E-Way Bill OTP and 2-Factor Authentication: Setup, Methods and Fixes

How the E-Way Bill login OTP works, the three ways to receive it (SMS, Sandes, NIC-GST-Shield), how to register for 2FA, and why login without OTP is no longer possible.

Updated: Checked against official NIC / GSTN material · How we research
Quick answer

Every E-Way Bill login now needs a one-time password after your username and password. You can get it by SMS, in the Sandes app, or from the NIC-GST-Shield app (which works without network). Two-factor authentication has been mandatory for all taxpayers and users since 1 April 2025, so there is no supported way to log in without an OTP.

How 2FA became mandatory

NIC introduced 2-factor authentication (2FA) for the E-Way Bill and e-invoice systems in 2022 as an optional feature, then made it compulsory in stages:

From Who it applied to
2023 (earlier phases) Large taxpayers by annual aggregate turnover (AATO), starting with the highest bracket
1 January 2025 AATO above ₹20 crore
1 February 2025 AATO above ₹5 crore
1 April 2025 All other taxpayers and users, including transporters

Source: GSTN advisory dated 17 December 2024 on updates to the E-Way Bill and e-invoice systems.

The three ways to get your OTP

Method 1

SMS

Sent to the mobile number registered for your account. Simplest, but depends on network and SMS delivery.

Method 2

Sandes app

The government messaging app. Install it on the registered mobile number and OTPs arrive there.

Method 3

NIC-GST-Shield

An NIC app that generates the OTP on the phone. Codes refresh every 30 seconds and need no internet or mobile network.

Any of the three OTPs is accepted at login. If SMS is unreliable where you work — godowns, highways, basements — set up NIC-GST-Shield as your backup.

How to register for 2-factor authentication

  1. Log in to the E-Way Bill portalUsing your username and password at ewaybillgst.gov.in.
  2. Open the 2FA menuGo to Main Menu → 2-Factor Authentication.
  3. Confirm registrationConfirm the registration on the screen. From the next login, the portal asks for an OTP after the password.
  4. (Optional) Install NIC-GST-ShieldFrom the same menu, follow the “Install NIC-GST-Shield” link. NIC’s note says the app is available only through this portal link — not from random download sites.
  5. Register the app on the registered mobileFollow the in-app steps on the phone whose number is registered for your user account.
One registration covers both systems. Once you register for 2FA, it applies to both the E-Way Bill and the e-invoice system.

Sub-users and OTPs

The OTP is linked to each individual user account. A sub-user under your GSTIN is authenticated through the mobile number registered for that sub-user, not the owner’s phone. That is why NIC has encouraged businesses to create sub-users for staff — each person can then log in without needing the owner’s OTP.

“E-Way Bill login without OTP” — what’s actually possible

People search for this mostly because the SMS isn’t arriving. Since 2FA is compulsory for everyone, the realistic options are:

  • Use NIC-GST-Shield. It removes the dependency on SMS and signal.
  • Use Sandes if SMS is delayed but data works.
  • Fix the mobile number if OTPs go to an old SIM (see below).
  • Use tasks that don’t need login. Printing or viewing a known E-Way Bill can be done through the portal’s public search — see print without login.
Ignore any site or video offering an OTP “bypass”. Those are either outdated or attempts to get your credentials.

Troubleshooting OTP problems

OTP SMS never arrives

Check signal, storage space and spam/DND filters; wait a minute before requesting again; switch to Sandes or NIC-GST-Shield.

OTP is rejected as invalid

Use only the most recent OTP. For NIC-GST-Shield, set the phone’s time to automatic so the code matches the portal’s clock, and enter it within its 30-second window.

OTP goes to an old number

Update the mobile number on the GST portal through the amendment process, then pull the updated details into the E-Way Bill system. Sub-users: ask the main user to update your number under User Management.

New phone, NIC-GST-Shield no longer works

Reinstall the app through the portal’s 2FA menu on the new phone and register it again. Until then, use SMS or Sandes.

FAQs

Is the OTP required every time I log in?

Yes. With 2FA active, every login asks for an OTP after the username and password.

Can two mobile numbers receive the OTP for one account?

The OTP is tied to the single mobile number registered for that user account. To give another person access, create a sub-user with their own number.

Does NIC-GST-Shield need internet to work?

No. NIC states the app generates OTPs without internet or mobile network once it is installed and registered.

Is the E-Way Bill OTP the same as the e-invoice OTP?

The same 2FA registration applies to both systems, so you use the same OTP methods for each.

Related: E-Way Bill login guide · login problems · mobile login