The SAT Password is not the e.firma key password
Mexico's SAT Password opens several online services. An e.firma uses a .cer certificate, a .key private-key file, and the password protecting that private key. Restoring one credential does not recreate the other.
The safest recovery process starts by identifying the taxpayer, not by clicking the first reset link. In 2026, an individual who still has a valid e.firma, an adult individual using SAT ID, and a Mexican company follow materially different routes.
Original Fintax post on generating or renewing an SAT Password through SAT ID.
Route map
| Taxpayer situation | Primary channel | Core evidence |
|---|---|---|
| Individual with a valid e.firma | SAT portal | .cer, .key, and private-key password |
| Adult individual without usable e.firma files | SAT ID | RFC, personal email, ID, and identity video |
| Eligible individual requiring in-person support | SAT office | Current ID and case-specific records |
| Mexican legal entity | SAT portal with valid e.firma |
SAT's current individual Password procedure lists online, SAT ID, and in-person channels. The separate company Password procedure says legal entities must use the portal with a valid e.firma; a manager cannot route the company request through personal SAT ID.
Online reset with a valid e.firma
- Open the official procedure from the SAT domain.
- Select the e.firma route and load the matching .cer and .key files.
- Enter the private-key password, which is not the new portal Password.
- Set the eight-character SAT Password and a personal controlled email.
- Download the acknowledgment, then test a fresh session.
SAT ID identity request
SAT ID Password generation or update is available to individuals aged 18 or older. The request uses the RFC, an email address not already supplied by another taxpayer, an accepted current photo ID, and a video in which the applicant clearly speaks the phrase displayed by the application.
| Quality gate | Failure mode | Practical control |
|---|---|---|
| Identification | Blur, glare, missing edge, or expired document | Capture both sides in even light |
| Face match | Filter, shadow, obstruction, or stale ID photo | Use a stable front-lit camera and no filters |
| Spoken phrase |
Password construction rules
The current SAT ID page requires exactly eight characters, at least one number, and only letters a-z and digits 0-9. It rejects spaces, special characters, the RFC, and obvious repeated or consecutive patterns. An updated Password must differ from the prior three.
A favorable response is not the final credential
SAT ID first issues a request folio. If approved, SAT emails a link used to establish or renew the Password. Preserve the folio, response, final acknowledgment, and the date the new access was tested.
When repeated attempts are the wrong fix
Use SAT's Password validation service to capture the exact status before resetting. The 2026 framework in RMF rule 2.2.1 and RMF 2026 Annex 2 addresses Password effect and procedures. Identity, address, or taxpayer-record inconsistencies may require the clarification route under procedure 197/CFF rather than another identical upload.
Post-recovery security file
- Test only on an official SAT domain and close the session.
- Store the acknowledgment in the tax file, separate from the credential.
- Protect the associated email with strong recovery controls.
- Record authorized operational responsibilities without sharing personal credentials.
- Track SAT Password, e.firma, and CSD separately; each has a different purpose and lifecycle.
Do not send credentials over chat
An adviser can organize records and guide the process without receiving the SAT Password, the .key file, or its private-key password through messaging. Credential custody is part of Mexican tax governance.
Common questions
Can a Mexican company use SAT ID?
Not to generate the legal entity's SAT Password. The company route uses the SAT portal and a valid e.firma under procedure 311/CFF.
Does SAT ID provide an instant reset?
No. It creates a reviewed identity request. A favorable response sends the controlled link used to establish the credential.
Can the SAT Password replace e.firma?
No. Some services accept the Password, while signed filings and procedures may require the e.firma certificate, private key, and private-key password.
What if the video is rejected?
Start again after correcting the stated quality or identity issue. If SAT identifies a deeper taxpayer-record inconsistency, use the appropriate clarification procedure.
Official references
Confirm the current individual procedure, SAT ID instructions, legal-entity route, and RMF 2026 Annex 2 before acting.
