Tax Compliance income tax logine-filing portalAadhaar OTP loginincome tax password resetDSC loginnet banking logine-filing vaultPAN login

Income Tax Login 2026: Every Method Explained — Password, Aadhaar OTP, Net Banking, DSC

Complete guide to income tax e-Filing portal login — password, Aadhaar OTP, net banking, DSC, EVC. Entity-wise steps, lockout fixes, and pre-login services.

By HonestMoney.in Editorial Team | Updated May 3, 2026

The income tax e-Filing portal at incometax.gov.in offers 5 distinct login methods. Your PAN is your user ID (for individuals), and since July 2025, two-factor authentication is mandatory for all post-login actions. Here is every method, who should use it, and what to do when things break.

Method	Who Can Use	Setup Time	Reliability	Best For
Password + Aadhaar OTP	Individuals with PAN-Aadhaar linked	0 min (if already linked)	High (UIDAI uptime ~99%)	Salaried individuals, freelancers
Password + Email/Mobile OTP	All entity types	0 min	Medium (OTP delays in peak season)	HUFs, trusts, firms
Net Banking	Individuals with supported bank accounts	10-15 min one-time setup	High	Those who avoid remembering passwords
Digital Signature Certificate (DSC)	All entity types	30-60 min setup	Very High	Companies (mandatory), CAs, frequent filers
Bank/Demat Account EVC	Individuals with e-Filing Vault enabled	15-20 min one-time setup	Medium	Security-conscious taxpayers

User ID Formats by Entity Type

Your user ID depends on your entity type — it is not always your PAN.

Entity Type	User ID Format	Example
Individual	PAN (10 characters)	ABCDE1234F
HUF	HUF PAN	ABCDH1234F
Company	Company PAN	AABCC1234D
CA (Chartered Accountant)	ARCA + 6 digits	ARCA012345
ERI (External Return Intermediary)	ERIP + 6 digits	ERIP045678
Tax Deductor/Collector	TAN (10 characters)	BLRA12345B
Firm/AOP/BOI	Entity PAN	AABFA1234B

Individuals, HUFs, and companies all use their PAN. CAs and ERIs have separate registration numbers. Tax deductors use TAN because TDS operations are mapped to TAN, not PAN.

This is the default and most widely used method since July 2025, when Aadhaar OTP became mandatory as the second authentication factor for individuals.

Prerequisites:

PAN linked to Aadhaar (check at incometax.gov.in/iec/foportal/pre-login/link-aadhaar-status)
Active mobile number registered with UIDAI
Portal password set (8-14 characters, must include uppercase, lowercase, number, and special character)

Steps:

Go to incometax.gov.in and click Login
Enter your PAN as user ID
Enter your password
Portal triggers a 6-digit OTP to your Aadhaar-linked mobile
Enter OTP within 15 minutes (validity window)
You get 3 attempts per OTP — after that, request a new one
After 5 wrong password attempts, account locks for 30 minutes

Key detail: The mobile number for Aadhaar OTP is the one registered with UIDAI, which may differ from the mobile registered on the e-Filing portal. This catches people off guard — you might receive portal OTPs on one number and Aadhaar OTPs on another.

Net banking login bypasses the e-Filing portal password entirely. You authenticate through your bank, and the bank passes your identity to the portal.

One-time setup (must be done while logged into e-Filing):

Log in using password method first
Go to My Profile → My Bank Account → Add Bank Account
Select your bank from the supported list
Validate via your bank account details (account number, IFSC)
Bank sends confirmation — linking completes in 24-48 hours

Supported banks include: SBI, HDFC Bank, ICICI Bank, Axis Bank, PNB, Bank of Baroda, Kotak Mahindra, IDBI Bank, Union Bank, Indian Bank, Canara Bank, Bank of India, Central Bank, Indian Overseas Bank, UCO Bank, and a few others. Private banks like Yes Bank, IndusInd, and Federal Bank have partial or no support.

To log in via net banking:

Log in to your bank’s net banking portal
Navigate to Tax Services or Government Services or e-Filing
Click the income tax e-Filing link
Bank authenticates and redirects you directly to the e-Filing dashboard

This method is especially useful during server peak times when portal OTPs are delayed.

Method 3: Digital Signature Certificate (DSC)

DSC login is mandatory for companies and commonly used by CAs who file for multiple clients.

Requirements:

Class 2 or Class 3 DSC from an Indian Certifying Authority (eMudhra, Sify, NSDL CA, CDAC, or others recognized by CCA)
USB token containing the DSC
emsigner utility installed on your computer (download from the e-Filing portal)
Java Runtime Environment (JRE) may be required depending on emsigner version

DSC registration steps:

Log in to the portal using password
Go to My Profile → Register DSC
Plug in USB token
emsigner reads the certificate — select the correct one if multiple exist
Enter token PIN and submit
Registration takes effect immediately

For companies: The DSC must belong to an authorized signatory (director, company secretary, or principal officer). The DSC PAN must match the authorized signatory’s PAN, and this person must be registered as the principal contact for the company PAN on the portal.

