| Enabling | Profile becomes active and attaches to the network | LPA and user |
An activation code is usually single-use. Once a profile has been downloaded, the same QR code normally cannot install it again, which is why deleting a profile carelessly can require a new code from the operator.
Profile states and multiple profiles
Each installed profile is either enabled or disabled. Only enabled profiles can attach to a network. Older eUICCs allow one enabled profile at a time, so dual-SIM phones pair one eSIM with a physical SIM. Newer chips that support Multiple Enabled Profiles (MEP) can run two eSIM profiles simultaneously, provided the modem supports dual SIM operation.
The number of stored profiles is limited by eUICC memory, not by a fixed rule. Phones commonly store between about five and ten or more, depending on chip capacity and profile size. Operators can also attach Profile Policy Rules, which may forbid disabling or deleting a profile, a setting used mainly in leased or managed devices.
eSIM profile compared with related concepts
The eSIM profile is frequently confused with the chip that stores it and with the services that deliver it. Separating these layers helps when diagnosing activation problems or planning device fleets.
| Term | What it is | Relation to the profile |
|---|---|---|
| eSIM | Embedded SIM as a technology | Umbrella term that includes profiles |
| eUICC | Secure chip that stores profiles | Container for one or more profiles |
| Physical SIM card | Removable card with one fixed subscription | Same content, but not downloadable |
| iSIM | SIM function inside the main processor | Hosts profiles the same way |
| SM-DP+ | Server that prepares and delivers profiles | Source of the profile |
| Remote SIM provisioning | Overall GSMA framework | Rules for the profile lifecycle |
For IoT, the GSMA SGP.32 specification adapts the same profile concept to devices without screens, letting a remote manager install and switch profiles. The older SGP.02 machine-to-machine model pushes profiles from the operator side instead.
Pitfalls and security considerations
Most eSIM problems come from lifecycle mistakes rather than technical faults. The table below lists the most common situations.
| Situation | Cause | Remedy |
|---|---|---|
| Profile lost after factory reset | Profile deleted with user data | Request a new activation code |
| Cannot reuse QR code | Activation code already consumed | Ask operator to reissue the profile |
| Profile installs but shows no service | Subscription not activated or wrong band support | Check account status and device bands |
| Cannot delete or switch profile | Profile Policy Rules or device lock | Contact device owner or operator |
| Unexpected profile transfer | Fraudulent reissue request | Use account PIN and transfer alerts |
The main security risk is social engineering at the operator. An attacker who convinces support staff to issue a new profile for a victim’s number can redirect calls and one-time codes, which is the eSIM form of a SIM swap. Strong account authentication and notifications for profile changes reduce this risk.
The short version
A regular SIM card is a small piece of plastic that tells your phone which network to use. An eSIM profile is the same information, delivered as a secure download instead of a card. Your phone keeps it on a tiny chip that cannot be removed.
You can keep several profiles on one phone, for example a home plan and a travel plan, and switch between them in settings. The important parts stay locked inside the chip, so nobody can simply copy them.
Where it makes a difference
A consultant based in Germany travels to Japan for two weeks. Before departure, she buys a 10 GB travel data plan and receives a QR code. Scanning it in the phone settings downloads a second eSIM profile next to her home profile, which stays installed.
On arrival, she sets the travel profile for mobile data and keeps the home profile enabled for calls and messages, which her phone supports through dual SIM operation. She avoids roaming charges, still receives bank verification texts on her normal number, and simply disables the travel profile after returning home, keeping it available for a later top-up.