GST Compliance

GST Portal Not Working: Login Errors, Error Codes and DSC Failures (2026)

Verified September 2026. Plain-language guide — what to file, by when, and what a miss costs.

Most GST portal login and filing failures trace to four causes: confusing the GSTIN with the self-chosen login username, a DSC/emSigner connection that never reaches the local signing utility, Multi-Factor Authentication (MFA) not yet set up on an account that now requires it, and portal congestion around statutory due dates that produces a generic "System Error Occurred" rather than any fault in your own credentials. Each one has a different fix, and mixing them up — trying a password reset when the real problem is an inactive GSTIN, or reinstalling emSigner when Chrome is simply blocking its pop-up — wastes the hour you don't have before a return is due.

The GST portal (gst.gov.in) itself is separate from the e-invoice and e-way bill systems, which run on their own login and their own MFA rollout, and both are separate again from the DSC-signing layer that emSigner bridges. This page keeps those three apart deliberately, because most "GST login not working" searches actually describe only one of them. It does not cover registration being rejected at the application stage — that is a different failure at a different point in the process. For return filing itself once the portal is behaving, CapEasy handles GST return filing end to end.

MFA is now mandatory for every GST portal login: GSTN phased in mandatory Multi-Factor Authentication (username + password + an OTP sent to the mobile number registered against the GSTIN) for all gst.gov.in logins: turnover above ₹20 crore from 1 January 2025, above ₹5 crore from 1 February 2025, and every remaining taxpayer from 1 April 2025. Older guides describing a plain username-and-password login are now incomplete for most accounts. The e-invoice and e-way bill systems run a separate 2-Factor Authentication requirement of their own, rolled out by NIC from 1 January 2025 for the same ₹20 crore-plus band — do not assume setting up one covers the other.

GST login errors and the exact text they show

  • "Invalid Username or Password" — a credentials mismatch. Often the GSTIN was typed into the username field (the username is a value you chose at first login, never the GSTIN), or a saved browser autofill inserted a stale password.
  • "Access Denied! Your session is expired or you don't have permission to access the requested page." — this is the portal's own accessdenied error page. Usually an expired session or a page reloaded outside the normal login flow; occasionally it means the GSTIN's registration status is no longer Active.
  • "System Error Occurred. Please try after sometime." — a generic backend error, most often clustered around GSTR-1/GSTR-3B due dates when a very large number of taxpayers log in and file at once.
  • First-time login rejecting the Provisional ID or GSTIN as invalid — usually because permanent credentials were already created and the taxpayer should be on the normal login screen, not "First time login", or because the one-time temporary password from the welcome email/SMS was mistyped.
  • GST portal "error 1585" or "port 1585" — not a GSTN error code at all. 1585 is the local port emSigner listens on (https://127.0.0.1:1585) for DSC signing, and it shows up in screenshots of DSC connection failures.

How to fix login, username and password errors

  • Rule out the GSTIN-as-username mistake first. The login username is a value you chose yourself when you first set up permanent credentials — it is never the 15-digit GSTIN and never your email. If you're not sure what it is, don't guess: use "Forgot Username" on the login page.
  • Forgot Username: enter the GSTIN or Provisional ID plus the captcha, generate an OTP — it is sent only to the email and mobile number of the Primary Authorized Signatory registered against that GSTIN, not to any other contact on the account.
  • Forgot Password: click "Forgot Password", enter the username and captcha, generate the OTP to the registered email/mobile. A successful reset shows "Your password has been successfully reset. Kindly login using the new password." Passwords must be 8-15 characters with at least one number, one special character, and both upper- and lower-case letters.
  • If Access Denied appears, check the GSTIN's status on the public Search Taxpayer tool on gst.gov.in first. If it shows Active, log out fully, clear the tab, and log in again from the gst.gov.in homepage rather than a bookmarked or reloaded page — most Access Denied cases are an expired session, not a broken account. If the status shows Cancelled or Inactive, this is not a login glitch and a password reset will not fix it; the fix runs through the jurisdictional officer instead.
  • If neither the registered mobile nor the registered email is reachable any more, Forgot Username and Forgot Password both have no fallback — GSTN has not published a self-service route around this. The only path is approaching the jurisdictional officer directly, found via the CBIC "Know Your Jurisdiction" tool or the GSTIN lookup under Search Taxpayer on gst.gov.in.
  • For "System Error Occurred" outside a deadline window, try a current, updated browser (Chrome, Firefox or Edge) with cookies, JavaScript and pop-ups enabled, and retry off-peak. If it persists with no deadline in sight, raise a ticket on the Self Service Portal rather than assuming it's your account.
  • If login is blocked after several wrong password attempts, don't assume a fixed lockout window — GSTN hasn't published one, and sources disagree on whether it's minutes or hours. The faster route around it is "Forgot Password" (OTP-based reset), which doesn't need the current password at all.

DSC and emSigner failures — the exact wording and what actually fixes them

The GST portal used to talk to a DSC token through a browser Java applet; once modern browsers dropped Java-applet support, GSTN replaced it with emSigner, a standalone desktop utility that runs as a local background service and bridges the browser to the token over a local connection. As of 2026 emSigner is still the required bridge — it has not been replaced by a browser-native signing method.

  • "Sorry! Digital Signature Certificate Missing Please plugin the token & click on process to proceed" — the USB DSC token isn't physically plugged in, its driver isn't installed or running, or emSigner can't detect the certificate store. Insert the token, confirm the token's own management software recognises it, then click Process again once emSigner is confirmed running.
  • "Failed to establish connection to the server. Kindly restart the Emsigner." — the local emSigner service isn't running, has crashed, or is on a different port than the browser is calling. Restart emSigner as Administrator, confirm its tray icon is active, check the port shown in emSigner's own Control Panel against what the browser expects, and allow pop-ups/site access for https://127.0.0.1:<that port> in your browser's site settings — a fully uninstalled-and-reinstalled emSigner clears most remaining cases.
  • A PAN-mismatch message during DSC registration is commonly reported when the PAN embedded in the DSC certificate doesn't match the Authorized Signatory's PAN recorded on the GST registration (the portal's exact current wording for this isn't independently confirmed, so treat the message text loosely and go by the underlying cause). The reported fix is to register the DSC issued in that signatory's name and PAN, correcting the signatory's PAN on the portal first if that's what's wrong.
  • Any DSC bought today for GST use is Class 3 — Certifying Authorities stopped issuing Class 2 certificates from 1 January 2021. A page still telling you to buy a "Class 2 DSC" is out of date; an old Class 2 certificate still works only until its own expiry.
  • EVC as the DSC alternative: proprietorships, individuals and partnership firms may authenticate GSTR-1 and GSTR-3B via EVC — an OTP to the Authorized Signatory's registered mobile/email — instead of a DSC. Companies and LLPs cannot use EVC for these returns; DSC is mandatory for them, with one standing exception — Nil returns have remained filable by SMS/OTP by any registered taxpayer type, including companies, since that rule was introduced, with nothing since suggesting it changed.

A pandemic-era CBIC concession briefly let companies file GSTR-3B and GSTR-1 via EVC (April-June 2020, then April-May 2021); it was formally withdrawn afterwards, so companies need a DSC again for these returns.

The GST e-invoice and e-way bill portal is a separate system

The e-invoice portal (einvoice1.gst.gov.in / einvoice6.gst.gov.in) and the e-way bill system are operated by NIC, not GSTN, and need their own one-time registration and their own separate username and password — none of your gst.gov.in login credentials carry over. "GST e-invoice login problem" and "GST login not working" are frequently the same search for two different systems.

NIC rolled out its own mandatory 2-Factor Authentication on the e-invoice/e-way bill systems from 1 January 2025 for taxpayers with turnover ₹20 crore and above, separately from GSTN's MFA on the main GST portal. If e-invoice login stopped working around that turnover-and-date combination, check whether 2FA has actually been set up on the e-invoice system specifically, not the main portal.

Looks like X but is actually Y

  • "Invalid Username or Password" looks like a forgotten password, but is very often the GSTIN typed into the username field — a password reset won't fix a username that was never correct.
  • "Access Denied" looks like a portal bug, but where the GSTIN's registration status shows Cancelled or Inactive on Search Taxpayer, it is a registration-status problem no login fix can touch.
  • "Error 1585" reads like a GST error code you should be able to look up. It's the local port emSigner runs on — treat it as a DSC/emSigner connectivity issue, not a portal error code with its own meaning.
  • "System Error Occurred" during the last days before a due date looks like your account has broken, but is usually deadline-day congestion affecting many taxpayers at once — retrying off-peak often resolves it without any account-side change.
  • DSC signing failures often get blamed on the DSC token or certificate, but a large share trace to emSigner simply not running, or the browser blocking the local pop-up window it needs — check those before assuming the certificate itself is bad.

"GST error code" and JSON validation failures — a different kind of error

None of the above is what most people searching a bare "GST error code" or "GST portal error code" actually mean. There is no single official, human-readable index of GST/GSTN error codes — codes surface piecemeal in offline-utility error reports, GSP/ASP API responses, and the portal's own "Known Issues & Suggested Solutions" document, not in one master table. If you landed here searching a code by number, match its exact text to the report your filing tool generated rather than trusting a bare number found on a blog.

  • "Error in JSON Structure Validation" during a GSTR-1 or return-upload — the uploaded JSON doesn't match the schema the portal expects. Common causes: an outdated offline-utility version, direct copy-paste into the tool instead of paste-as-values (which corrupts formatting), an invalid Place-of-Supply code, or a missing/incorrect GSTIN in the file. Re-download the current offline utility from the portal's Downloads section, regenerate the JSON without copy-paste formatting, and re-validate before re-uploading.
  • RET-series and GEN-series numeric codes (for example RET191150 or RET191176) seen during return filing or GSP/ASP API upload — these are field-level validation codes, not general portal errors. This is not an exhaustive or centrally indexed public list, so treat any specific code-to-meaning mapping found on a third-party site as commonly reported rather than confirmed; match the code to the field/description shown in your own error report and correct that specific field (tax-head split, dates, place of supply, HSN, duplicate invoice numbers) before re-validating.

Portal downtime and how to escalate an unresolved issue

SituationWhat it usually isWhere to go
Scheduled maintenance window (GSTN has used windows such as 12:00 AM-6:30 AM)Planned downtime, announced in advancePortal advisories and GSTN's official Infosys_GSTN account on X
System Error / slow response near a filing due dateCongestion from simultaneous logins and filings, not an individual account faultWait and retry off-peak; raise a ticket only if it persists outside the deadline window
Access Denied with an Active GSTIN statusExpired session or an out-of-flow page reloadSelf Service Portal (selfservice.gstsystem.in) — click "Report Issue" for a Ticket Reference Number
Access Denied, or lost credentials, with a Cancelled/Inactive GSTIN statusA registration-status problem, not a login glitchJurisdictional officer directly — found via the CBIC "Know Your Jurisdiction" tool or the GSTIN lookup on Search Taxpayer

GSTN's official Contact Us page no longer lists a helpdesk email address — only the toll-free number and the ticketed Self Service Portal. The GST helpdesk toll-free number published on the official gst.gov.in/contact page is 1800-103-4786. If a Self Service ticket goes unresolved, the documented next steps are the jurisdictional GSTN Nodal Officer, then the CGST Zone Nodal Officer, then the State Tax Nodal Officer or CPGRAMS — quote the original Ticket ID at each step. GSTN has not published this exact escalation ladder as a formal flowchart, so treat it as the practitioner-documented route rather than an official one.

Primary sources

The dates and fees on this page are read off the statute and CBIC’s own notifications, not copied from other guides. You can check every one of them:

Verified against the CGST Act, 2017, the notifications cited above and CBIC circulars as of September 2026. Your exact position depends on your entity and any notifications or circulars issued since — we confirm it for you, and always recommend checking the official CBIC / GST portal. CapEasy is a private consultancy and is not affiliated with any government authority. This page is a guide, not legal advice.

Frequently asked

GST portal, answered plainly.

Almost always a credentials mismatch — most often the GSTIN typed into the username field, since the real username is a value you chose yourself at first login, never the GSTIN. Use "Forgot Username" if you're unsure what it is before retrying the password.

It's the portal's own accessdenied error page, usually from an expired session or a page reloaded outside the login flow. Check your GSTIN's status on Search Taxpayer first — if it's Cancelled or Inactive, this isn't a login glitch and needs the jurisdictional officer, not a password reset.

Check three separate things: a scheduled maintenance window (announced via GSTN's Infosys_GSTN account on X), congestion near a filing due date showing "System Error Occurred," or an MFA/OTP step that hasn't been set up on your account since it became mandatory for all taxpayers from 1 April 2025.

Not a GST or GSTN error code — 1585 is the local port emSigner listens on for DSC signing (https://127.0.0.1:1585). It shows up in DSC connection-failure screenshots. Treat it as an emSigner connectivity issue and follow the emSigner restart/port-check steps, not a code to look up.

The OTP goes only to the mobile and email of the Primary Authorized Signatory registered against that GSTIN — a different person's phone will never get it. Also check SMS delivery delay or an outdated registered mobile; the Sandes app is an officially supported alternate channel for receiving it.

Companies and LLPs must use a Class 3 DSC for GSTR-1 and GSTR-3B — EVC isn't a substitute for them. Proprietorships, individuals and partnership firms can use EVC (an OTP to the Authorized Signatory) instead. Nil returns can still be filed by SMS/OTP by any registered taxpayer type, companies included — a long-standing rule not reported to have changed.

emSigner is the standalone desktop utility GSTN uses to bridge the browser to a DSC USB token, replacing the old Java-applet method after browsers dropped Java-applet support. It's still the required signing bridge as of 2026 — no browser-native replacement has shipped.

The local emSigner service usually isn't running or has crashed, or is on a different port than the browser is calling. Restart emSigner as Administrator, confirm its tray icon is active, check the port in its Control Panel, and allow browser pop-ups/site access for the matching https://127.0.0.1:<port> address.

No. The e-invoice and e-way bill systems are run by NIC and need their own separate one-time registration and username/password — your gst.gov.in credentials don't carry over, and each system runs its own separate 2FA/MFA rollout.

Raise a ticket on the Self Service Portal (selfservice.gstsystem.in) via "Report Issue" for a Ticket Reference Number, then track it at IssueStatus.aspx. If it stalls, the documented next steps run through the jurisdictional GSTN Nodal Officer, the CGST Zone Nodal Officer, and then CPGRAMS — quote the Ticket ID each time.

Book a free consultation.

An honest assessment of where you are and what comes next — no cost, no pressure, no inflated promises.