Method 4: Bank/Demat Account EVC

Electronic Verification Code via bank or demat account is an alternative second factor.

Setup requires:

Log in to the portal → My Profile → e-Filing Vault → Higher Security
Enable bank account EVC or demat account EVC
Pre-validate your bank account or demat account under My Profile → Pre-validate Bank Account / Pre-validate Demat Account

How it works: When you choose this method during login, an EVC is generated and sent to the mobile/email linked to your pre-validated bank or demat account. Enter the EVC to complete login. This is different from Aadhaar OTP — the code comes from your bank’s registered contact details, not UIDAI.

HUFs (Hindu Undivided Families)

HUFs cannot use Aadhaar OTP. Aadhaar is issued to individuals, not entities. The HUF karta logs in using the HUF’s PAN (not their personal PAN) with password + email/mobile OTP. For password resets, the karta must use the contact details registered against the HUF PAN.

Companies

Login uses company PAN, but DSC is mandatory for return filing and certain submissions. The authorized signatory’s DSC must be registered against the company PAN. Multiple directors can register their DSCs, but only one can be active at a time for signing purposes.

NRIs

NRIs face the most friction. Problems include:

Aadhaar OTP fails if Indian mobile is inactive or you lack international roaming
Net banking works only if you have an NRI account (NRE/NRO) with a supported bank
Email OTP is the most reliable fallback — ensure your registered email is one you access from abroad
DSC works if you have one from an Indian CA, but renewal from outside India is difficult

Practical workaround: Maintain an Indian mobile number with international roaming, or authorize a CA to file on your behalf. Read more in our NRI income tax login guide.

CAs and ERIs

CAs log in with ARCA+6 digits and get a multi-client dashboard to manage filings for all their clients. Important: the portal forces a logout when switching between client accounts. This is a security feature, not a bug — it prevents accidental cross-client data access. ERIs (tax return preparers registered with the department) use ERIP+6 digits and have similar multi-client functionality.

You can access these directly at incometax.gov.in without any authentication:

Service	What It Does
e-Pay Tax	Pay self-assessment, advance tax, demand tax, or TDS via challan
Instant e-PAN	Get a new PAN in 10 minutes using Aadhaar (free)
Know Your AO/JAO	Find your jurisdictional Assessing Officer
Verify PAN Status	Check if PAN is active, inoperative, or deleted
Link Aadhaar	Link PAN to Aadhaar and pay Rs 1,000 late fee if applicable
Tax Calculator	Estimate tax under old and new regime
Verify ITR Status	Check filing and processing status using PAN + acknowledgment number
Verify TDS Certificate	Authenticate Form 16/16A using certificate number
e-Filing Calendar	View due dates for ITR, TDS returns, audit reports
Tax Information Network	View challan status (OLTAS)

These pre-login services are useful when the portal login is down during peak filing season or when your account is locked. You can pay taxes without ever logging in — a critical fallback before the July 31 ITR deadline.

Password Reset: 4 Methods

Forgot your password? Here are all 4 reset methods ranked by speed:

Method 1: Aadhaar OTP (Fastest — Under 2 Minutes)

Click Forgot Password on login page
Enter PAN
Select Using Aadhaar OTP
OTP sent to Aadhaar-linked mobile
Enter OTP → set new password

Works for: Individuals with PAN-Aadhaar linked. Does not work for HUFs, companies, or trusts.

Method 2: Registered Email/Mobile OTP

Click Forgot Password → enter PAN
Select Using OTP on email/mobile registered on e-Filing
OTP sent to both registered email and mobile
Enter either OTP → set new password

Works for: All entity types. The email and mobile must be the ones registered on the e-Filing portal, not Aadhaar-linked ones.

Method 3: Net Banking

Log in to your bank’s net banking
Navigate to income tax e-Filing
Bank authenticates and lets you reset the e-Filing password

Works for: Anyone with a pre-linked supported bank account.

Method 4: DSC Upload

Click Forgot Password → enter PAN
Select Using DSC
Upload DSC via emsigner
Verification completes → set new password

Works for: Anyone with a registered DSC. This is the only offline method — useful when you cannot receive OTPs.

Account Security: e-Filing Vault and Anti-Phishing

e-Filing Vault (Higher Security)

Enable at My Profile → e-Filing Vault → Higher Security. This adds mandatory second-factor verification for:

Every login attempt
ITR filing and verification
Password reset requests
Profile changes

You choose which actions trigger extra verification. Once enabled, even if someone steals your password, they cannot access your account without the second factor. This is strongly recommended for anyone with refunds above Rs 50,000 or business owners whose PAN is widely shared.

