In view of more security GST provided 2FA facility apart from login credential. This article explains methods and steps for an easy understanding about 2 Factor Authentication in GST for E Way Bill and E Invoice portal.
The related FAQs are as follows: -
Q1. What is 2-Factor authentication?Q2. What is the purpose of 2FA?
Q3. How to register for 2FA?
Q4. What are the turnover limits for 2FA and is it mandatory for all registered taxpayers?
Q5. How to disable this OTP system?
Q6. What to do for OTP related issues like delay in getting OTP or OTP not matching etc.?
Q7. Is there any other way or methods to authenticate OTP while login?
Q8. What to do in case of the registered User is not available for OTP or Can I add someone else to generate my e-Way Bills?
Let us proceed to know about the 2-Factor authentication process, issues related to OTP, different methods to generate OTP, the concept of main user and sub-user etc. throughout the replies of the questions listed above.
Q1. What is 2-Factor authentication?2-Factor authentication (2FA) is a security measure that adds an extra layer of protection to user accounts in GST e-Invoice & e-Waybill System that is in addition to username and password, OTP will also be authenticated for login.
After registering for 2-Factor Authentication, it will apply to both the e-Waybill and e-Invoice systems, providing comprehensive security across both platforms.
Q2. What is the purpose of 2FA?
In view of the data security especially in case of information and financial transactions, the e-Waybill and e-Invoice System has recently introduced a significant security enhancement known as '2-Factor Authentication (2FA).
Registering for 2-Factor Authentication for e-invoice/e-Waybill System is a simple and straightforward process. Follow these steps to complete the registration:
1.Log in to the e-Waybill System using your credentials.
2.Open '2 Factor Authentication' Tab from the 'Main Menu'
3.Choose 'Install Sandes App' or 'Install NIC-GST-Shield App', if so, preferred over SMS. Follow the installation instructions and complete the process.
4.Click on the Registration option in '2 Factor Authentication' Tab and follow the on-screen instructions to confirm the registration process.
Once the registration is successfully completed, the system will prompt you to enter the OTP along with your username and password during login. It is important to note that OTP authentication is linked to individual user accounts.
Q4. What are the turnover limits for 2FA and is it mandatory for all registered taxpayers?
As per the Advisory Dated 01/12/2023, GST announces to introduced 2-Factor Authentication (2FA) initially in some specific stated and supposed to introduced in all states later on.
However, as per the latest updates in e-Waybill system Dated 29.05.2023, 2-Factor Authentication (2FA) is actually enabled and kept optional stated that after couple of weeks, 2FA will be made mandatory. It is also advised that the users operating e-waybill system from multiple locations and with single credential are advised to create sub-users immediately.
The National Informatics Centre (NIC) has mandates registration for 2FA for all GST taxpayers who have an annual Aggregate Turnover of Rs 100 crores and above on 12th June, 2023.
Login with OTP in addition to User-id & Password begins with effect from 20th August 2023. Later the threshold was reduced to Rs 20 crores. The Latest updates in e-Way bill portal dated 06-Nov-2023 can be seen regarding this.
Initially there was an option ‘2 Factor Authentication Registration / Deregistration’ but now there is no such option available.
In case of facing delay in getting OTP or OTP not matching etc. first of all, ensure the network of the registered mobile receiving the OTP and delete the existing or expired OTPs or SMS received in mobile to get the new OTP.
HOWEVER, TO ENSURE FLEXIBILITY AND CONVENIENCE FOR USERS, THE E-WAYBILL AND E-INVOICE SYSTEM OFFERS THREE DIFFERENT MODES OR METHODS FOR GENERATING OTP.
1. OTP via SMS on Registered Mobile
2. OTP via Sandes App
3. OTP via NIC-GST-Shield App
Lets explore each method in detail:
1. OTP via SMS on Registered Mobile
The SMS method provides a straightforward approach to receiving the OTP. When logging in, an OTP will be sent to the user's registered mobile number via SMS to ensures that the authentication code is conveniently delivered to the user's mobile device. In this method, users are required to have GOOD INTERNET CONNECTIVITY AND THE MOBILE NETWORK SHOULD BE IN ORDER.
2. OTP via Sandes App
The Sandes App is a messaging app provided by the Government of India, offering secure communication channels. Users can download and install the Sandes app, from Play Store on their registered mobile number to receive the OTP directly through the application.
This mode offers an alternative to SMS and provides an added layer of security for users. However, USERS ARE REQUIRED TO HAVE INTERNET CONNECTIVITY FOR OBTAINING THE OTP using this Sandes App.
The NIC-GST-Shield app is a DEDICATED MOBILE APPLICATION specifically designed for the e-Waybill and e-Invoice System. Users can get the OTP by downloading and installing the app from the e-Waybill or e-Invoice portal. To download the app on mobile, navigate to the 'Main Menu > 2-Factor Authentication' section and click on the 'Install NIC-GST-Shield' link.
ON OPENING THE NIC-GST-SHIELD APP, AN OTP IS DISPLAYED, WHICH GETS AUTO REFRESHED AFTER 30 SECONDS. USER JUST NEED TO ENTER THIS OTP AND CONTINUE THE AUTHENTICATION.
HENCE, THERE IS NO PROCESS OF GENERATING, SENDING OR RECEIVING SMS ETC. IN THIS METHOD. EVEN, THERE IS NO INTERNET REQUIRE OR NO ANY DEPENDENCY ON MOBILE NETWORK FOR GENERATING OR GETTING OTP.
Q8. What to do in case of the registered User is not available for OTP or Can I add someone else to generate my e-Way Bills?
Note that, a single user having User-ID and Password with 2FA is a main user. He can Create or Update or Freeze one or more Sub-User as per his convenient.
For better management of e-waybills, main users may create sub-users and mobile number of the sub-user may be updated accordingly. The sub-user may be granted permissions to generate e-waybill or cancel e-waybill or all the options. Further, the activities of the sub-users may be monitored by the main-user on a regular basis.
Hope this article will help to understand and find convenient ways to login for e-Waybill as well as e-Invoice portal.
You can watch our You Tube Video:
2-Factor Authentication for e-Waybill and e-Invoice
Thanks and Regards,
Team Tech-Guide-Tax
REF-A1012-24-GUIDE-012-EWB-003-AP
