ICEGATE Registration and Login: A Step by Step Guide

What ICEGATE is

ICEGATE is the customs portal that Indian importers and exporters file through. In its own registration FAQ, CBIC describes it as the Indian Customs National Trade portal, a single window for Customs, import export tax and allied issues, and puts the reason for registering in one line: ICEGATE registration is a pre-requisite for filing all customs related documents, bills of entry and shipping bills among them, online. The portal is run by the Directorate General of Systems and Data Management, CBIC, and the current version is branded ICEGATE 2.0.

An ICEGATE account gets you an ICEGATE ID, the ability to file documents online, tracking of filed jobs, acknowledgements with shipping bill and bill of entry numbers sent to your registered email, and online payment of customs duty and cess.

Who needs an account

Registration is by role, and CBIC publishes the eligible list. There are sixteen: Airline, Authorized Terminal Operator, Console Agent, Customs Broker (CHA), Custodian, E-Seal Vendor, Participating Government Agencies, Non-IEC Holder or UIN Holder, Freight Forwarder, Importer/Exporter, Non-Vessel Owning Common Carrier, Shipping line, Shipping Agent, Container Train Operator, Express Cargo Clearance System for courier services, and Special Economic Zones Entity.

Most exporters reading this want the Importer/Exporter role. If your customs broker files everything for you, they hold their own Customs Broker registration and file under it, but an exporter still commonly wants an account of their own for enquiries, e-scrip generation and payments. RoDTEP and RoSCTL credits, for instance, are issued as e-scrips in an ICEGATE ledger, which is covered in eBRC for RoDTEP and duty drawback.

Before you start: the four things that decide the outcome

The registration form validates against records held elsewhere. Fix those first and the form takes minutes; skip this and you will meet the same rejection three times.

• The email and mobile must already be the ones on GSTN. CBIC is explicit: registration can only be done with the email ID and contact number registered with GSTN, and with DGFT as well in the case of importers and exporters. The portal fetches them; it does not let you type new ones. If you want different contact details, change them at GSTN and DGFT first.
• Names must match PAN, and the parent user must match PAN and Aadhaar. The organisation name has to match the name on PAN, and the authorised person's name has to match both PAN and Aadhaar. The Aadhaar needs to be linked with DigiLocker.
• Your licence copy has to be legible and self attested. Documents are scanned in colour, as JPG or PDF, each under 1500 KB, each self attested.
• The authorisation letter has to be signed by the right people. The proprietor in a proprietorship, all partners in a partnership, and for a company or LLP either a majority of the directors or designated partners, or the company secretary enclosing a board resolution. Sample formats are printed in the manual itself.

What you upload, by role

CBIC's documents checklist pairs an entity document with individual documents:

• Importer/Exporter: the IEC licence, plus an authorisation letter and a DSC.
• Customs Broker: the CHA licence, plus an authorisation letter, the F Card or G Card, and a DSC.
• Airline, Shipping Line, Shipping Agent: the relevant licence or customs approval letter, plus an authorisation letter and a DSC.
• Custodian: the customs approval letter, notification or licence, plus an authorisation letter and a DSC.
• Console Agent, Authorized Terminal Operator, NVOCC, Freight Forwarder, Container Train Operator: a registration certificate, customs approval letter or licence, plus an authorisation letter and a DSC.
• Participating Government Agency: a PGA identity card and a DSC, with no entity document.

The process is paperless. CBIC states plainly that no paper based application is accepted and that obtaining a DSC and an Aadhaar for validation is mandatory.

The registration, in five sections

CBIC's own manual breaks it into five: role selection, verification of GSTIN details, verification of user details, verification of mobile and email address, and filling and submission of the role registration form. On screen it runs like this:

1. Open ICEGATE and choose Register Now, or follow Services, then Registration.
2. Choose Fresh Registration if you have no Reference ID, or Continue using Reference ID if you started earlier and have one that has not expired.
3. Select your role from the list of sixteen.
4. Enter and verify your GSTIN. An importer or exporter is also asked for a valid IEC.
5. Pick your contact details from the ones the system has fetched from GSTN and DGFT records.
6. Verify the mobile number and then the email address by OTP. The OTPs are six digits and must be entered within 600 seconds. Three wrong OTPs terminates the registration for security reasons and you start again.
7. The system generates a Reference ID and emails it to you. It is valid for fifteen days. Miss that and it is deleted from records and the process restarts from the beginning.
8. Complete the role registration form, in two parts: details of the organisation and details of the authorised parent user, with the document uploads. You can save it as a draft and come back inside the fifteen days.
9. Sign the declaration and submit. The application goes to the ICEGATE approving authority.

The digital signature

A DSC is required, and two rules about it are stated in the guidelines rather than buried: the certificate uploaded must belong to the authorised person, and it must not be expired. For a child user, the certificate must belong to that child user. A DSC in the name of a former employee, or one that lapsed last quarter, fails at upload and not at approval, which at least means you find out quickly.

Logging in, and the OTP rule

Login starts at the ICEGATE home page. You choose a user type, ICEGATE Users for trade and Officers Only for CBIC officials, then enter your ICEGATE ID and password.

Since a CBIC advisory of 16 January 2026, ICEGATE 2.0 requires two factor authentication on every login: an OTP sent to your registered mobile number by default, before the dashboard opens. You can additionally switch on an email OTP under Dashboard, My Profile, Alert Management, but the mobile OTP is on by default and cannot be turned off. Enter the OTP wrong three times in a row and you wait an hour before trying again.

