Guide to Signing In with Verification Code for Land Transaction Tax

Signing in to a Land Transaction Tax account with a one-time verification code

To access the Welsh Revenue Authority’s online Land Transaction Tax service, you must use both your normal email address and password and a one-time verification code sent to your email. This extra security step does not change LTT filing rules, but it does mean you need prompt access to the relevant inbox each time you sign in.

• After entering your email address and password, you must enter a verification code emailed by Microsoft on behalf of the Welsh Revenue Authority.
• The code is valid for 10 minutes only, and a fresh code is needed every time you sign in.
• If you restart your browser before completing sign-in, you will need a new verification code.
• Users should have their own login details, as shared sign-ins reduce security and are discouraged.
• If the email does not arrive, check spam or junk folders, review any email filtering or quarantine settings, and ask your IT team for help if needed.
• If a code is wrong or has expired, request a new one from the link on the sign-in page.

Scroll down for the full analysis.

How to sign in to your Land Transaction Tax account using a one-time verification code

This page explains the extra sign-in step used for Land Transaction Tax online filing in Wales. The Welsh Revenue Authority requires a one-time verification code, sent by email, as part of the login process. In practical terms, this means your password alone is not enough to access the account.

What this rule is about

The guidance is about account security for the online Land Transaction Tax filing service. It does not change the underlying LTT rules or filing obligations. Instead, it explains how authorised users gain access to the online account used to file returns and manage LTT matters.

The key point is that access depends on two things:

• your usual sign-in details, being your email address and password, and
• a separate one-time verification code sent to your email address.

This is a form of additional authentication intended to reduce the risk of unauthorised access.

What the official source says

The Welsh Revenue Authority says that when you sign in to the LTT online service, a one-time verification code will be emailed to the email address used for sign-in, once your login details have been validated.

The process described is:

• go to the online LTT filing service,
• enter your email address and password,
• wait for the verification email, which is sent by Microsoft on behalf of the Welsh Revenue Authority,
• enter the code on the sign-in page, and
• select the option to verify the code and continue.

The source also states that:

• the code is valid for 10 minutes from the time it is issued,
• you need a new code each time you sign in, and
• you also need a new code if you restart your browser.

The guidance says this is intended to improve security by helping ensure that only authorised users can access the account. It also states that users should have their own sign-in details, and warns that shared sign-in details weaken security.

What this means in practice

If you file LTT online, you should expect an email-based verification step every time you log in. This means access to the relevant email inbox is part of being able to use the service.

For firms and teams, the practical message is clear: even if more than one person works on LTT matters, the system is designed on the basis that users should not share a single login. The guidance expressly says users should have their own sign-in details, because shared credentials compromise security.

It also means timing matters. The code expires after 10 minutes, so delayed access to the email inbox, internal email filtering, or browser restarts can prevent successful sign-in and require a fresh code.

How to analyse it

If you are having trouble accessing the LTT account, the useful questions are:

• Are you using the correct email address and password?
• Do you have access to the inbox for that email address?
• Have you checked for an email from Microsoft sent on behalf of the Welsh Revenue Authority?
• Has the code expired because more than 10 minutes have passed?
• Have you restarted the browser, which would mean a new code is needed?
• Has the email gone into spam or junk?
• Does your organisation’s email security system block or quarantine these emails?

The official guidance suggests adding [email protected] to a safe email list and contacting your IT team if emails are not arriving properly.

If the code is wrong or has expired, the source says you should request a new code using the link on the sign-in page.

Example

Illustration: A conveyancer logs in to file an LTT return. They enter their email address and password correctly, but do not check their inbox straight away. After 15 minutes, they open the email and enter the code. The code no longer works because it is only valid for 10 minutes. They must request a new code and use that new code to complete the sign-in process.

Why this can be difficult in practice

The guidance is straightforward, but practical issues can still arise.

One common problem is that firms may operate shared mailboxes or shared workflows. The official material indicates that shared sign-in details are not appropriate from a security perspective. That can create operational issues if a team has historically relied on one common login.

Another issue is email delivery. The sign-in process depends on a third-party email reaching the user promptly. Delays caused by spam filtering, mailbox rules, or IT restrictions may stop a user accessing the account even where the password is correct.

A further point is that restarting the browser triggers the need for a new code. Users may not expect that, especially if they are interrupted part way through signing in.

Key takeaways

• Signing in to the LTT online service requires both your password and a one-time email verification code.
• The verification code expires after 10 minutes and a new code is needed each time you sign in or restart your browser.
• If the code email does not arrive, check spam or junk, consider email filtering issues, and use the sign-in page to request a new code if needed.

This page was last updated on 24 March 2026

Useful article? You may find it helpful to read the original guidance here: Guide to Signing In with Verification Code for Land Transaction Tax

View all WRA LTT Guidance Pages Here