FBR Password Change Policy
Facebook | Instagram | LinkedIn | WhatsApp
The Federal Board of Revenue (FBR) has introduced an updated password policy for its “Iris” platform, effective immediately. Key aspects include:
Mandatory Password Update All existing passwords have been invalidated, and taxpayers can no longer log in using previous credentials.
Limited Password Validity: Restored passwords via the “Forgot Password” option will remain functional for only 60 days.
Recovery Information Required: Taxpayers and consultants must maintain updated recovery email addresses and mobile numbers, as these will be essential for resetting passwords after 60 days.
While the policy aims to enhance account security, it poses challenges, particularly for taxpayers with limited technical expertise or those unable to consistently manage recovery details. Concerns have been raised over the FBR’s approach to policy implementation, often criticized for lacking stakeholder consultation and creating practical difficulties for taxpayers.
Suggested Alternatives:
FBR is encouraged to consider alternatives such as extending password validity, introducing multi-factor authentication (MFA), providing flexible recovery options, and consulting stakeholders to create more user-friendly solutions.
