The Central Board of Indirect Taxes and Customs (CBIC) on June 24, 2026, issued a notification regarding the Procedure for 2 Factor Authentication.
The following has been stated:-
•The Central Board of Indirect Taxes and Customs (CBIC) has made Two-Factor Authentication (2FA) mandatory for all taxpayer logins to the ACES-GST application with effect from June 21, 2026, to strengthen account security and protect sensitive taxpayer information.
•The new login process adds an extra layer of authentication through OTP verification in addition to the User ID and Password.
•Taxpayers must ensure that their registered mobile number and email ID are valid, active, and accessible to receive OTPs.
•Failure to maintain updated contact details may result in login and access issues.
•The advisory also provides the procedure for enabling 2FA and updating contact details in Annexure-A.
The detailed notification is given in the document below.
[Notification No.: 11 /2026 – Procedure for 2 Factor Authentication]
