New two-step authentication in the Hungarian Online Invoice System

The Hungarian National Tax and Customs Administration (NTCA) announced important changes to the Online Invoice System. For secondary user logins, a new identification method will be introduced on 5 December 2022 in the evening hours (during this period, the Online Invoice System will be undergoing maintenance). In our newsletter, we summarise the most important information.

As of that date, to ensure even more secure electronic administration, secondary users may only log in to the Online Invoice System with a two-step authentication.

This means that secondary users may, in addition to their user names and passwords, login:

• by approving a login notification sent by a specific application; or
• with a code generated by the specific application installed onto their mobile device (mobile phone or tablet).

On the web interface of the Online Invoice System, the “Enable two-step authentication” option appears when the secondary user is logging in for the first time, once they have entered their user names and passwords. The interface guides the secondary user through four steps to enable the two-step authentication.

Step 1: Opting for an identification method

You have to indicate which method of the two-step authentication you wish to use. You may choose between:

• a notification-based identification and
• generating a code.

When you opt for the notification-based identification method, the Online Invoice System sends a notification to your mobile phone, by clicking on which you can authorize the login. In order to do so, your mobile phone needs internet access.

When you opt for generating a code, you have to enter the code generated by the application downloaded to your mobile phone, which can be used for a limited period of time, to the web interface of the Online Invoice System. In order to do so, your mobile phone does not need an internet connection.

Step 2: Downloading and opening the application

If you opt for notification-based identification, you should download the NTCA Identification Application (“NAV Azonosító”) to your mobile phone from the Google Play Store or from the App Store. The application is free and runs on devices with either iOS or Android operation system.

If you opt for generating a code, you also have to download an application. You are free to choose between the NTCA Identification Application (“NAV Azonosító”) or any other TOTP identification application (for instance, Google Authenticator).

If you have already been using the Online Invoicing mobile application you do not have to download any specific application because the “Two-step authentication” menu item of the Online Invoicing mobile application is also suitable for identification.

Step 3: Link-up

On the web interface, you have to link up the application installed to your mobile phone with the Online Invoice System. In order to accomplish the link-up, you have to scan the QR code generated by the Online Invoice System by the camera on your mobile phone. Alternatively, if the scanning does not operate properly, you have to manually enter the 16-digit code. Pairing should only be done on the first use.

Step 4: Check

As the last step of activating the two-step authentication, you should enter the verification code appearing in the mobile application to the web interface of the Online Invoice System. The security keys will appear on the “Successful Check” interface. They enable the log-in even if two-step authentication is unsuccessful. After that you will be able to login to the web interface of the Online Invoice System either by entering the code generated by the mobile application or by approving the login notification (depending on the identification method chosen in the 1st step).

Secondary users should enter their username and password on the interface of the Online Invoice System at each login. The method of the two-step authentication may be freely modified in the User Profile.

Additional information can be found in the User Manual of NTCA Identification Application and User Manual of Online Invoice System (https://onlineszamla.nav.gov.hu/dokumentaciok).

The experts of VGD Hungary are at the disposal of the Clients for any questions they may have.

*****

Should you have any questions regarding this newsletter,
the tax experts of VGD Hungary will be pleased to assist you.

This newsletter provides general information and does not constitute tax advice.