HMRC Login Changed October 2026 — Locked Out of Your Tax Account?

Recover your Government Gateway access and set up MFA before the Self Assessment deadline.

What happened

HMRC started requiring Multi-Factor Authentication (MFA) for personal tax accounts and Government Gateway logins from late September 2026. If you file Self Assessment, run a business, or use Government Gateway for PAYE, CIS, or VAT, you now need a second form of verification beyond your password.

How to get back in

Step 1: Use the “Forgotten your account?” route

Go to GOV.UK sign in and select “Forgotten password” or “I’ve lost access to my account.” HMRC will ask you to verify your identity using:

Your National Insurance number
A recent payslip or P60
Your UK passport or driving licence

This is the standard recovery path. Processing can take 24–48 hours.

Step 2: Check if the HMRC app bypasses the gate

If you already have the HMRC app installed and authenticated on your phone, the app can sometimes bypass the new MFA prompt on the web browser. Worth trying before going through full account recovery.

Download the HMRC app

Step 3: Set up MFA properly once you’re in

When you regain access, HMRC will prompt you to set up a second factor. Choose:

Authenticator app (recommended — more secure)
Text message code (easier but less secure)

Download a free authenticator app (Google Authenticator, Microsoft Authenticator, or Authy). Scan the QR code HMRC shows you. Save the recovery codes somewhere safe — not on your phone.

Step 4: Call HMRC if online recovery fails

If HMRC cannot verify your identity online:

Self Assessment: 0300 200 3310
National Insurance: 0300 200 3500
Monday to Friday, 8am to 6pm

Have your NI number, postcode, and a recent P60 or payslip ready before you call.

Why this matters right now

The Self Assessment filing deadline for the 2025/26 tax year is 31 January 2027. If you cannot log in by December, you may struggle to file on time. Late filing penalties:

1 day late: £100
3 months late: up to £900 additional
6 months late: £300 or 5% of tax due
12 months late: £700 or 10% of tax due

The one thing to do this week

Check your HMRC contact details now — not in January. Log in to GOV.UK and verify that your email address, mobile number, and home address are all correct and accessible. If they are wrong, update them now while you have access. Then set up the authenticator app. It takes five minutes and means you will not be locked out again.