Mandatory 2FA for e-Way Bill & e-Invoice System

Last updated: 02 April 2025

Save Share

Quick Summary

The National Informatics Centre (NIC) is implementing mandatory 2-Factor Authentication (2FA) for the e-Way Bill and e-Invoice systems to bolster security. Users will now need to provide an One-Time Password (OTP) in addition to their username and password to log in. The OTP can be received via SMS to a registered mobile number, through the government's 'Sandes' messaging app, or by using the 'NIC-GST-Shield' app, which generates OTPs offline.

To enhance the security of e-Way Bill/e-Invoice System, NIC is introducing 2- Factor Authentication for logging in to e-Way Bill/e-Invoice system. In addition to username and password, OTP will also be authenticated for login.

Mandatory 2FA for e-Way Bill and e-Invoice System

There are 3 different ways of receiving the OTP. You may enter any of the OTP and login to system. The various modes of generating OTP are explained below:

SMS: OTP will be sent to your registered mobile number as SMS.

On 'Sandes' app: Sandes is a messaging app provided by government so that you can send and receive messages. You may download and install the Sandes app on your registered mobile number and receive the OTP in it.

Using 'NIC-GST-Shield' app: 'NIC-GST-Shield' is a mobile app provided by e-Way Bill /e-Invoice System, so that OTP can be generated by using the app. This app can be downloaded only from the e-Waybill / e-Invoice portal from the link 'Main Menu ----> 2-Factor Authentication. Install NIC-GST-Shield'. Download, install and register this app on your registered mobile number. You should ensure the time displayed in the app should be in sync with e- Waybill / e-Invoice system. On opening the app, OTP is displayed. You may enter this OTP and continue the authentication. The OTP gets refreshed after every 30 seconds. You will not require internet or any dependency on mobile network for generating the OTP on this app.

Registration for 2-Factor Authentication

On logging to e-Waybill System go to Main Menu ----> 2 Factor Authentication and confirm the registration. Once confirmed, the system will ask OTP alongwith username and password. The OTP authentication is based on individual user accounts. The sub users of GSTIN will have separate authentication depending on their registered mobile number in the e-Way Bill/ e- Invoice System. Once you have registered for 2 Factor authentication, then the same is applicable for both e-Way bill and e-Invoice system.

Creation of sub-users

For better management of e-waybills, main users may create sub-users and mobile number of the sub-user may be updated accordingly. The sub-user may be granted permissions to generate e-waybill or cancel e-waybill or all the options. Further, the activities of the sub-users may be monitored by the main-user on a regular basis.

FAQ :

2-Factor Authentication is being introduced to enhance the security of the e-Way Bill and e-Invoice systems.

To log in, you will need your username, password, and an One-Time Password (OTP).

You can receive the OTP via SMS to your registered mobile number, through the 'Sandes' app, or by using the 'NIC-GST-Shield' app.

The 'NIC-GST-Shield' app generates OTPs that refresh every 30 seconds. It does not require internet or a mobile network connection to generate the OTP.

You can register by logging into the e-Waybill System, navigating to 'Main Menu' -> '2 Factor Authentication', and confirming the registration.

Yes, once you register for 2-Factor Authentication, it is applicable to both the e-Way Bill and e-Invoice systems.

3186 Views Comment Share GST Report

News posted by

CCI News Desk

Finance news reporter covering taxation, GST, income tax, business compliance, and economy updates. I simplify complex financial topics into easy-to-understand articles for professionals, taxpayers, and business owners on leading finance and tax platforms.

View News

Comments :