For micro and small companies in the UK, managing tax obligations online has become a routine part of running a business. Whether you are filing PAYE, submitting VAT returns, or completing Corporation Tax requirements, access to your HMRC online account is essential. Losing your HMRC login credentials can feel like a serious setback, especially when deadlines are approaching. However, the situation is usually straightforward to resolve if you know what steps to take.
This article explains what happens when you lose your HMRC login details and how small business owners can regain access quickly.
Why HMRC Login Credentials Matter?
Your HMRC online account is linked to a 12 didgit Government Gateway User ID and password. These credentials allow you to access services such as:
- Corporation Tax submissions
- PAYE for employers
- VAT returns
- Self Assessment
- Making Tax Digital (MTD) services
Without your login information, you may be unable to returns, view tax liabilities, or make changes to your company’s tax records.
Common HMRC Login Problems:
Business owners typically face one of the following issues:
- Forgotten Government Gateway User ID - Your unique identifier
- Forgotten password - required for log in
- Lost access to the registered email address - required for password resets and account recovery
- Missing two-factor authentication phone/device - requireed for log in
- Locked account after too many incorrect login attempts
Each problem has a recovery option, although the process may take longer if multiple details have been lost.
Recovering a forgotten User ID:
If you cannot remember your Government Gateway user ID, HMRC provides a recovery option on the sign-in page.
You will generally need:
- The email address associated with the account
- Your full name
- Some security details
HMRC will email your user ID if the information matches their records.
For businesses where the account was originally created by a former employee, accountant, or company director, locating those details internally can save time.
Resetting a Forgotten password:
If you know your user ID but not your password, you can choose the password reset option.
HMRC will ask for:
- Your Government Gateway user ID
- The registered email address
- Answers to security questions or verification codes
After verification, you can create a new password and regain access immediately.
Losing two-factor authentication access:
HMRC uses two-step verification to improve security. If you no longer have access to the mobile phone or authentication app linked to your account, you can request an alternative verification method. HMRC may send an activation code by post to your registered address. This can take several days, so it is important to start the process early if a filing deadline is near.
What if you cannot access the registered email address?
If the email address on the account is no longer accessible, HMRC may require additional identity checks.
You may need to provide:
- Your Government Gateway user ID
- Company registration details
- Tax references such as UTR or VAT number
Once your identity is confirmed, you can update the email address and restore access.
When an accountant created the account:
Many small companies rely on accountants to set up HMRC online services. If your accountant created the Government Gateway account, they may still hold the login credentials. Before starting a recovery request, check with your accountant to determine:
- Whether they control the account
- Whether they have your user ID
- Whether authorisation can be reissued if needed
If you have changed accountants, the former adviser may still have the relevant information.
If your account becomes locked:
After several unsuccessful login attempts, HMRC may temporarily lock your account for security reasons.
In most cases, you can:
- Wait for the lockout period to expire
- Reset our password
- Contact HMRC if the issue persists
Avoid repeated login attempts, as this can extend the lockout period.
Impact on tax deadlines:
Losing your HMRC login credentials does not remove your obligation to file and pay taxes on time.
Your company may still face:
- Late filing penalties
- Interest on unpaid tax
- Compliance issues
For example, late Corporation Tax filings can trigger automatic penalties, even if the delay was caused by login problems.
If you are unable to regain access before a deadline, contact HMRC immediately and keep records of your attempts to recover the account.
Information to Keep Handy:
To speed up account recovery, keep these details securely stored:
- Government Gateway user ID
- Recovery email address
- Company Unique Taxpayer Reference (UTR)
- VAT registration number
- PAYE reference number
- Company registration number from Companies House
Having this information available can significantly reduce delays.
Best Practices for Micro and Small Companies:
Small businesses often have limited administrative resources, making it especially important to manage login credentials carefully.
Consider these precautions:
- Store credentials securely in a password manager
- Maintain a backup record accessible to directors
- Use a shared company email rather than a personal email
- Update recovery details when staff change
- Review who has access to HMRC services
These simple steps can prevent disruption if a key employee leaves the business.
When to Contact HMRC:
If online recovery options do not work, you may need to contact HMRC directly.
Be prepared to verify your identity using company information and tax references. Depending on the issue, HMRC may restore access immediately or send verification details by post.
The official sign-in and recovery services are available through HMRC online services.
Conclusion:
For micro and small companies, losing HMRC login credentials can be inconvenient, but it is rarely a disaster. HMRC provides recovery tools for forgotten user IDs, passwords, and two-factor authentication issues. The key is to act promptly, keep accurate company records, and avoid waiting until a filing deadline is imminent.
By storing your login information securely and ensuring more than one authorised person can access your tax accounts, your business can minimise disruption and stay compliant with HMRC requirements.
