The Federal Board of Revenue (FBR) uses the IRIS online system for various income tax services in Pakistan. Taxpayers use IRIS to file income tax returns, submit wealth statements, manage tax-related information and perform other online activities.

One of the most common problems faced by taxpayers is forgetting their IRIS password. When you cannot remember your password, you do not necessarily need to create a new tax registration. FBR provides a password recovery facility through the IRIS login page.

The current IRIS 2.0 system provides a “Forgot Password / Account Recovery” option. If you still have access to the email address and mobile number registered with FBR, you can use the Forgot Password option to reset your password. FBR sends verification codes to the registered contact details before allowing the password to be reset.

This guide explains how to reset your FBR IRIS password in Pakistan in 2026. It covers the complete procedure, required information, verification codes, common problems, account recovery and frequently asked questions.

2. What Is FBR IRIS?

FBR IRIS is the online tax portal of the Federal Board of Revenue. Registered taxpayers use the system to perform different income tax-related activities without having to visit an FBR office for every transaction.

Through IRIS, taxpayers can perform activities such as:

• Filing income tax returns
• Submitting wealth statements
• Viewing tax-related records
• Managing registration information
• Making certain tax-related applications
• Checking online tax information
• Accessing other FBR online services

FBR explains that e-enrollment provides a taxpayer with an NTN or registration number and password for accessing IRIS.

The current IRIS 2.0 login page allows users to enter their CNIC/NTN and password and provides a Forgot Password / Account Recovery option.

3. Why Do You Need to Reset Your IRIS Password?

You may need to reset your FBR IRIS password for several reasons.

The most common reason is that you have forgotten the password you previously created or received.

Other situations may include:

• You have not used your IRIS account for a long time.
• Your saved password is no longer available.
• You are unable to log in with your old password.
• You accidentally changed your password and cannot remember the new one.
• Your browser no longer has your saved login information.
• You are trying to access your account from another computer or mobile phone.

Instead of creating another tax account, registered taxpayers should use the official password recovery facility.

4. What You Need Before Resetting Your IRIS Password

Before starting the password-reset process, keep the information associated with your FBR registration available.

For the normal Forgot Password process, you should have access to:

1. Your CNIC/Registration Number or NTN, as applicable
2. Your registered email address
3. Your registered mobile number
4. Your mobile network/provider information, where requested
5. A device with internet access

The current IRIS 2.0 recovery process asks for basic information including the CNIC/Registration Number, email address, network provider and mobile number.

You should also make sure that your mobile phone can receive SMS messages and that you can access your registered email account.

5. Can I Reset My FBR IRIS Password Online?

Yes. FBR provides an online password-reset facility through the IRIS login page.

According to FBR's current guidance, taxpayers who need to reset their password can click “Forgot Password” on the IRIS login screen, enter the required information and complete the verification process. Codes are sent to the taxpayer's registered email address and mobile number. After entering the verification codes, the taxpayer can reset the password.

The current IRIS 2.0 system also provides Account Recovery for users who do not have access to their registered mobile number or email address.

6. How to Reset FBR IRIS Password – Step-by-Step

The following is the main procedure for taxpayers who still have access to their registered email and mobile number.

Step 1: Open the Official FBR IRIS Website

Open the official FBR IRIS portal using your web browser.

Always make sure you are using the official FBR website before entering your CNIC, password, mobile number or verification information.

The current IRIS 2.0 login page contains the fields for CNIC/NTN and Password, along with the Forgot Password / Account Recovery option.

Step 2: Select “Forgot Password / Account Recovery”

On the IRIS login screen, click the Forgot Password / Account Recovery option.

A recovery window will open with different options.

Step 3: Choose “Forgot Password”

If you still have access to both your registered email address and mobile number, select Continue under the Forgot Password section.

The current IRIS 2.0 recovery page distinguishes between normal password recovery and account recovery.

Step 4: Enter Your CNIC or Registration Number

Enter your CNIC/Registration Number as requested by the system.

Make sure that you enter the information correctly.

Avoid adding unnecessary spaces or incorrect characters.

Step 5: Enter Your Registered Email Address

Enter the email address that is registered with your FBR account.

It is important to use the email address associated with your IRIS registration because the verification process uses your registered contact information.

Step 6: Select Your Mobile Network

The current IRIS 2.0 password recovery form may ask you to select your mobile network/provider.

Select the correct network associated with your registered mobile number.

Step 7: Enter Your Registered Mobile Number

Enter the mobile number registered with FBR.

