FBR IRIS Password Reset 2026-27 — Forgot It? Do This
Needing an FBR IRIS password reset is a common problem in Pakistan — especially in September, when the return filing deadline for individuals (30 September) falls and people try to log in after a whole year. Below the IRIS 2.0 login box there is a “Forgot Password / Account Recovery” link. Clicking it gives you two routes, and which one is for you depends on just one thing: do you have access to both the mobile number and the email registered with the FBR?
1. Which Route Is for You?
| Route | When to use it | What is verified |
|---|---|---|
| Forgot Password | You have access to both the registered mobile number and email | CNIC / Registration No., email and mobile — a separate 6-digit code to each |
| Account Recovery | No access to either the registered mobile or the email | CNIC and the mobile number registered on your CNIC; then verify or update the email |
In the portal's own words: Forgot Password is for “Where you have access to your Email Address and Mobile Number registered with FBR”, and Account Recovery is for “Where you do not have access to either your Mobile Number or Email Address registered with FBR and want to recover your account by updating your Mobile Number registered against your CNIC.”
2. Forgot Password — Step by Step
This route is for when you have access to both the registered mobile number and the registered email:
- Open the IRIS portal: iris.fbr.gov.pk — go there and click “Forgot Password / Account Recovery” below the login box.
- Choose the “Forgot Password?” card: press “Continue” below it.
- Basic information: enter your CNIC / Registration No., registered email address, network provider and registered mobile number (03XX-XXXXXXX), then “Next”.
- Verification code: a separate 6-digit code is sent to your mobile and to your email. Enter each in its own field — “Mobile Verification Code” and “Email Verification Code”.
- Password and PIN: on the “Create your Password and PIN” screen, enter the new password twice and also set a 4-digit PIN. The password rules are in section 4 below.
- Confirmation: when it is done, the portal shows “You have successfully updated the password of your IRIS account.” Now log in with your CNIC and the new password.
Code not received? On the code screen, IRIS itself gives this instruction: “If OTP is not received within 2 minutes, type 'msg' and send a text message to 9966.” If the email code does not arrive, check your spam/junk folder too.
3. Account Recovery — When You Have No Access to Your Mobile or Email
Old SIM deactivated, or the registered email will not open? IRIS 2.0 has a separate route for this that gives you your account back by verifying a new mobile number:
- Click “Forgot Password / Account Recovery” and this time press “Continue” below the “Account Recovery?” card.
- Basic information: enter your CNIC and the mobile number registered on your CNIC.
- Mobile OTP verification: enter the 6-digit code sent to that number.
- Email verification: enter your existing email address. The portal asks “Would you like to update your Email Address?” — to give a new email, choose “Yes” and enter the new address.
- Email OTP verification: enter the 6-digit code sent to your email.
- Password and PIN: set a new password and a 4-digit PIN.
- Confirmation: the portal shows “You have successfully recovered your IRIS account.”
Which mobile number? The portal's instruction is “Provide the Mobile Number registered against your CNIC for account recovery purposes.” That is, the number must be registered on your own CNIC. If there is no SIM in your name, or this route does not work, contact the FBR helpline given below.
4. Rules for the New Password and PIN
The IRIS 2.0 Forgot Password and Account Recovery forms do not accept a new password until all of these are met (the portal's form checks, 23 September 2026):
| Rule | What to watch for |
|---|---|
| At least 8 characters | A password of 7 or fewer characters will not work |
| One capital letter (A–Z) | An all-lowercase password will be rejected |
| One small letter (a–z) | All capital letters will not work either |
| One number (0–9) | At least one digit is required |
| One special character | Only from these five: ! @ & % * — characters like # $ ^ are not included in this check, so do not rely on them alone |
| No spaces | Do not leave any blank space inside the password |
| PIN | Exactly 4 digits, numbers only |
Our advice: do not put your CNIC, phone number or date of birth in the password, and do not reuse on IRIS a password you have used on any other website.
5. Can Log In and Just Want to Change Your Password or PIN?
If you remember your old password, you do not need a reset. Log in to IRIS and use the “Change Password” option to enter your old password and then the new password twice. There is a separate “Change PIN” option for the PIN.
6. FBR Helpline
If neither route works, or no mobile number is registered on your CNIC, contact the FBR helpline. These details are given on the IRIS portal:
FBR Helpline — Contact Details
- National: 051 111 772 772
- International: +92 51 111 772 772
- Timings: 8:00 AM to 11:30 PM (Monday to Friday)
- Separate line for women: 051 9107025 — 8:00 AM to 4:00 PM (Monday to Friday)
- Email: helpline@fbr.gov.pk
About account locks: after how many wrong attempts IRIS blocks login, and for how long, is not published anywhere by the FBR that we can see — so we are not giving any number for it. If login keeps failing, use the Forgot Password route above instead of guessing.
7. FAQ — FBR IRIS Password Reset
Q1. The verification code is not arriving?
IRIS's own instruction is that if the code does not arrive within 2 minutes, type msg and send it by SMS to 9966. The email code may also be in your spam/junk folder. There is also an option on screen to resend the code.
Q2. What is the IRIS username?
According to the FBR's IRIS FAQs, the User ID is your Registration Number: the 13-digit CNIC/NICOP (without dashes) for Pakistani individuals, and the 7-digit NTN (without the dash and check digit) for non-Pakistani individuals, AOPs and companies. The login box says the same: “CNIC/NTN”.
Q3. Do I need a new account, or can I recover the old one?
Recover the old one. In IRIS your User ID is your CNIC (or NTN), so the account stays the same — use Forgot Password or Account Recovery to get back into that account.
Q4. Do I need to create a new PIN along with the password reset?
Yes. In IRIS 2.0 the last screen of both Forgot Password and Account Recovery is “Create your Password and PIN”, which asks for both a new password and a 4-digit PIN.
Q5. Will my returns data be safe after a password reset?
Yes. Changing the password only changes your login details; your filed returns and statements stay linked to the same account (CNIC/NTN).
What to Do After Logging In to IRIS
Once you are logged in, calculate your salary tax and get ready to file your return.
Related Guides
After recovering IRIS access, these guides will help you complete your return filing and payments.
- Naya tax return form 2026 guide — for the updated return form and bank details.
- How to become a filer in Pakistan — to keep your ATL status active.
- Salary tax calculator — to check your salary tax numbers before filing a return.
Related Tax Guides
Continue learning about Pakistan tax with these authoritative FBR-aligned guides.