The practical consequence is worth planning for: the registered mobile is now a single point of failure. If it belongs to somebody who has left, nobody logs in. And if you lose access to the registered email address, CBIC's own answer is blunt: deactivate the existing ICEGATE ID and register again for a new one.

Parent users and child users

The account model is a parent with children. Only a parent user, meaning a user with master rights, can create child users, and the purpose is to extend the account's services to authorised representatives and employees. The parent enters the child's name as per PAN, their mobile and their email; the system issues that child a Reference ID valid for fifteen days; the child completes their own form; the parent then approves or rejects it.

Two housekeeping habits follow from that and both are worth writing into your leavers checklist: a child user's DSC must be their own and unexpired, and a child user should be disabled the moment that person stops working for you.

Why registrations stall

Only some of these are officially listed as rejection grounds. The rest are the validation rules that fail earlier, which is why applications go quiet rather than coming back with a reason.

• An unclear or unattested licence copy. CBIC lists this first: the DGFT or other licence copy not clear, not proper, or not self attested and stamped.
• A defective authorisation letter or board resolution. The second listed ground: not clear, not proper, not in the prescribed format, or not attested. Use the sample formats in the manual rather than a letter someone drafted from memory.
• Contact details that do not match GSTN or DGFT. Not a rejection so much as a wall: the portal offers only the contact details it has fetched, so the fix is upstream.
• A name that does not match PAN or Aadhaar. Organisation name against PAN, parent user against PAN and Aadhaar. A trading name, an initial, or a married name that was never updated will all do it.
• GSTIN not integrated with customs. The portal returns a specific message when the GSTIN is not available with customs and asks you to integrate first. GSTIN integration is a separate ICEGATE service and CBIC notes the registration reflects on the customs side after twenty four hours.
• An expired Reference ID. Fifteen days, and then everything you entered is gone.

One more thing worth knowing before you start refreshing a screen: CBIC states that there is presently no facility to check the status of a submitted registration application, and that applicants should contact the ICEGATE helpdesk instead. There is a separate verification utility for registrations that have already been approved, which returns the ICEGATE ID, role, registration date and registered filing services against a PAN.

Already had an ICEGATE account before 2.0?

Then in most cases you do not register again. CBIC's manual says existing users already registered on ICEGATE 1.0 are not required to obtain a fresh registration and can log in directly with their existing ID and password, selecting ICEGATE User as the user type. The exception is the old Simplified Registration category, which could never file customs documents in the first place: those users must upgrade to a DSC based registration to reach the services.

What an ICEGATE account does not get you

This is the part that costs exporters the most time, so it is worth being exact. ICEGATE is the customs portal. It is where the shipping bill is filed, where your bank's AD code is registered port by port, and where e-scrips sit. The DGFT portal is the foreign trade portal, run by the Directorate General of Foreign Trade, and it is where your IEC lives and where the eBRC is issued. Two portals, two registrations, two logins, and neither substitutes for the other. The DGFT side is covered in the DGFT eBRC login guide.

So an ICEGATE account will never produce a realisation certificate. That comes from DGFT, by mapping a realised inward remittance to the export it settles, and DGFT remains the issuing authority whichever route the filing takes. If you would rather not keep a second portal session alive for it, the eBRC exporter app connects to DGFT once and pulls your remittances in on their own, and a free account returns certificates in about two hours.

If what you came for was a copy of a bill rather than an account, start with downloading a shipping bill from ICEGATE, and once the PDF is in hand the free shipping bill extractor reads its fields into a CSV, with no sign-up.

Frequently asked questions

What is ICEGATE?

ICEGATE is CBIC's customs trade portal, described by CBIC as the Indian Customs National Trade portal and operated by its Directorate General of Systems and Data Management. It is where bills of entry, shipping bills and related customs documents are filed online, and where customs duty is paid.

Who needs an ICEGATE registration?

Anyone filing customs documents online. CBIC lists sixteen eligible roles, including Importer/Exporter, Customs Broker, Airline, Shipping line, Shipping Agent, Custodian, Freight Forwarder, NVOCC, Container Train Operator and SEZ Entity. Registration is a pre-requisite for filing customs documents online.

What documents are needed for ICEGATE registration?

For an importer or exporter: the IEC licence as the entity document, plus an authorisation letter and a digital signature certificate for the authorised person. Documents must be self attested, legible, scanned in colour as JPG or PDF, and each under 1500 KB. The parent user also needs a valid PAN and an Aadhaar linked with DigiLocker.

How long does ICEGATE registration take?

CBIC states that processing is completed in three to four working days after submission, and that the ICEGATE ID and password are then sent to the registered email. If it is rejected, the reasons come to the same address. The ID is issued only after approval.

Is an OTP required to log in to ICEGATE?

Yes. Since a CBIC advisory of 16 January 2026, ICEGATE 2.0 requires two factor authentication, with an OTP sent to the registered mobile number by default before the dashboard opens. An email OTP can be enabled additionally under Dashboard, My Profile, Alert Management, but the mobile OTP cannot be disabled.

Is ICEGATE the same as the DGFT portal?

No. ICEGATE is the customs portal, used to file shipping bills and bills of entry and to register an AD code at a port. The DGFT portal belongs to the Directorate General of Foreign Trade and is where the IEC is held and the eBRC is issued. They are separate registrations and separate logins.