Quick Answer: To recover a forgotten IRIS password, go to the IRIS portal login page, click "Forgot Password," enter your CNIC/NTN and registered email or mobile number, then verify with the OTP sent to you. Once verified, IRIS lets you set a new password instantly, restoring full access to your FBR taxpayer profile.

Introduction

If you've typed your CNIC and password into the FBR IRIS login page one too many times without success, you're not alone — thousands of Pakistani taxpayers face this exact problem every filing season. At Baco Consultants, we help individuals and businesses resolve login and compliance issues on the IRIS portal every day, from a simple forgotten password to more complex problems like NTN registration for salaried individuals, annual income tax filing, and responding to FBR notices. This guide walks you through exactly how to reset your IRIS password in 2026, what to do if your registered contact details have changed, and how to avoid losing access again.

What Is IRIS and Why Password Recovery Matters

IRIS is the Federal Board of Revenue's (FBR) online portal where every registered taxpayer in Pakistan manages their profile, files income tax returns, checks their Active Taxpayer List (ATL) status, and responds to notices. Losing access to your IRIS account effectively locks you out of your entire tax profile — you can't file returns, view past submissions, or update your NTN details until access is restored.

Because IRIS ties your login directly to your CNIC and registered contact information, password recovery isn't just a technical inconvenience — it's a compliance issue. Missing a filing deadline because you couldn't log in doesn't excuse you from penalties, so knowing the recovery process cold is genuinely useful.

Common Reasons You Get Locked Out of IRIS

Before recovering your password, it helps to understand why this happens so often:

• Long gaps between logins — many taxpayers only log in once a year during tax season and simply forget their password.
• Changed contact details — a new phone number or abandoned email address breaks the verification chain.
• Browser or cache issues — IRIS sometimes fails to load recovery pages properly on outdated browsers.
• Multiple accounts confusion — some users mistakenly create a second profile instead of recovering the original one, which only complicates things further.
• CNIC updates — a renewed CNIC with a different expiry date can occasionally cause verification mismatches.

Step-by-Step: How to Recover Your Forgotten IRIS Password

Here's the full IRIS password recovery process for 2026:

1. Go to the IRIS login page. Visit the official FBR IRIS portal directly — avoid third-party links claiming to offer "faster" recovery.
2. Click "Forgot Password." This link sits just below the standard login fields.
3. Enter your CNIC or NTN. This is how IRIS identifies your taxpayer profile.
4. Choose your verification method. IRIS will typically offer email, SMS, or both, depending on what's registered.
5. Enter the OTP. A one-time code will be sent to your registered email or mobile number. Enter it within the given time window — codes usually expire within a few minutes.
6. Set a new password. Choose a strong password combining letters, numbers, and symbols. Avoid reusing passwords from other accounts.
7. Log in and verify your profile. Once inside, check that your CNIC, NTN, email, and mobile details are all current and accurate.

If every step goes smoothly, you should regain full account access within minutes. If you're also newly registering or need to update your registration details, our guide on NTN registration in Pakistan is a useful next read.

What to Do If You Don't Have Access to Your Registered Email or Mobile

This is where most people get stuck — and it's the scenario we see most often at Baco Consultants. If your registered email or SIM number is no longer active, IRIS's automated recovery won't work, because it has nowhere to send the OTP.

In this case:

• Visit your nearest FBR Regional Tax Office (RTO) with your original CNIC.
• Submit a written request for updating your registered email/mobile number on your taxpayer profile.
• Expect manual verification, which can take a few working days depending on the RTO's workload.
• Bring supporting documents such as your NTN certificate or past tax return acknowledgments if available, since these speed up manual verification.

Because this process involves in-person visits and manual FBR review, many taxpayers — especially freelancers, overseas Pakistanis, and business owners — prefer to have a tax consultant handle it on their behalf.

Common Mistakes During IRIS Password Recovery

• Entering the wrong NTN/CNIC format. IRIS is strict about formatting — no dashes in some fields, dashes required in others.
• Waiting too long to enter the OTP. Codes expire quickly; request a fresh one if it's been more than a few minutes.
• Using an outdated browser. Older versions of Internet Explorer or heavily cached browser sessions frequently break the recovery flow. Switching to updated Chrome or Firefox usually fixes this instantly.
• Creating a duplicate IRIS profile instead of recovering the original — this creates compliance headaches down the line and can complicate your Active Taxpayer List status.
• Ignoring CAPTCHA errors — a mismatched CAPTCHA silently fails the request without a clear error message on some browsers.

Security Best Practices After Recovery

Once you're back into your account, take a few minutes to lock things down properly:

When to Get Professional Help

If you've tried the recovery process multiple times without success, or if your registered contact information needs an in-person update at FBR, it's often faster to work with a consultant who handles this regularly. This is especially true for:

• Business owners managing NTN registration for companies
• Overseas Pakistanis who can't easily visit an RTO in person
• Taxpayers facing an approaching filing deadline
• Anyone who has also received an FBR notice alongside the login issue

Our team at Baco Consultants regularly assists clients across Islamabad, Rawalpindi, and beyond with exactly this kind of FBR account recovery and compliance support — see our tax advisory services in Islamabad for more detail.

Latest IRIS Updates for 2026

FBR has continued refining IRIS's identity verification system through 2026, including tighter OTP expiry windows and improved CAPTCHA handling to reduce bot-driven recovery attempts. Taxpayers are also seeing more prompts to confirm CNIC expiry dates during login, in line with FBR's broader push toward stronger digital identity verification across the official IRIS portal. If you're filing this year, it's worth cross-checking your details against our updated guide on income tax slabs for salaried individuals in 2026–27.

FAQs

1. How long does IRIS password recovery take?
If your registered email or mobile is active, recovery is instant — usually under five minutes. If you need FBR to update your contact details manually, it can take a few working days.

2. Can I recover my IRIS password without CNIC?
No. Your CNIC (or NTN) is the primary identifier IRIS uses to locate your taxpayer profile, so it's required for any recovery method.

3. What if I never receive the OTP?
Check that your registered email/mobile number is still active and correctly entered. If the issue persists, clear your browser cache or try a different device before contacting FBR support.

4. Can someone else recover my IRIS password for me?
Only with proper authorization. A tax consultant can assist with the process, but FBR requires your CNIC and personal verification details either way.

5. Is it safe to reset my IRIS password on a public computer?
It's best avoided. Since IRIS holds sensitive tax and financial data, always use a private, trusted device when logging in or resetting your password.

6. What happens if I keep entering the wrong CNIC format?
IRIS will reject repeated invalid attempts, and in some cases, temporarily lock the recovery request. Double-check the required format (with or without dashes) before resubmitting.

7. Do I need to update my NTN details after recovery?
It's a good habit to verify your profile details after regaining access, especially if you've recently changed your business status or contact information.

8. Can I use the same password recovery process for sales tax accounts?
Yes — sales tax and income tax profiles are both managed under the same IRIS login, so recovery works the same way across both.

Conclusion

Recovering a forgotten IRIS password is usually a quick fix — verify your CNIC, confirm your OTP, and set a new password. The real complications arise when your registered email or mobile number is outdated, which requires an in-person FBR visit and manual verification. Rather than losing time or risking a missed filing deadline, it's often easier to let a professional handle the process for you.

If you'd like hands-on help recovering your IRIS account, updating your taxpayer profile, or staying compliant with FBR, visit Baco Consultants or book a consultation with our team today.