Income Tax Login made easy: Tips

Income Tax Login Made Easy: Tips

The income tax e-filing portal at incometax.gov.in is your single point of contact with the Income Tax Department — for filing returns, responding to notices, tracking refunds, and reviewing your Annual Information Statement. In 2026, two-factor authentication is mandatory, Aadhaar–PAN linking determines whether your PAN stays operative, and an unverified ITR is legally treated as one never filed. This guide covers every step — registration, login, password reset, AIS/TIS access, bank pre-validation, and e-verification — for FY 2026-27 (AY 2027-28), so you can handle the portal confidently without firefighting at the last minute.

First-Time Registration: Lay the Foundation Correctly

Before you can log in at all, you must register. It is a one-time process, but errors here compound every subsequent year.

Step-by-step registration sequence:

1. Go to incometax.gov.in and click Register
2. Select your User Type: Individual, HUF, Company, Firm/LLP, AOP/BOI, Local Authority, or Artificial Juridical Person
3. Enter your PAN — this becomes your permanent User ID; verify it exactly before proceeding
4. Enter your full name, date of birth (individuals) or date of incorporation (entities), registered mobile number, and email address
5. Verify both mobile and email through separate OTPs
6. Set a password: minimum eight characters, at least one uppercase, one lowercase, one numeral, one special character
7. Set your Secure Access Message (SAM) — a short personal phrase that the portal will display every time you enter your PAN on the login page; if this phrase is absent, the page is a phishing clone, not the real portal
8. Answer a secret question for future account recovery
9. Complete your address and contact details, then click Register

Your PAN is now your User ID permanently. SMS and email alerts activate immediately on registration.

The most common registration mistake: Using a mobile number or email you no longer control — a parent's number, an old employer's email. When that SIM changes hands or that inbox disappears, every future password reset becomes a manual, time-consuming process. Use numbers and addresses you will hold for years, and update them immediately if they ever change.

How to Log In: Step-by-Step for AY 2027-28

Standard PAN + Password Login

1. Open incometax.gov.in from your browser's saved bookmark — never from a link in an SMS, WhatsApp message, or email
2. Click Login and enter your PAN
3. Verify your Secure Access Message — if the phrase you set at registration does not appear, stop immediately and do not enter your password
4. Enter your password and complete mandatory two-factor authentication (2FA): OTP to your registered mobile and email, Aadhaar OTP, or net banking authentication

In 2026, the portal will not grant dashboard access without successful 2FA completion. This applies on mobile browsers, tablets, and desktop alike.

Aadhaar OTP Login

This is the fastest route and works even if you have forgotten your portal password.

1. On the login page, select Login with Aadhaar OTP
2. Enter your PAN and 12-digit Aadhaar number
3. Give consent and click Generate OTP
4. Enter the OTP sent to your Aadhaar-registered mobile (not your portal-registered mobile — these may be different)

This route is only available if your Aadhaar is linked to your PAN and the Aadhaar-registered mobile is active.

Net Banking Login

The portal is empanelled with most PSU and major private sector banks.

1. Select Login with Net Banking and choose your bank
2. Authenticate through your bank's interface
3. You are automatically redirected to the e-filing portal dashboard

Net banking login simultaneously generates an Electronic Verification Code (EVC) that you can use to e-verify your ITR in the same session — a useful efficiency when filing during peak season.

Resetting a Forgotten Password

Lost passwords are one of the most common support issues. Five reset paths are available from the login page:

Try them top to bottom. If all five fail — typically because the registered mobile is lost and the Aadhaar-registered mobile is also inactive — you must submit a manual request with self-attested identity proof to the jurisdictional Assessing Officer or contact the e-filing helpdesk. Manual resolutions can take 10–15 working days during filing season.

The single best habit: After any SIM change, log in to the portal within 48 hours and go to Profile → Contact Details → Edit. Update the number and verify it with an OTP on the spot. Never leave an inactive mobile as your only 2FA channel entering a filing season.

