IRIS is the Federal Board of Revenue’s online portal for taxpayers in Pakistan. It is where you register for an NTN, file your income tax return and wealth statement, reply to notices, download certificates and update your profile. Because almost everything happens on IRIS, being unable to log in can stop you from filing on time or responding to FBR.
This guide explains how the IRIS login works, how to reset a forgotten password or PIN, and what to do about the errors taxpayers run into most often.
What you need before logging in
- Your CNIC number (for individuals) or registration number (for businesses and companies). For individuals, the 13-digit CNIC without dashes works as the username.
- Your IRIS password, which you created at the time of registration.
- Access to your registered mobile number and email, because FBR sends verification codes and PINs to them.
- A desktop or laptop browser. IRIS works on mobile browsers, but long forms such as the return and wealth statement are much easier on a computer.
How to log in to IRIS step by step
- Open the official portal at iris.fbr.gov.pk. Always type the address yourself or use FBR’s official website; do not use links from unknown messages.
- Enter your CNIC (or registration number) in the username field.
- Enter your password and complete the captcha.
- Click login. You will see your IRIS dashboard with your inbox, drafts and completed tasks.
Once logged in, check the Inbox section first. Notices and messages from FBR appear here, and missing one can lead to penalties.
Password and PIN: what is the difference?
IRIS uses two separate secrets. The password lets you sign in. The PIN is a separate code that you need when you submit certain forms, including your income tax return. Many taxpayers can log in but get stuck at the final submission step because they have forgotten the PIN.
How to reset a forgotten IRIS password
- On the IRIS login page, choose the option for a forgotten password.
- Enter your CNIC or registration number.
- FBR sends verification codes to the mobile number and email address registered in your profile.
- Enter both codes on the screen and set a new password.
Choose a strong password that you have not used elsewhere, and store it somewhere safe. If you prepare returns for family members, keep each person’s credentials separate.
How to reset a forgotten PIN
The PIN can also be reset from within IRIS using verification codes sent to your registered mobile number and email. If you can log in, look for the option to reset or change your PIN in your account settings. If you cannot receive the codes, you will need to update your contact details first, as explained below.
Common IRIS login problems and how to fix them
1. Codes are going to an old mobile number or email
This is the single most common problem. If you changed your SIM or no longer use the email you registered with, the reset codes go to the old contact details. In this situation the contact details in your profile must be updated before you can reset your credentials. The process depends on whether you can still log in. If you are locked out completely, the update usually requires additional verification. Our FBR profile update service handles this for you.
2. “Invalid username or password”
Check that you are entering the CNIC without dashes and that the keyboard is not in capitals. Passwords are case-sensitive. If the message continues, reset the password rather than trying again and again, which may temporarily lock the account.
3. You are not sure whether you ever registered
Many people registered years ago, for example when an employer or bank asked for an NTN, and have forgotten. Try the password reset with your CNIC. If IRIS recognises the CNIC, an account exists. If it does not, you may need to register as a new user.
4. The mobile number is not in your own name
FBR expects the registered SIM to be biometrically verified in the taxpayer’s own name. Numbers registered to a family member often cause verification problems. Use a SIM in your own name when registering or updating your profile.
5. The page does not load or freezes
IRIS is busy close to filing deadlines. Try a different browser, clear your browser cache, disable pop-up blockers for the site and avoid the last few days before the deadline whenever possible.
Keeping your IRIS account safe
- Never share your password and PIN with people you do not trust. Anyone with both can file documents in your name.
- Be careful with messages that ask you to “verify your IRIS account” through a link. Log in only through the official portal.
- Update your mobile number and email in IRIS as soon as they change.
- Log out after using IRIS on a shared computer.
What to do after you log in
Once you have access, use the opportunity to check three things: whether there are unread notices in your inbox, whether your returns for recent years are filed, and whether your profile details (address, mobile number, email, bank accounts and business information) are correct. Fixing these early prevents bigger problems later.
A quick tour of the IRIS dashboard
After logging in, many first-time users feel lost because IRIS looks different from ordinary websites. The main areas you will use are:
- Inbox: notices, orders and messages from FBR. Unread items are highlighted.
- Drafts: forms you have started but not submitted. A return in Drafts has not been filed.
- Completed Tasks: forms you have submitted, with their acknowledgements.
- Declaration: where you open return forms, wealth statements and other declarations.
- Registration: where you view or modify your profile (Form 181 and modification forms).
- Payment: where you create payment challans (PSID) for tax payable.
Practical example: a last-minute lockout
Consider a salaried employee in Gujranwala who wants to file her return in the last week of September. She remembers her password but not her PIN, and her registered mobile number belongs to an old SIM she no longer uses. Her email still works. In this situation she cannot complete the PIN reset because one of the two codes goes to the old number. The correct approach is to submit a profile modification to update the mobile number first, then reset the PIN. Starting a few weeks earlier would have avoided the pressure. This is a very common pattern, and the lesson is simple: check your access in July, not in late September.
Checklist before every filing season
- Log in once and confirm your password works.
- Open a form and confirm your PIN works at the submission screen (without submitting).
- Check that the mobile number and email in your profile are current.
- Clear any unread notices in the Inbox.
- Download last year’s return and wealth statement for reference.
Expert tips from our consultants
- Bookmark the official IRIS address in your browser instead of searching for it each time.
- If you manage several family members’ accounts, keep a simple record of whose mobile and email is linked to which account.
- When you change your SIM, update IRIS in the same week. Delays are what turn a two-minute reset into a lengthy process.
- Take screenshots of any error messages; they help a consultant diagnose the problem quickly.
Frequently asked questions
Is IRIS the same as the FBR website?
No. The main FBR website (fbr.gov.pk) provides information, forms and verification services, while IRIS (iris.fbr.gov.pk) is the portal where you log in to file and manage your tax affairs.
Can I log in to IRIS from my phone?
Yes, IRIS can be opened in a mobile browser, and FBR also offers a mobile app for some services. For filing long forms, a computer is more convenient.
How long does a password reset take?
If you have access to your registered mobile number and email, the reset is usually immediate. If your contact details have changed, it takes longer because they must be updated first.
Can someone else log in to file my return?
A tax consultant can file on your behalf with your authorisation. Share your credentials only with a professional you trust, and change your password afterwards if you wish.
Need help getting back into IRIS?
If you are locked out, close to a deadline or worried about a notice, our team can help you regain access quickly. See our FBR password and PIN recovery service or message us on WhatsApp at +92 329 9554206.
How Tax & Law Hub can help
Our team solves IRIS access problems every week. We can:
- diagnose why you are locked out and guide the right recovery process,
- update the mobile number, email and other details in your FBR profile,
- create a new IRIS account if you have never registered,
- file your return once access is restored.
Message us on WhatsApp and a consultant will reply with the next step.
This article is general information about Pakistani tax, corporate and legal procedures and is not advice for your specific situation. Laws, rates and procedures change, especially through annual Finance Acts. Last reviewed: November 2026. For advice on your case, contact Tax & Law Hub.
