Comprehensive Guide to Coretax Passphrases: Function, Creation, and Difference from Passwords

The full implementation of the Core Tax Administration System (Coretax) by the Directorate General of Taxes (DJP) in 2026 will bring new security standards for taxpayers in Indonesia. One of the elements that most often raises questions is the Passphrase. Although it sounds similar to a password, the two have very different roles in the digital tax ecosystem.

The Coretax Passphrase is a series of secret characters that function as an authorisation key to carry out legal or administrative actions within the Coretax system. If a password is used to “open the door” (login), then the passphrase is the “pen” to digitally sign documents.

This passphrase is attached to the Electronic Certificate or DJP Authorisation Code. Without the correct passphrase, the taxpayer will not be able to submit SPT (tax returns), issue tax invoices, or carry out fund transfers, even if they have successfully logged into their Coretax account.

The DJP sets strict standards for passphrase creation to prevent hacking and data misuse:

/,

,

and +

.& and $

are now fully supported by the system. The passphrase creation process can be carried out through the following steps:

Understanding the use of passphrases is a requirement for every taxpayer in the digital era of 2026. With a strong passphrase, you not only comply with tax regulations, but also protect the integrity of your personal financial data from cyber threats.