In a decisive and forward-thinking move to fortify the robustness of security measures associated with GST logins and deter unauthorized access, the Goods and Services Tax Network (GSTN) has introduced the proactive implementation of Two-Factor Authentication (2FA) for taxpayers.
Upon the meticulous inputting of their login credentials, taxpayers will promptly and securely receive a unique one-time password (OTP). This OTP, providing extra security, will be sent to the Mobile number and Email ID of the Primary Authorized Signatory. Ensuring the utmost security, taxpayers are urged to regularly verify and update the Mobile number and Email ID within the authorized signatory’s contact details.
The rigorous testing of the 2FA protocol commenced with meticulous attention in the State of Haryana in November 2023. With the results yielding a high degree of satisfaction, the implementation swiftly extended its reach to encompass states such as Punjab, Chandigarh, Uttarakhand, Rajasthan, and Delhi. This implementation came into effect on December 1, 2023, marking the initiation of the first phase. The subsequent phase, poised for rollout in the imminent future, will comprehensively cover the remaining states.
2FA security will activate whenever a user changes their device, browser, or login location. After the first login, the system won’t request the same authentication unless accessed from a different location or system.
Limitations:
While 2FA strengthens GST account security, it is important to acknowledge and address certain inherent limitations.
-
Challenges for Companies and Tax Consultants:
-
Potential Delays and Late Fees:
-
Network Glitches and Operational Challenges:
Discover how 2FA improves GST portal safety and ensures secure access with CaptainBiz.

CA Abhishek D Mundhra
Chartered Accountant
Abhishek D Mundhra is a Chartered Accountant with 12+ years of post-qualification experience with expertise in the field of GST and other Direct and Indirect Taxes.