Quick Answer

To reset your FBR IRIS password, go to iris.fbr.gov.pk, click "Forgot Password," and enter your CNIC or NTN as your Registration Number. Choose to receive a verification code by email or SMS, enter that code, then set a new password. If your registered contact details are outdated, you'll need to visit your nearest Regional Tax Office with your original CNIC.

Introduction

If you've typed your CNIC into the FBR IRIS login screen one too many times only to be told your credentials are wrong, you're not alone — password and login trouble is one of the most common reasons Pakistani taxpayers miss filing windows every year. The good news is that recovering your account takes a few minutes once you know the right sequence. This guide from the Institute of Corporate and Taxation (ICT) breaks the process down step by step, and if you'd rather understand the whole portal — not just the password screen — our FBR IRIS login guide and complete IRIS 2.0 tax survival guide cover registration, filing, and dashboard navigation in full. For anyone planning to handle this professionally rather than just for personal filing, our Certified Tax Advisor course teaches the practical, portal-level skills tax consultants use daily.

Key Takeaways

• The "Forgot Password" link sits directly below the login fields on the IRIS homepage.
• Your CNIC (13 digits, no dashes) doubles as your Registration Number/username.
• Recovery codes go to whichever email and mobile number are on file — not necessarily your current ones.
• Five failed login attempts trigger an automatic lockout, separate from a password reset.
• Lost access to both your old email and phone means an in-person RTO visit is unavoidable.
• Passwords on IRIS are subject to periodic expiry, so treat this as recurring account hygiene, not a one-time fix.

What Is FBR IRIS and Why Password Issues Happen

IRIS is the Federal Board of Revenue's online tax portal, where every registered taxpayer in Pakistan logs in to file returns, check their Active Taxpayer List (ATL) status, and respond to FBR notices. Because it's the single gateway for nearly all tax activity, a locked account effectively pauses your ability to file, pay, or reply to FBR — which is exactly why password problems feel more urgent than they would on an ordinary website.

Password issues on IRIS tend to fall into a handful of patterns: a simply forgotten password, a CNIC entered incorrectly (it must be 13 digits with no dashes), an account locked after repeated failed attempts, or contact details — email and mobile — that changed without being updated on the portal. Each has a slightly different fix, which is why "just reset it" doesn't always work on the first try.

Step-by-Step: How to Reset Your FBR IRIS Password

Here's the process as it currently works on the portal:

1. Go to iris.fbr.gov.pk and open the login screen.
2. Click "Forgot Password" (sometimes labeled "Forgot Password / Account Recovery") below the login fields.
3. Enter your Registration Number — this is your CNIC or NTN, entered without dashes.
4. Choose your recovery method — email, SMS, or both, depending on what the portal offers at that step.
5. Enter the verification code (OTP) sent to your registered email and/or mobile number.
6. Set a new password, then confirm it and log in.

According to the official IRIS 2.0 user manual, recovery involves selecting Forgot Password on the login page, entering your CNIC or Registration Number linked to your NTN, and confirming the email address on the account before an OTP is triggered on both your registered mobile number and email. If either of those channels goes through, you'll land on a screen to create and confirm a new password.

Note: The exact screen order can shift slightly between portal updates, but the underlying logic — CNIC in, OTP verification, new password out — has stayed consistent.

What You Need Before You Start

Have these ready before you click "Forgot Password" so you're not stopped halfway through:

If any of these — especially the email or mobile number — no longer belong to you, skip ahead to the next section before attempting a reset, since the standard flow will fail without them.

If You've Lost Access to Your Email or Mobile Number

This is where most people get genuinely stuck, and it's worth planning for rather than discovering mid-deadline.

If you have lost access to your registered email or phone number, you will need to visit your nearest Regional Tax Office (RTO) with your original CNIC for manual verification. Bring your original CNIC (not a photocopy) and be prepared to explain which details need updating. RTO staff will verify your identity manually and update your profile so the standard online reset works again going forward.

This is also a common trigger point for mobile number issues specifically — telecom providers sometimes reassign old numbers to new customers after a period of inactivity, which quietly breaks OTP-based recovery without any warning. If you haven't logged into IRIS in a while, it's worth checking that your registered mobile number is still yours before you actually need it.

If you're a business owner, freelancer, or consultant managing multiple client accounts, our guide on FBR non-filer penalties and escalation in 2026 explains why resolving access issues early — well before the ATL deadline — matters more than it used to.

