Unable to complete your ITR filing?
Security+ is an optional and free security feature available on myITreturn.com. It allows you to enable Multi-Factor Authentication (MFA) for additional protection when signing in to your account.
Normally, you sign in using your login credentials. After enabling Security+, you will also be required to enter a time-based verification code generated on your smartphone using an authenticator app.
This means that even if someone obtains your account password, they would also need access to your authenticator code to complete the login process.
How Security+ works: After you link your myITreturn account with Google Authenticator, the app generates a temporary six-digit verification code. You will need to enter the current code whenever MFA verification is requested during login.
Before You Begin
Keep the following ready:
- Your myITreturn login credentials
- A smartphone
- Google Authenticator installed on your smartphone and
- Access to your myITreturn account
Steps to Enable Security+ on myITreturn
Step 1: Download Google Authenticator
Install the Google Authenticator app on your smartphone using the appropriate link below:
Google Authenticator can generate verification codes even when your phone does not have an active mobile data or internet connection.
Step 2: Sign in to myITreturn and open Security+
Visit myITreturn.com and sign in to your account.
From your account dashboard, open the menu available at the top-right and select Security+.
You will be taken to the Security+ setup screen.
Step 3: Scan the QR Code using Google Authenticator
Open Google Authenticator on your smartphone and choose the option to add a new account by scanning a QR code.
Your myITreturn Security+ screen will display a QR code. Use Google Authenticator to scan this QR code.
Once the QR code is scanned successfully, your myITreturn account will be added to Google Authenticator and a verification code will appear in the app.
Security Tip: Do not share the Security+ QR code, secret setup key or verification code with anyone. Anyone who has access to these details may be able to generate authentication codes for your account.
Step 4: Enter the Verification Code
Google Authenticator will generate a temporary six-digit verification code for your myITreturn account.
Enter the current code displayed in Google Authenticator on the Security+ page and click Enable Security+.
Authenticator codes refresh automatically. If a code expires while you are entering it, use the newly generated code displayed in the app.

Step 5: Sign in using MFA
Once Security+ has been successfully enabled, Multi-Factor Authentication will be active for your myITreturn account.
The next time MFA verification is required while signing in, follow these steps:
- Enter your myITreturn login credentials.
- Open Google Authenticator on your smartphone.
- Find the verification code generated for your myITreturn account.
- Enter the current code on the myITreturn verification screen.
- Continue to your account.
Why Enable Multi-Factor Authentication?
Passwords may sometimes be saved in browsers, reused across websites or become accessible to another person using the same device. MFA adds another verification step before access to your account is granted.
Security+ can therefore provide additional protection for the personal and income-tax information available in your myITreturn account.
What if the MFA Code is Not Working?
If the verification code is not being accepted:
- Make sure you are entering the latest code displayed in Google Authenticator.
- Wait for a new code to appear if the current code is about to expire.
- Check that the date and time settings on your smartphone are correct.
- Make sure you are using the code associated with your myITreturn account.
Lost Your Phone or Unable to Access Google Authenticator?
If you are unable to access the authenticator linked to your account, or you need Multi-Factor Authentication to be deactivated, please raise a support request with the myITreturn team.
Important: Deactivating MFA removes the additional verification layer from your account. Request deactivation only when required.
Frequently Asked Questions
Is Security+ mandatory on myITreturn?
Security+ is an optional security enhancement that allows you to enable Multi-Factor Authentication for your myITreturn account.
Do I need internet access to generate a Google Authenticator code?
Google Authenticator can generate verification codes on your smartphone even without an active internet or mobile data connection.
Can I use the same verification code repeatedly?
No. Authenticator codes are temporary and refresh automatically. Always enter the current code displayed in Google Authenticator.
What should I do if I change or lose my phone?
If you are unable to access the authenticator associated with your myITreturn account, raise a support request for assistance.
For further assistance, please WhatsApp us on +91-9320546101 or raise a support ticket here
Comments
1 comment
Google Authenticator sucks...if for some reason, you reset your phone...there is no back up option....you loose access to any accounts used with it.
A two factor OTP to your registered mobile phone is a far better option.
Please sign in to leave a comment.