Aadhaar–PAN Linking: Non-Negotiable Under Section 139AA

Under Section 139AA of the Income-tax Act, 1961, every individual eligible to obtain Aadhaar must link it to their PAN. This is not a suggested best practice — it is a statutory requirement with material financial consequences if ignored.

Consequences of an inoperative PAN:

• TDS and TCS are deducted at twice the otherwise applicable rate (or 5%, whichever is higher) on every payment made to you — salary, interest, dividends, rent, professional fees
• Refunds cannot be processed
• ITR cannot be filed using PAN-password login
• You cannot open a bank account, buy mutual funds, or execute high-value transactions that require PAN

To link Aadhaar if it is already overdue:

1. Pay a fee of Rs. 1,000 via challan on the portal under e-Pay Tax → Aadhaar-PAN linking fee
2. Log in using Aadhaar OTP login (since PAN-password login may be blocked)
3. Go to Profile → Link Aadhaar
4. Enter your Aadhaar number and verify via OTP
5. The portal validates the challan and initiates the linking; completion typically takes 48–72 hours

If your PAN is already inoperative and you receive a notice for higher TDS already deducted, the excess TDS is creditable — but you need to get PAN reactivated first, which involves an additional application process as notified by CBDT.

Pre-Validating Your Bank Account: Refunds and EVC

A pre-validated bank account does two things for you:

1. Enables direct refund credit: The Income Tax Department will credit your refund only to a bank account pre-validated with your PAN on the portal
2. Activates EVC: Once pre-validated, an account can generate an Electronic Verification Code to e-verify your ITR instantly

How to pre-validate:

1. Log in, go to Profile → My Bank Account → Add Bank Account
2. Enter account number, IFSC code, and account holder name
3. Click Pre-validate — the portal matches your PAN with the bank's records
4. Once matched, status shows a green Validated badge
5. Click Enable EVC on the validated account to also activate EVC generation

Why validation fails and how to fix it:

The portal cross-checks the exact name on your bank account against your PAN records. Even minor differences — "Suresh M. Patel" vs. "Suresh Manubhai Patel" — will fail the match. If validation fails, approach your bank's branch to update the account name to match your PAN card exactly, then retry. Do not switch to a joint account where you are the secondary holder; validation requires you to be the primary or sole account holder.

Maintain at least two pre-validated accounts from different banks. During peak filing season (July), bank API response times can slow validation; a backup saves time.

The AIS, TIS, and Form 26AS Dashboard: Understanding What You Are Looking At

These three statements draw from different data sources and serve different purposes. Confusing them leads to either under-reporting income or spending time reconciling numbers that were never meant to match.

Annual Information Statement (AIS)

AIS aggregates transaction-level data about you from every reporting entity:

• Employer TDS (salary, perquisites)
• Bank interest on savings accounts, fixed deposits, recurring deposits
• Dividend income from companies and mutual funds
• Mutual fund purchase and redemption values
• Securities transactions (from stockbroker SFT filings)
• Property purchase/sale (from registrar data)
• Foreign remittances (bank Form 15CC filings)
• GST turnover (from your GSTR-3B, for businesses)
• Cash deposits and withdrawals above threshold amounts

Access AIS via: e-File → Income Tax Returns → View AIS

Taxpayer Information Summary (TIS)

TIS is the aggregated summary of AIS — one figure per income category, net of duplicates. The portal's pre-fill engine uses TIS values to populate your ITR draft. When you see salary, interest income, and capital gains already filled in your ITR before you have typed a word, that data originated from TIS.

Form 26AS

Form 26AS is the tax credit statement — it shows TDS deducted by employers and others, TCS collected, advance tax paid, and self-assessment tax paid against your PAN. It does not show income; it shows only tax already credited. Mismatch between 26AS and what the deductor actually deposited must be raised with the deductor (employer, bank) before you file, not after.

