Few things are more frustrating than being locked out of IRIS a few days before the filing deadline. FBR’s portal uses two credentials, a password to log in and a PIN to submit returns and forms, and forgetting either one stops you from completing your work.
This guide explains how to reset both, what to do in more difficult situations, and how to protect yourself from future lockouts.
Understanding the password and the PIN
- Password: used together with your CNIC or registration number to sign in to IRIS.
- PIN: a separate code you enter when submitting important forms, including the income tax return.
Both are tied to the mobile number and email address registered in your IRIS profile. FBR sends verification codes to these when you reset either credential.
How to reset your IRIS password
- Open the official IRIS portal (iris.fbr.gov.pk).
- Click the forgotten-password option on the login page.
- Enter your CNIC (without dashes) or registration number.
- FBR sends one code to your registered mobile number and another to your registered email.
- Enter both codes, then create and confirm a new password.
- Log in with your new password.
How to reset your PIN
If you can log in but have forgotten your PIN, use the PIN reset option within IRIS. As with the password, verification codes are sent to your registered mobile and email. Once verified, you can set a new PIN and continue with your submission.
What if the codes go to an old mobile number?
This is the most common reason people cannot recover their accounts on their own. If your registered mobile number is closed or the email is no longer accessible, the codes cannot reach you. The contact details must be updated first.
- If you can still log in: you can submit a profile modification to change the mobile number or email, although verification may be needed.
- If you are locked out: FBR has a separate process to verify your identity and update your contact details. This usually takes longer, so start early.
Our FBR profile update service guides you through the right process for your situation.
What if you cannot remember whether you are registered?
Enter your CNIC in the forgotten-password screen. If IRIS recognises it, you have an account. If not, you may need to register as a new user. Do not try to create a second account for the same CNIC.
Tips to make the reset go smoothly
- Use a desktop browser and keep your phone and email open before you start, because codes expire.
- Do not request codes repeatedly in a short time; wait a few minutes if they do not arrive.
- Check your email spam folder for FBR messages.
- Make sure the mobile number is active and can receive SMS from short codes.
How to avoid being locked out again
- Store your credentials safely, for example in a password manager.
- Use a SIM in your own name that you intend to keep.
- Update your profile immediately when your number or email changes.
- Log in once a few months, not only at filing time, to check your inbox and confirm your access works.
Security reminders
Anyone with your password and PIN can submit documents in your name. Share them only with a trusted tax professional, and consider changing them after the work is done. Be cautious of messages asking you to verify your IRIS account through links; always log in through the official portal.
Practical example: helping an overseas family member
Usman lives in Dubai, and his father in Gujrat needs to file a return. The father’s IRIS account was created years ago with Usman’s old Pakistani SIM, which is now closed. The password reset fails because the code goes to that number. The family first updates the registered mobile number to a SIM in the father’s own name through the correct modification process, then resets the password and PIN. From then on, codes reach the father directly, and Usman no longer needs to be involved. This kind of situation is very common in families where one member set up accounts for others.
Step-by-step troubleshooting
- Can you receive codes on both the registered mobile and email? If yes, use the standard reset.
- Is only one of them accessible? Update the inaccessible contact detail first.
- Are neither accessible? Follow FBR’s identity verification process to update contact details. Expect this to take longer.
- Does IRIS not recognise your CNIC? You may not be registered; consider new registration.
- Does the page freeze or show errors? Try another browser, clear the cache and avoid peak hours near deadlines.
Choosing a strong password and PIN
- Use a long password with a mix of letters, numbers and symbols.
- Do not use your CNIC, date of birth or mobile number.
- Do not reuse a password from email or social media.
- Keep the PIN different from your password.
Expert tips
- Do the reset on a computer while your phone is next to you; codes expire quickly.
- After regaining access, immediately check the Inbox for pending notices.
- If a consultant files for you, agree on how credentials will be shared and changed afterwards.
- Keep a note of when you last updated your profile so you can spot outdated details.
Frequently asked questions
How long are the verification codes valid?
Codes are valid for a limited time. If they expire, request new ones and enter them promptly.
Can I reset my password without the registered email?
The standard process needs both your registered mobile and email. If you cannot access one of them, the contact details need to be updated first.
Will resetting my password affect my filed returns?
No. Your returns, notices and records remain unchanged. Only your login credentials change.
Can a consultant reset my password for me?
A consultant can guide you and complete the process with you, since the codes are sent to your phone and email.
Locked out close to a deadline?
Do not wait until the last day. Our team can help you regain access quickly and file on time. See our FBR password and PIN recovery service or message us on WhatsApp at +92 329 9554206.
How Tax & Law Hub can help
Our team solves IRIS access problems every week. We can:
- diagnose why you are locked out and guide the right recovery process,
- update the mobile number, email and other details in your FBR profile,
- create a new IRIS account if you have never registered,
- file your return once access is restored.
Message us on WhatsApp and a consultant will reply with the next step.
This article is general information about Pakistani tax, corporate and legal procedures and is not advice for your specific situation. Laws, rates and procedures change, especially through annual Finance Acts. Last reviewed: November 2026. For advice on your case, contact Tax & Law Hub.
