Important FinanzOnline change: 2FA makes access more secure!
From October 1, 2025, 2-factor authentication will be mandatory for FinanzOnline in Austria. Users learn how they can prepare.

Important FinanzOnline change: 2FA makes access more secure!
From October 1, 2025, there will be a significant change for users of the FinanzOnline portal in Austria. The usual login method will no longer be possible due to the introduction of theTwo-factor authentication (2FA)becomes mandatory for access to the portal. This measure was already announced in February 2025 and reminds users of the need to change through appropriate messages. The move to 2FA is primarily intended to increase the security of all accounts, especially given the increasing number of cyberattacks, phishing and malware attacks, as an analysis by onlinesicherheit.gv.at makes clear.
Currently using about6.5 million peopleFinanzOnline, of which around2.6 millionwho need to enable 2FA to continue access to important features such as tax equalization. With 2FA, it is necessary to complete a second confirmation step in addition to the traditional access data. According to 5min.at the use ofIDAustriarecommended as the easiest method to enable 2FA.
Activation of ID Austria
In order to register for ID Austria, users must install the “Digital Office” app, carry out an online pre-registration and then go to an appropriate authority, such as the magistrate or the police, with ID and their mobile phone. Currently using around3.9 million peoplein Austria the ID Austria, which illustrates the number of users required for the switch to 2FA.
Restoring 2FA
In the event that users do not have access to their registered device, the system provides two ways to restore two-factor authentication, depending on whether aRecovery codeis available. If one is available, the user can log in to FinanzOnline, select the appropriate option and enter the code. This allows you to reset 2FA and register a new device. However, if the recovery code is lost, users must go to the login page, select the “Forgotten or blocked password” option and enter their social security number, government-issued photo ID and username to receive a new initial password (bmf.gv.at).
The introduction of 2FA is seen as a crucial step to better protect sensitive data. The additional security layer consists of knowledge (e.g. password) and possession (e.g. an authentication token). Users should be aware of the advantages of this method, but also consider whether the additional effort for the additional security level makes sense for them.