Common IRIS Login & Password Errors (and Fixes)

For a deeper walkthrough of error messages specific to filing season — including what "profile not updated" prompts mean — see our FBR IRIS 2.0 tax survival guide.

IRIS Password Reset vs Account Recovery: What's the Difference

These two terms get used interchangeably, but they're not identical:

• Password reset assumes your account, CNIC registration, and contact details are all intact — you've simply forgotten the password itself. This is resolved entirely online through "Forgot Password."
• Account recovery covers broader scenarios: outdated contact details, a suspended account, or a profile that needs manual correction. This often requires an RTO visit rather than a self-service form.

Knowing which situation you're in before you start saves time — attempting a standard reset when you actually need account recovery just produces repeated OTP failures.

Best Practices to Avoid Future Lockouts

• Keep your registered mobile number and email current, especially after switching SIMs or changing jobs.
• Update your profile promptly whenever IRIS prompts you to, rather than dismissing the notice.
• Avoid multiple rapid login attempts if you're unsure of your password — this triggers the five-attempt lockout faster than expected.
• Note your password reset date somewhere private, since IRIS enforces periodic expiry.
• If you manage returns for clients or family members, keep a secure, updated record of which contact details are linked to each CNIC.

Tax consultants and professionals who handle these recoveries for multiple clients regularly often build this into their onboarding checklist. If you're considering tax consulting as a career path, our tax advisor salary and scope guide for Pakistan 2026 and Certified Tax Advisor course cover exactly this kind of practical, portal-level competency alongside broader tax law training.

Why Choose ICT for FBR IRIS Password Reset Guidance?

Losing access to your FBR IRIS account can make tax filing and other online FBR services difficult. ICT provides clear, practical, and easy-to-follow guidance to help taxpayers understand the FBR IRIS password reset and account recovery process in 2026. From forgotten passwords and login problems to verification issues and account access, our guidance helps you understand the right steps without unnecessary confusion. Whether you are an individual taxpayer, business owner, freelancer, or tax professional, ICT helps you navigate the IRIS portal with greater confidence and understand the latest procedures for recovering your account.

FAQs

1. How do I reset my FBR IRIS password if I forgot it?
Click "Forgot Password" on the IRIS login page, enter your CNIC as your Registration Number, verify via the OTP sent to your registered email or mobile number, then set a new password.

2. What if I don't have access to my registered email or phone anymore?
You'll need to visit your nearest Regional Tax Office in person with your original CNIC for manual identity verification and profile correction.

3. Why does IRIS keep saying my password is invalid?
Usually it's a formatting issue — CNIC entered with dashes, Caps Lock on, or a trailing space pasted into the password field. Retype both fields manually.

4. How long does an IRIS account stay locked after failed login attempts?
Accounts typically lock for a set window after five consecutive failed attempts; contacting the FBR helpline can sometimes expedite an early unlock.

5. Is there a difference between a locked and a suspended IRIS account?
Yes. A locked account results from failed login attempts and usually self-resolves after a waiting period. A suspended account, often tied to a compliance flag, requires an in-person RTO visit to resolve.

6. Do IRIS passwords expire?
Yes, IRIS enforces periodic password expiration as a security measure, so you'll be prompted to change your password on a recurring cycle.

7. Can someone else reset my IRIS password for me?
Not directly — recovery is tied to your personal CNIC and registered contact details. A tax consultant can guide or accompany you through an RTO visit, but identity verification must involve you.

8. What's the fastest way to reset an IRIS password before a filing deadline?
Use "Forgot Password" as early as possible rather than waiting until the deadline, since RTO visits (if needed) can take time you won't have on the last day.

Conclusion

A locked-out FBR IRIS account is inconvenient, but it's rarely a dead end — for most people, "Forgot Password," a working OTP, and a new password solve it in minutes. The cases that take longer are the ones involving outdated contact details or account suspensions, which is exactly why keeping your profile current matters more than it seems to until you actually need it. If you're building a career around solving these problems for others — or simply want to file your own returns with real confidence instead of guesswork — the Institute of Corporate and Taxation (ICT) trains students, professionals, and business owners on the full IRIS workflow, not just the login screen. Explore our Certified Tax Advisor course or browse our full course catalog to see what fits your goals. Book a seat at ICT and turn tax filing from a yearly headache into a skill you actually own.