Check the number carefully before continuing.

If the number does not match the information in FBR's records, the normal password recovery process may not work.

Step 8: Click “Next”

After entering the requested information, click Next.

The system will process the information and continue with verification.

The IRIS 2.0 user manual identifies the basic information stage as CNIC/Registration Number, email address, network provider and mobile number, followed by the next step.

Step 9: Check Your Email and Mobile Phone

After successful verification of the basic information, check your registered email and mobile phone.

FBR states that verification codes are sent to the registered email address and mobile number during password recovery.

Check your SMS inbox and email inbox carefully.

Also check the spam or junk folder if the email does not appear in your normal inbox.

Step 10: Enter the Verification Codes

Enter the verification codes received through the required channels.

Make sure that you enter the codes in the correct fields.

If a code has expired or is no longer accepted, follow the system's instructions for obtaining a new verification code.

Step 11: Continue to Password Reset

After successful verification, the system will provide the option to reset your password.

Enter a new password according to the requirements shown by IRIS.

Step 12: Create a New Password

Choose a new password that is difficult for other people to guess.

Avoid using simple information such as:

• Your name
• CNIC number
• Mobile number
• Date of birth
• 123456
• Password
• Your child's name

A strong password should contain a suitable combination of letters, numbers and other characters where permitted by the system.

Step 13: Confirm the New Password

Enter the new password again in the confirmation field if requested.

Make sure both password entries are identical.

Step 14: Complete the Password Reset

Submit the password-reset request.

If the process is successful, your new password should be available for future IRIS login.

Step 15: Return to the IRIS Login Page

Go back to the IRIS login screen.

Enter your CNIC/NTN or registration number and the new password.

Then select Login.

Step 16: Confirm That Your Account Works

After successfully logging in, check that your IRIS account is working normally.

Do not immediately change other information unless necessary.

Keep your new password stored securely so that you do not lose access again.

7. What If I Do Not Have Access to My Registered Mobile Number?

This is an important situation because the normal password-reset process depends on the contact information registered with FBR.

The current IRIS 2.0 system provides a separate Account Recovery option for users who do not have access to either their registered mobile number or registered email address. The recovery page explains that this option is intended for recovering an account by updating the mobile number registered against the taxpayer's CNIC.

Therefore, if your old mobile number is no longer available, do not repeatedly enter random information into the password-reset form.

Instead, use the appropriate Account Recovery option available on the official IRIS portal and follow the instructions displayed by FBR.

8. What If I Do Not Have Access to My Registered Email?

If you cannot access the email address registered with FBR, the normal Forgot Password procedure may not be suitable.

The current IRIS 2.0 portal separates normal password recovery from account recovery for taxpayers who no longer have access to their registered contact information.

Select the appropriate recovery option and provide the information requested by the official system.

Do not provide your password or verification codes to another person claiming that they can recover your account.

9. What If Both Mobile Number and Email Are Unavailable?

If you have lost access to both your registered mobile number and email address, use the Account Recovery option rather than repeatedly trying the standard Forgot Password process.

The current IRIS recovery page specifically provides an account-recovery route for this situation.

Follow the instructions provided by the official portal and keep your CNIC-related registration information available.

10. How to Change FBR IRIS Password After Login

Resetting a forgotten password is different from changing a password when you can already log in.

If you know your existing password and want to change it, FBR states that you can log into IRIS and select Change Password from the top-right area of the screen. You then enter the required information in the dialogue box.

The general process is:

1. Log in to IRIS.
2. Go to the top-right area of the screen.
3. Select Change Password.
4. Enter the required information.
5. Enter your new password.
6. Confirm the password if requested.
7. Submit the change.
8. Save the new password securely.

You do not need to use Forgot Password if you can already access your account and simply want to change your password.

11. Difference Between Forgot Password and Change Password

These two options are useful in different situations.

Forgot Password

Use Forgot Password when you cannot remember your existing IRIS password and cannot log in.

Change Password

Use Change Password when you can already log in and simply want to replace your current password.

FBR officially describes both options separately in its income tax filing guidance.

12. Common Problems During FBR IRIS Password Reset

Problem 1: Verification Code Not Received

If you do not receive the verification code, first check that your mobile phone has network service and that you entered the registered contact information correctly.

For email verification, check your spam or junk folder as well.

Problem 2: Wrong Mobile Number

If the number you are entering is not the number registered with FBR, the normal password-reset procedure may fail.

In this situation, use the appropriate account-recovery route.

