With the aim of reinforcing taxpayers’ digital security, the Tax and Customs Authority (AT) implemented new rules for creating and managing passwords on the Finance Portal. These changes aim to ensure greater protection against unauthorized access, aligning the platform’s practices with modern cybersecurity standards.
Discover what has changed, how to adapt to new demands and why these measures are so important.
Main changes to Finance Portal passwords
- Mandatory exchange upon first use
Passwords sent by mail to the tax residence can only be used once, upon first accessing the portal. After the initial login, it is mandatory to personalize the password, choosing a new one that meets the stipulated security criteria. - Robustness criteria for new passwords
The new password must meet the following requirements:
- Include at least one uppercase letter and one lowercase letter;
- Contain numbers (from 0 to 9);
- Embed special characters such as #, $, % or &.
These requirements make passwords more resistant to unauthorized access and reduce the risk of security breaches.
- Minimum number of characters
Each password must have at least eight characters, reinforcing protection against attacks such as brute force. - Application to new registrations and password recoveries
The new rules are mandatory in the following cases:
- Recent registrations on the Finance Portal;
- Recovery of lost passwords;
- Changing existing passwords.
If the user’s current password does not meet the new criteria, it will remain valid unless you choose to change it or regain access.
- Individual passwords for each user
Each taxpayer must have a unique and non-transferable password, even within the same household. Like this:
- Each family member, regardless of age, needs their own password;
- New dependents, such as newborns, or situations such as inheritance management, also require the creation of individual passwords.
Why were new rules introduced?
The increasing digitalization of tax services has also brought an increase in cyberattack attempts, such as phishing and unauthorized access. Recent cases of exposure of sensitive data have highlighted the need to reinforce the protection of critical platforms such as the Finance Portal, used daily by millions of taxpayers.
The adoption of these measures reflects good international cybersecurity practices and ensures that citizens’ tax data is adequately protected.
How to change or recover your password on the Finance Portal
If you need to create a new password or regain access, follow these steps:
- Access the Finance Portal and select the “Recover password” option;
- If you received a temporary password in the mail, log in initially and follow the instructions to create a new password;
- Make sure that the new password meets the established robustness criteria;
- Store your new password in a safe place or use a reliable password manager to avoid forgetting it.
Importance of these changes for taxpayers
Although the new password rules may seem demanding, they offer greater security in accessing and managing users’ tax data on the Finance Portal. Stronger passwords significantly reduce the likelihood of unauthorized access and protect taxpayers against fraud and other associated risks.
If you need clarification or additional support, you can consult the Finance Portal or contact the .
In an increasingly digital world, these measures represent an essential step to guarantee a safe and reliable experience when accessing tax services.
Also read:
