Compliance Alert - New two-step authentication in the Online Invoice System

To ensure even better electronic administration, the Hungarian National Tax and Customs Administration (NTCA) announced that secondary users should only be permitted to log in via a two-step authentication process. On 1 June 2023, the Online Invoice System will undergo maintenance to enable the new identification method with two-step authentication.

Additionally, secondary users may provide the following information in addition to their usernames and passwords:

• Logging in to a specific application via an approval notification; or
• Using a code generated by the application installed on their mobile device.

After entering the secondary user's username and password, the "Enable two-step authentication" option appears on the web interface of the Online Account System. Consequently, the secondary user will be guided via four steps to enable the two-step authentication mentioned above.

Step 1: Choosing an identification method

The secondary user must opt between the two-step authentication below:

1. Notification-based identification (internet connection needed), where a notification is sent to your mobile phone, allowing you to authorize the login.
2. Code generation (Internet connection not required). Code is generated by the application on your phone, which can only be used for a limited time and must be entered on the web interface of the Online Invoice System.

Step 2: Downloading and opening the application

If the user opts for notification-based identification, they should download the NTCA Identification free Application (“NAV Azonosító”) to their mobile phone from the Google Play Store or the App Store.

If they opt to generate a code, they must also download an application. The user is free to choose between the NTCA Identification Application (“NAV Azonosító”) or any other TOTP (Time-based one-time password) identification application.

Users already using the Online Invoicing mobile application do not need to download any specific apps, since the “Two-step authentication” menu item of the Online Invoicing mobile application is also suitable for identification.

Step 3: Connecting

A secondary user must link up the application installed on their phone to the Online Invoice System through the web interface. A QR code generated by the Online Invoice System must be scanned by the user using his mobile phone. On the other hand, if the scanning does not work, the code must be entered manually. Pairing is required only on first use.

Step 4: Checking

Finally, to activate the two-step authentication, the user will enter the verification code shown in the mobile application into the web interface of the Online Invoice System. After this, the security keys will appear on the “Successful Check” interface. Consequently, the secondary user will be able to log in to the web interface of the Online Invoice System using one of the identification methods chosen in the first step.

The user should easily change the method of the two-step authentication, but they may enter their username and password on the interface of the Online Invoice System at each login.

For more details, User Manual of NTCA Identification Application and User Manual of Online Invoice System are available here.