The working sequence before filing — follow this every year:

1. Download AIS and compare every entry against your own records
2. For any entry that is incorrect, duplicate, or belongs to another person, click Feedback and mark the transaction appropriately with a brief explanation
3. Download TIS and verify that the pre-filled ITR amounts match your actual income
4. Open Form 26AS and confirm that all TDS credits are reflecting
5. If TDS is missing in 26AS, contact the deductor to file a TDS correction statement before you file your ITR

Worked Example: Catching an AIS Discrepancy Before It Becomes a Notice

Aarav is a Hyderabad-based software professional filing ITR-1 for AY 2027-28. Gross salary: Rs. 18,00,000. TDS deducted by employer: Rs. 1,85,000.

He opens AIS before filing and finds:

He investigates: he had redeemed a liquid fund in April 2026. Purchase price was Rs. 4,50,000; redemption proceeds were Rs. 4,75,000; gain = Rs. 25,000.

If he had missed this: The CPC would have issued a Section 143(1)(a) intimation adding Rs. 25,000 to his income. Assuming the 30% slab, additional tax = Rs. 7,500, plus interest under Section 234A at 1% per month from the due date (July 31, 2027) to the intimation date — often 10–12 months. At 10 months, that is Rs. 750 in interest, plus a potential 50% under-reporting penalty under Section 270A = Rs. 3,750. Total cost of missing one line: approximately Rs. 12,000, plus several hours managing the notice.

What Aarav actually does: He includes the Rs. 25,000 gain in ITR-2 (switching from ITR-1 because capital gains require ITR-2), pays self-assessment tax of approximately Rs. 7,500 online via e-Pay Tax before filing, and files a clean return. No notice. No interest. No penalty.

The AIS check took 20 minutes. The notice response would have taken a full workday.

E-Verifying Your ITR: The 30-Day Window

Filing an ITR without e-verifying it is legally equivalent to not filing at all. The return has no validity until verified.

Current rule: You have 30 days from the date of filing to verify. If you miss the window, the return is treated as invalid. You may apply for condonation of delay, but approval is not automatic.

Why the date of verification matters beyond penalties:

If you file on July 28, 2027 but verify on September 10, 2027 — outside the 30-day window — your return is deemed filed on September 10, 2027. Losses for the year (capital losses, business losses) that you intended to carry forward are forfeited, because carry-forward of losses requires a timely filed return under Section 80 of the Act.

Late Fee Under Section 234F (AY 2027-28)

• Total income above Rs. 5,00,000, filed after July 31, 2027: Rs. 5,000 (flat)
• Total income Rs. 5,00,000 or below, filed after due date: Rs. 1,000 (flat, maximum)

These are flat fees — not per-day calculations. But the 30-day verification window starts from the date of filing, not from the due date.

E-Verification Methods, Fastest First

1. Aadhaar OTP — instant; Aadhaar-registered mobile must be active
2. EVC via pre-validated bank account — instant once EVC is enabled on the account
3. EVC via net banking — log in through an empanelled bank; EVC is auto-generated
4. EVC via Demat account — through CDSL or NSDL if your Demat account is linked to PAN
5. DSC — mandatory for companies; recommended for LLPs; requires DSC token and software
6. Physical ITR-V to CPC Bengaluru — last resort; speed post only; takes 30–45 days; the 30-day timer still runs

After successful e-verification, the portal immediately displays "Your return has been successfully e-verified" with a unique acknowledgement number. Screenshot or note this reference — you will need it if the refund is delayed or a defective return notice arrives.

Pitfalls to Avoid: What Actually Goes Wrong in Practice

1. Filing before reviewing AIS The pre-filled ITR draws from TIS, but TIS may contain duplicate entries or transactions reported under the wrong PAN. Accept pre-fill only after verifying the underlying AIS. Disputes raised after filing are harder to resolve.

2. Ignoring a Section 245 notice If you have an outstanding demand from a prior assessment year, the CPC may propose to adjust your current refund against it under Section 245. The portal sends a notice giving you 30 days to agree or object. Silence is treated as consent. If the demand is incorrect, file an online rectification first, then object to the adjustment — do not just ignore the notice and expect the refund to arrive.