Secure Access Message (Anti-Phishing)

During initial registration, you set a secure access message — a personal phrase displayed after entering your user ID but before entering your password. If you do not see your personal phrase, you may be on a phishing site. This is a simple but effective anti-phishing measure. You can update it anytime from My Profile → Secure Access Message.

2FA Mandate Timeline

Since July 2025, all individual taxpayers must use two-factor authentication (password + OTP) for portal login. The mandate was first announced in 2023, extended through 2024, and fully enforced from July 2025. Non-individual entities (companies, firms, trusts) use email/mobile OTP as their second factor since Aadhaar is not available for entities.

Error	Cause	Fix
”Invalid User ID”	Wrong PAN format or unregistered PAN	Register at e-Filing portal first; check PAN format
”Account Locked”	5+ wrong password attempts	Wait 30 minutes, then retry or reset password
”Aadhaar OTP Not Received”	UIDAI mobile mismatch or server down	Verify mobile at UIDAI; try after 30 min
”Session Expired”	Idle timeout (15 min) or concurrent session	Log in again; close other sessions
”DSC Not Recognized”	emsigner not installed or outdated	Reinstall emsigner from portal; update Java
”PAN Not Linked to Aadhaar”	Linkage pending or failed	Complete linkage via pre-login service
”Invalid OTP”	OTP expired (15-min window) or wrong OTP	Request fresh OTP; check correct mobile

For persistent portal errors, check our detailed guide on income tax portal not working.

What to Do After Logging In

Once logged in, your immediate priorities should be:

Check AIS (Annual Information Statement) — Download and verify all reported transactions for the financial year. Discrepancies here cause notices. Read our ITR filing guide for how to handle AIS mismatches.
Verify Profile Details — Ensure your address, email, mobile, and bank account are current. Refund failures are almost always due to outdated bank details.
Check Outstanding Demands — Go to Pending Actions → Response to Outstanding Demand. Respond within 30 days. Our tax notice guide explains how to handle each notice type.
Track Refund Status — Go to Services → Refund Status or check via our income tax refund status guide.
Enable e-Filing Vault — If not already active, enable it now from My Profile.

Bottom Line

For most individual taxpayers, password + Aadhaar OTP is the simplest and most reliable login method. Keep your Aadhaar-linked mobile active, remember your password (8-14 characters), and enable e-Filing Vault for extra security. Companies must use DSC — there is no workaround. NRIs should maintain an active Indian mobile or authorize a CA. And remember — you can pay taxes, check refund status, and link Aadhaar without logging in at all.

HonestMoney.in Editorial Team

Research-backed content sourced from official publications, regulatory filings, verified data, and real-world experiences. Updated May 2026.

FAQ 12

Frequently Asked Questions

Research-backed answers from verified data and published sources.

Which income tax login method is best for salaried individuals?

Password plus Aadhaar OTP is the most reliable method for salaried individuals. You set a password once and verify each session with a 6-digit OTP sent to your Aadhaar-linked mobile. The OTP arrives within 30 seconds in most cases, is valid for 15 minutes, and you get 3 attempts per session. Since July 2025, Aadhaar OTP is mandatory as the second factor anyway. Avoid net banking login unless your bank is in the pre-approved list — only about 20 banks support it. DSC is overkill for individuals unless you file frequently for others.

Can an HUF log in using Aadhaar OTP?

No. HUFs cannot use Aadhaar OTP because Aadhaar is issued only to individuals, not to entities like HUFs, companies, or trusts. The HUF karta's PAN is the user ID, but the login must use password plus registered mobile or email OTP. For password reset, the HUF karta must use the mobile number or email registered against the HUF PAN — not their personal Aadhaar. If neither is accessible, the only options are net banking (if pre-activated) or DSC upload. This is a common pain point during ITR filing season.

How does a company log in to the income tax portal?

Companies use their PAN as the user ID and must mandatorily use a Digital Signature Certificate for filing. However, for portal login itself, companies can use password plus OTP sent to the registered email or mobile of the principal contact. The principal contact — typically the director or company secretary — must be registered on the portal first. DSC must be Class 2 or Class 3 issued by an Indian Certifying Authority like eMudhra, Sify, or NSDL CA. The DSC is registered against the company PAN via the DSC Management utility in the portal.

What should I do if my income tax account is locked after failed attempts?

After 5 consecutive wrong password attempts, the account locks for exactly 30 minutes. Do not attempt login during this period — the timer resets with each failed attempt. Wait the full 30 minutes, then try again with the correct password. If you have genuinely forgotten your password, click Forgot Password immediately instead of guessing. You can reset via Aadhaar OTP (fastest, under 2 minutes), registered email or mobile OTP, net banking, or DSC upload. The lockout applies to the password field only — Aadhaar OTP and net banking login methods remain accessible during the lockout.

