Every E-Way Bill login now needs a one-time password after your username and password. You can get it by SMS, in the Sandes app, or from the NIC-GST-Shield app (which works without network). Two-factor authentication has been mandatory for all taxpayers and users since 1 April 2025, so there is no supported way to log in without an OTP.
How 2FA became mandatory
NIC introduced 2-factor authentication (2FA) for the E-Way Bill and e-invoice systems in 2022 as an optional feature, then made it compulsory in stages:
| From | Who it applied to |
|---|---|
| 2023 (earlier phases) | Large taxpayers by annual aggregate turnover (AATO), starting with the highest bracket |
| 1 January 2025 | AATO above ₹20 crore |
| 1 February 2025 | AATO above ₹5 crore |
| 1 April 2025 | All other taxpayers and users, including transporters |
Source: GSTN advisory dated 17 December 2024 on updates to the E-Way Bill and e-invoice systems.
The three ways to get your OTP
SMS
Sent to the mobile number registered for your account. Simplest, but depends on network and SMS delivery.
Sandes app
The government messaging app. Install it on the registered mobile number and OTPs arrive there.
NIC-GST-Shield
An NIC app that generates the OTP on the phone. Codes refresh every 30 seconds and need no internet or mobile network.
Any of the three OTPs is accepted at login. If SMS is unreliable where you work — godowns, highways, basements — set up NIC-GST-Shield as your backup.
How to register for 2-factor authentication
- Log in to the E-Way Bill portalUsing your username and password at ewaybillgst.gov.in.
- Open the 2FA menuGo to Main Menu → 2-Factor Authentication.
- Confirm registrationConfirm the registration on the screen. From the next login, the portal asks for an OTP after the password.
- (Optional) Install NIC-GST-ShieldFrom the same menu, follow the “Install NIC-GST-Shield” link. NIC’s note says the app is available only through this portal link — not from random download sites.
- Register the app on the registered mobileFollow the in-app steps on the phone whose number is registered for your user account.
Sub-users and OTPs
The OTP is linked to each individual user account. A sub-user under your GSTIN is authenticated through the mobile number registered for that sub-user, not the owner’s phone. That is why NIC has encouraged businesses to create sub-users for staff — each person can then log in without needing the owner’s OTP.
“E-Way Bill login without OTP” — what’s actually possible
People search for this mostly because the SMS isn’t arriving. Since 2FA is compulsory for everyone, the realistic options are:
- Use NIC-GST-Shield. It removes the dependency on SMS and signal.
- Use Sandes if SMS is delayed but data works.
- Fix the mobile number if OTPs go to an old SIM (see below).
- Use tasks that don’t need login. Printing or viewing a known E-Way Bill can be done through the portal’s public search — see print without login.
Troubleshooting OTP problems
OTP SMS never arrives
Check signal, storage space and spam/DND filters; wait a minute before requesting again; switch to Sandes or NIC-GST-Shield.
OTP is rejected as invalid
Use only the most recent OTP. For NIC-GST-Shield, set the phone’s time to automatic so the code matches the portal’s clock, and enter it within its 30-second window.
OTP goes to an old number
Update the mobile number on the GST portal through the amendment process, then pull the updated details into the E-Way Bill system. Sub-users: ask the main user to update your number under User Management.
New phone, NIC-GST-Shield no longer works
Reinstall the app through the portal’s 2FA menu on the new phone and register it again. Until then, use SMS or Sandes.
FAQs
Is the OTP required every time I log in?
Yes. With 2FA active, every login asks for an OTP after the username and password.
Can two mobile numbers receive the OTP for one account?
The OTP is tied to the single mobile number registered for that user account. To give another person access, create a sub-user with their own number.
Does NIC-GST-Shield need internet to work?
No. NIC states the app generates OTPs without internet or mobile network once it is installed and registered.
Is the E-Way Bill OTP the same as the e-invoice OTP?
The same 2FA registration applies to both systems, so you use the same OTP methods for each.
Related: E-Way Bill login guide · login problems · mobile login