Problem 3: Wrong Email Address

Make sure you are using the email address registered with your FBR account.

Problem 4: Password Still Not Working

If you have successfully reset your password but cannot log in, carefully check that:

• Your CNIC/NTN is correct.
• The new password is entered correctly.
• Caps Lock is not causing a typing problem.
• There are no extra spaces.
• You are using the current official IRIS portal.

Problem 5: IRIS Website Is Not Responding

Sometimes websites may experience temporary technical problems or maintenance.

If the portal does not respond, try again later using a stable internet connection and an updated browser.

13. Tips for Creating a Secure FBR IRIS Password

Your IRIS password protects access to important tax information, so it should be treated as confidential.

Follow these security tips:

1. Create a strong and unique password.
2. Do not use your CNIC as your password.
3. Do not use your mobile number as your password.
4. Avoid simple passwords.
5. Do not share your password with anyone.
6. Never share verification codes with another person.
7. Avoid saving your password on a public computer.
8. Log out after using IRIS on a shared device.
9. Keep your registered mobile number and email information up to date.
10. Change your password if you believe someone else knows it.

14. Is There Any Fee for Resetting the IRIS Password?

The FBR password-reset facility is an online account-recovery service. There is no separate government fee stated by FBR for using the standard Forgot Password process.

Be careful if anyone asks you for money simply to reset your IRIS password.

Use the official FBR IRIS portal and follow the instructions displayed there.

15. How Long Does FBR IRIS Password Reset Take?

For a normal password reset, the process is generally completed online after the taxpayer provides the required information and successfully completes verification.

The actual time may depend on receiving the verification codes and the availability of the IRIS system.

If your registered mobile number or email is no longer accessible, account recovery may require additional steps and therefore may take longer.

16. Can I Reset My IRIS Password from Mobile?

Yes, the IRIS portal is an online service and can be accessed through a suitable mobile browser.

However, using a computer or laptop may be more convenient when completing detailed tax-related activities.

If you use a mobile device:

• Use a secure internet connection.
• Avoid public Wi-Fi when entering sensitive information.
• Make sure your browser is updated.
• Do not share screenshots containing passwords or verification codes.
• Log out after completing your work.

17. Important Security Precautions

Your FBR IRIS account contains sensitive tax information. Protect it carefully.

FBR's official IRIS portal provides access to tax services and verification facilities, so taxpayers should use official channels when recovering their accounts.

Never give your:

• IRIS password
• OTP or verification code
• Email password
• CNIC-related account information

to an unknown person.

FBR does not require you to disclose your password to another person simply to recover your account.

18. FBR IRIS Password Reset – Quick Summary

If you have forgotten your FBR IRIS password, the basic process is:

1. Open the official FBR IRIS website.
2. Select Forgot Password / Account Recovery.
3. Choose Forgot Password if you have access to your registered mobile and email.
4. Enter your CNIC/Registration Number.
5. Enter your registered email address.
6. Select your mobile network.
7. Enter your registered mobile number.
8. Click Next.
9. Receive verification codes.
10. Enter the required codes.
11. Continue to password reset.
12. Create a new password.
13. Confirm the new password.
14. Submit the request.
15. Return to the login page.
16. Log in using your new password.

FBR's official guidance confirms that password recovery involves the Forgot Password option, required information and verification codes sent to the registered email and mobile number.

Guide Information

Step-by-Step Process

1. Visit **iris.fbr.gov.pk** on your web browser to open the official FBR portal.

2. Click the **Forgot Password** link on the login page located below the sign-in fields.

3. Type your 13-digit CNIC (without dashes) or NTN in the **Registration No.** field.

4. Enter the active mobile number and email address associated with your FBR profile.

5. Enter the security captcha code shown on the screen and click **Submit**.

6. Check your registered mobile phone for the 6-digit verification code sent via SMS.

7. Check your registered email inbox (including Spam/Junk folders) for the email verification code.

8. Enter both the SMS OTP and Email OTP into their respective fields on the recovery page.

9. Create a strong new password using uppercase letters, lowercase letters, numbers, and special characters.

10. Re-type your new password in the confirmation box and click **Submit**.

11. Return to the main login page and sign in using your CNIC as the username and your new password.

12. Go to your profile settings inside IRIS to confirm that your phone number and email address are up to date.

13. Select **Change PIN** in your account settings if you also need to reset your 4-digit transaction PIN.

14. Visit your local Regional Tax Office (RTO) with your original CNIC if you no longer have access to your registered SIM or email address.