Why am I not receiving the Aadhaar OTP for income tax login?

Check these five things in order. First, confirm your PAN is linked to Aadhaar — if not, Aadhaar OTP will not work at all. Second, verify the mobile number registered with UIDAI matches your current number — update it at an Aadhaar centre if needed. Third, check if you have exceeded 3 OTP attempts in the current session; wait 30 minutes and retry. Fourth, ensure your mobile has network coverage since UIDAI sends OTPs via SMS, not app notification. Fifth, check if UIDAI servers are down — this happens during peak filing season in July. If all else fails, switch to password plus email OTP as an alternative.

How do I set up net banking login for the income tax portal?

Net banking login requires one-time pre-activation. Log in to the e-Filing portal with your password first, go to My Profile, then select Link My Bank Account or Add Bank Account. Choose your bank from the supported list — major banks like SBI, HDFC, ICICI, Axis, PNB, and about 15 others are supported. Your PAN must match the name on your bank account. Once linked, you can log in directly from your net banking portal — look for the Income Tax e-Filing link under Tax Services or Government Services. This bypasses the e-Filing portal password entirely.

How do I register my DSC on the income tax portal?

First, ensure you have a valid Class 2 or Class 3 DSC issued by an Indian Certifying Authority recognized by CCA. Plug your USB token into your computer and install the emsigner utility from the e-Filing portal downloads section. Log in to the portal using your password, navigate to My Profile, then Register DSC. The portal reads the certificate from your USB token via emsigner. Select the correct certificate if multiple are stored, enter the token PIN, and submit. Registration takes effect immediately. The DSC must not be expired — check validity dates in the certificate properties before attempting registration.

What services can I access without logging in to the income tax portal?

The e-Filing portal offers over 10 services without any login. You can use e-Pay Tax to pay self-assessment, advance, or demand tax via the pre-login e-Pay facility. Instant e-PAN lets you get a new PAN via Aadhaar in 10 minutes. Know Your AO or JAO shows your jurisdictional assessing officer. Verify PAN Status confirms whether your PAN is active or inoperative. Link Aadhaar lets you link PAN to Aadhaar and pay the late fee. The Tax Calculator estimates liability under old and new regimes. You can also verify ITR filing status, check TDS certificate authenticity, and access the income tax return statistics page.

Can I log in to the income tax portal if my PAN is inoperative?

Yes, you can still log in with an inoperative PAN. The portal allows login but restricts certain post-login services — you cannot file ITR, process refunds, or access some compliance features. The primary action available is the Link Aadhaar facility to reactivate your PAN. If your PAN became inoperative due to non-linkage with Aadhaar after the deadline, you must pay the Rs 1,000 late fee under Section 234H via the e-Pay Tax facility and then complete the linkage. Reactivation takes 7 to 30 days after successful linkage. TDS continues to be deducted at higher rates under Section 206AA until PAN is reactivated.

What is the user ID format for CAs and ERIs on the income tax portal?

Chartered Accountants use the format ARCA followed by 6 digits — for example, ARCA012345. This is their unique CA registration number on the e-Filing portal, not their ICAI membership number. External Return Intermediaries use ERIP followed by 6 digits — for example, ERIP045678. Tax Deductors and Collectors log in using their TAN, not PAN. Individual taxpayers use their 10-character PAN as the user ID. CAs and ERIs have multi-client dashboards and can switch between client accounts, but the portal forces a logout when switching between clients to prevent data leakage.

What is e-Filing Vault and should I enable it?

e-Filing Vault is the higher security feature on the income tax portal that adds an extra verification layer beyond the standard password. When enabled, every login requires a second-factor code sent to your registered mobile or email — similar to how banking apps work. Enable it from My Profile, then e-Filing Vault, then Higher Security. You can choose which activities trigger extra verification: login, filing returns, resetting password, or all three. It is strongly recommended for taxpayers with high-value refunds, business owners, and anyone who has shared their PAN with multiple parties. The feature is free and takes under 2 minutes to activate.

How do NRIs log in to the income tax portal when they are outside India?

NRIs face systematic access barriers. The primary issue is Aadhaar OTP — if your Indian mobile is inactive or you are outside India without roaming, OTPs will not reach you. Password login with email OTP works if your registered email is accessible. Net banking login works only if you maintain an NRI account with a supported Indian bank like SBI or ICICI. DSC from an Indian CA works if you have one. The practical solution is to keep an Indian mobile number active via international roaming or use a virtual number service. Update your registered email to one you access regularly. Some NRIs use authorized representatives like CAs who log in on their behalf.

Disclaimer: This information is for educational purposes only and does not constitute tax advice. Tax laws change frequently. Consult a qualified Chartered Accountant or tax professional before making tax-related decisions. Always verify with the latest Income Tax Act provisions and official government notifications.

5 Login Methods: Quick Comparison