CAC Tightens Portal Security, Rolls Out 2FA as New Business Registration Steps Expand in 2026

The Corporate Affairs Commission (CAC) has introduced a sweeping security upgrade to its Integrated Company Registration Portal (iCRP), mandating all users to reset passwords and activate Two-Factor Authentication (2FA) before accessing their accounts.

The commission announced the update via its official X handle on Monday, stating that the move is designed to enhance data protection and prevent unauthorised access following recent system maintenance.

Step-by-Step Guide: Accessing the Updated Portal

Visit the Official iCRP Portal
Go to: https://icrp.cac.gov.ng/

Users are required to click the “Forgot Password” option to initiate a reset. A link will be sent to their registered email, allowing them to create a stronger password. Upon login, they must complete a second verification step using authentication apps such as Google Authenticator, which generate time-based security codes.

The CAC noted that this additional layer replaces simpler email-based verification in some cases and aligns with global best practices in digital security.

There is more. That’s if you are looking for a quick way to register your business. There is no easier way than this.

Business Registration in 2026: More Layers, More Compliance

Starting a business in Nigeria has evolved into a more structured, multi-step process that goes beyond basic registration. Entrepreneurs are now expected to integrate tax identity, prepare for state-level permits, and ensure employer compliance where staffing is involved.

Before registration, prospective business owners must confirm that their chosen name is available and compliant with CAC guidelines.

Name Reservation: The First Step

The process begins with a name search on the CAC portal to determine availability and avoid duplication or similarity with existing entities.

Once submitted, the commission reviews the request to ensure it does not violate naming rules, such as the use of restricted terms or names that could mislead the public.

If approved, the name is reserved for 60 days, giving applicants time to complete the registration process. Approval typically takes between 24 and 72 hours, though delays may occur during peak periods. A modest filing fee is required and is paid directly through the portal.

Tax Identity Now Mandatory

Following CAC registration, businesses must obtain a Tax Identification Number (TIN), a critical requirement for operating within Nigeria’s financial and regulatory ecosystem.

The TIN is now issued by the Nigerian Revenue Service (NRS) which replaced the Federal Inland Revenue Service (FIRS) in 2026 in collaboration with the Joint Revenue Board.

Through the updated tax system, businesses can generate a unique 13-digit TIN using their CAC registration number via the new Tax ID portal. Without this number, companies are unable to fully comply with tax obligations or engage seamlessly with financial institutions.

Follow the other processes HERE