Why Your eTIMS Account Gets Locked
eTIMS accounts and devices lock for a few distinct reasons. Identifying the cause first saves time — the unlock process is different for each.
The 7-day sync lockout (most common)
KRA automatically locks any eTIMS device that has not successfully synced for 7 consecutive days. This is a security control to prevent sales data being withheld. It is the number one cause of lockouts we see with clients.
Too many failed login attempts
Like iTax, eTIMS locks the account after a number of failed login attempts — usually 5. The lock is typically temporary (30-60 minutes) and clears on its own.
Expired or deactivated device certificate
Each eTIMS device has a certificate. If it expires or KRA deactivates it, the device cannot sync and may show as locked until the certificate is renewed.
KRA compliance review or flag
If KRA flags the account during an audit or compliance review, they may lock it manually. This is the slowest lockout to resolve and requires direct contact with KRA.
Device re-registration mismatch
Attempting to reinstall eTIMS Client or register a new device while the old one is active can trigger a lock, because KRA detects duplicate or conflicting device registrations.
How to Unlock Your eTIMS Account — Step by Step
Follow the path that matches your lockout cause.
Log in to eTIMS Lite
Open etims.kra.go.ke and log in with your KRA PIN and eTIMS password. Remember, this is separate from your iTax password.
Go to Device Management
In the eTIMS Lite menu, open Device Management. You will see your registered devices and their status (Active, Inactive, or Locked).
Reactivate the locked device
Select the device and click Activate or Confirm. KRA will re-authenticate the device. This clears the 7-day sync lockout in most cases.
If it is a password lock, reset it
Use 'Forgot Password' on eTIMS Lite. The reset link goes to your registered email. Wait 10-15 minutes between attempts — KRA throttles reset requests.
Renew an expired certificate
Still in Device Management, renew the device certificate. If renewal fails, contact KRA eTIMS support with your device serial number.
Reopen eTIMS Client and sync
Open eTIMS Client, confirm the device is unlocked, and click Sync. Your queued pending invoices transmit in order.
Still locked after reactivation? The lock may be compliance-related or the certificate renewal may need manual approval. Contact KRA eTIMS support on 020 499 9999 or 0711 000 471 and quote your KRA PIN and device serial number.
What If the Device Itself Needs Reactivation?
A locked device is not the same as a locked account. If eTIMS Client shows a device-specific lock message (for example, “Device has been deactivated”), the device must be re-linked to your account.
Confirm the device serial number
Find the serial number inside eTIMS Client (Device Info) or on the device label. You will need it for reactivation.
Re-link through eTIMS Lite
In Device Management, delete the old device record (only if advised) and re-add it with the serial number, or click 'Confirm' on the existing record. Prefer confirming over deleting.
Check if you need KRA approval
Some device changes require KRA approval. KRA sends a notice to your registered email with the outcome. Allow 1-2 working days.
Sync once reactivated
After the device shows Active, reopen eTIMS Client and run a manual sync to push your pending invoices.
What NOT to Do When Your eTIMS Account Is Locked
Do not reinstall eTIMS Client
Reinstalling while locked can orphan your locally queued invoices and make the lock worse. It does not bypass KRA's lock.
Do not register a new device to 'reset' the account
A second device registration while the first is locked triggers KRA conflict flags and can delay reactivation.
Do not keep guessing your password
Each failed attempt extends the temporary login lock. Wait, then use 'Forgot Password' instead.
Do not ignore it
A locked account blocks all invoicing. If it happens near the 20th deadline, you risk late-filing penalties. Act immediately and document everything.
Locked with a KRA deadline approaching?
If you cannot invoice or file because of a lockout, screenshot every error, note the time, and contact KRA immediately. If you miss the deadline, apply for a penalty waiver with the evidence. Read the late filing penalty guide and eTIMS penalty guide.
Prevention: Never Get Locked Out Again
Sync daily — it takes 1 minute
Open eTIMS Client each morning and confirm the Pending Sync count is zero. A daily check completely eliminates the 7-day lockout cause.
Keep credentials saved securely
Store your eTIMS password in a password manager. Use the correct password for eTIMS — it is separate from iTax.
Monitor your certificate expiry
Renew the device certificate before it expires. Set a reminder 30 days before the expiry date.
Update eTIMS Client promptly
Install new eTIMS Client versions when KRA releases them to stay compatible with server-side changes.
Never Manage eTIMS Alone Again
Smart VAT Kenya handles eTIMS onboarding, sync monitoring, and reactivation support — plus your monthly VAT filing. KES 3,500/month. We catch lockout risks before KRA does.
Get eTIMS Help on WhatsAppFrequently Asked Questions
- Why is my eTIMS account locked?
- The most common reason is the 7-day sync rule: if your eTIMS device does not sync with KRA for 7 consecutive days, KRA locks it automatically. Other causes include too many failed login attempts, an expired or deactivated device certificate, or KRA flagging the account during a compliance review. The unlock process differs by cause, so identify the reason first — check your email for a KRA notice and the eTIMS Client error message.
- How do I unlock my eTIMS account?
- For a sync-related lockout, log in to eTIMS Lite (etims.kra.go.ke), go to Device Management, and reactivate the device, then sync eTIMS Client. For a password lockout, use the 'Forgot Password' option on eTIMS Lite. For an expired certificate, renew it through Device Management. If the account is locked by KRA for compliance reasons, you must contact KRA eTIMS support directly — do not try to reinstall the application or create a new device, as that can orphan your queued invoices.
- How long does an eTIMS lockout last?
- A temporary login lockout from failed attempts typically clears after 30-60 minutes. A sync-related lockout lasts until you reactivate the device through eTIMS Lite or KRA support — it does not clear on its own. A compliance-related lockout is indefinite until KRA resolves it, which can take days. Do not wait if you suspect a compliance lockout; contact KRA early.
- Will I lose my pending invoices if my account is locked?
- No. Pending invoices are stored locally on your eTIMS Client device and survive a lockout. Once the device is reactivated, click Sync and the queued invoices transmit in order. However, do not reinstall eTIMS Client or register a new device before unlocking the existing one — that can orphan the local queue and lose the invoice data.
- Can I invoice while my eTIMS account is locked?
- No. A locked device or account blocks invoice creation entirely. You must unlock it before you can issue eTIMS invoices. In the meantime, keep a manual sales log so no sales are lost — create the invoices retroactively once you are unlocked. If the lockout is close to a KRA deadline, document everything and contact KRA promptly.
- How do I stop my eTIMS account from locking again?
- Sync your device at least once every 7 days — ideally daily. Keep your login credentials saved securely, use the correct portal (eTIMS vs iTax have separate passwords), keep the device certificate active, and update eTIMS Client when KRA releases new versions. A daily 5-minute sync check prevents the most common lockout cause.