It is advisable to follow the following measures to avoid improper use of the idCAT:

Protect the idCAT with a PIN

It implies that the system warns every time an application requires to use the certificate through a PIN. During the idCAT installation wizard, you have the option to enable secure private key protection as shown in the image below:

Do not download/use the idCAT in a booth

The idCAT certificate is a tool that allows you to carry out procedures as a citizen, if you download it or use it at a booth anyone could impersonate you, and the legal consequences of this action would correspond to the holder of the certificate.

If you do, make sure to delete it from your computer after you stop using it .

Do not let someone else use my idCAT
The digital certificate is personal and non-transferable. Leaving it to a third party implies that they impersonate you when they use your certified idCAT and, therefore, the legal consequences of their actions fall on the holder of the certificate.

Therefore, it is important that you are careful and do not let anyone use it.