3. Verifying the ITR after 30 days Even if you realise on day 32 that you never verified, submit the late verification with an explanation. But understand that the return is now treated as filed on day 32, not on the original filing date. Carry-forward of losses will not be allowed.

4. Using a joint bank account where you are the secondary holder Refunds are credited only to accounts where the PAN holder is the primary or sole holder. Always use a single-name account in your own name.

5. Skipping advance tax and paying everything as self-assessment If your total tax liability after TDS exceeds Rs. 10,000 for the year, you must pay advance tax in four instalments. Missing an instalment attracts simple interest at 1% per month under Section 234C on the shortfall for that period. Paying everything as self-assessment tax in March or July does not cancel this interest — it is levied from the instalment due date, not from the filing date.

6. Not checking Form 26AS for TDS mismatches before filing If a deductor's TDS return is not filed or contains the wrong PAN, your 26AS will not reflect the credit. If you file claiming that TDS, the CPC will raise a demand for the unmatched portion. Contact the deductor before you file, not after the intimation arrives.

Tax Practitioners: Multi-User Access and e-Proceedings

For CAs and tax consultants managing client files, two portal features demand attention.

Corporate Multi-User Setup

Under a single company PAN, distinct users with separate roles can be configured:

• Principal Contact: Full administrative access
• ITR Authoriser: Can approve the return for submission
• ITR Verifier: Attaches DSC and e-verifies the filed return

This structure prevents the same individual from both preparing and verifying a return, which is good governance practice for any organisation with segregation-of-duties requirements.

e-Proceedings: Your Active Compliance Dashboard

The e-Proceedings tab consolidates all active notices and their response deadlines:

• Section 143(1) intimations requiring no action vs. those requiring objection
• Section 143(2) scrutiny notices requiring full schedules and supporting documents
• Section 148 notices for income escaping assessment
• Section 245 refund-adjustment proposals
• Section 263 revisionary proceedings by the Commissioner

For each proceeding: draft your response within the portal, attach supporting PDFs within the individual file-size limit, submit under DSC or EVC, and note the submission timestamp. All adjournment requests are submitted directly on the portal with written reasons.

Practical habit: Set a calendar alert seven days before every notice response due date. An ex-parte order (where the assessing officer proceeds without your response) is far harder to undo than filing a timely reply.

Security: Protecting Your Tax Account

Your e-filing account exposes your PAN, Aadhaar link, bank account details, and the full financial picture in AIS. Basic hygiene matters.

• Never share your password or OTP — Income Tax Department officials will never ask for these by phone, SMS, or email
• Check your login history under account settings; any unrecognised login should prompt an immediate password change and a helpdesk complaint
• Change your password before each filing season — at the start of April is a good habit
• Bookmark incometax.gov.in — never access it from a link in a forwarded message; always type or use your saved bookmark
• Log out explicitly on shared or public devices; browser session expiry is not guaranteed
• Enable push alerts on the portal so every new-device login triggers an SMS — you will spot unauthorised access within minutes

Key Takeaways

• Your PAN is your permanent User ID. Register once, link Aadhaar before PAN becomes inoperative, and keep mobile and email current at all times — not just during filing season.
• Two-factor authentication is mandatory in 2026. Aadhaar OTP login is the fastest option, but only if your Aadhaar-registered mobile is active.
• An inoperative PAN doubles TDS rates on every payment to you. If you have not yet linked Aadhaar, pay the Rs. 1,000 fee and complete the linking immediately — the daily cost of inaction is borne by every rupee flowing through your PAN.
• Pre-validate a bank account before July. Name mismatches cause validation failure; get the bank account name corrected to match your PAN exactly before peak season.
• Review AIS before accepting pre-fill. Feedback on incorrect AIS entries submitted before filing is far easier to resolve than responding to a Section 143(1)(a) intimation after the return is processed.
• E-verify within 30 days of filing — not 120. Late verification means the return is treated as filed on the verification date; losses eligible for carry-forward are forfeited if that date is after the original due date.
• A Section 245 notice is not informational — it requires a response within 30 days. Review the underlying demand before the portal treats your silence as consent to the refund adjustment.