Skip to content

Getting help with eCitizen, KRA, SHA and NTSA online services: what to prepare and how to stay safe

By Dismus Nganyi · 4 min read

A woman at a home desk checking a printed checklist next to a laptop with an online formIllustrative photo

Getting assistance shouldn’t mean handing over control of your accounts. Prepare carefully, use official sources and keep passwords and OTPs private.

Online government services can be difficult to navigate when you’re unsure which website to use or what information to prepare. Getting guidance is reasonable, but you should remain in control of your accounts. Dismus Nganyi and Cyber Kenya are independent service providers, not a government agency. Assistance does not create special access, guarantee an outcome or replace advice from the responsible public agency.

1. Be clear about the help you need

Before visiting or sending a message, describe the issue in ordinary language. You might need help understanding information displayed on an official website, preparing a document for upload or finding the agency’s published support contacts. Don’t send your entire collection of personal documents just to ask whether assistance is available.

If there’s an error message, record its wording without exposing passwords, account numbers or other sensitive details. A screenshot can contain more information than you intend to share, so review it first. Ask what assistance is being offered and what part you’ll need to complete yourself before agreeing to proceed.

2. Check the official website address

Start from the official agency website or a link it publishes. Read the actual address in the browser, not only the page logo or a search result title. eCitizen uses ecitizen.go.ke; KRA uses kra.go.ke, with iTax under itax.kra.go.ke. SHA’s official domain is sha.go.ke, and NTSA uses ntsa.go.ke.

A familiar name inside a longer address isn’t enough. For example, a site that merely includes an agency name before an unrelated domain should not be treated as official. HTTPS is important, but it doesn’t prove that a website belongs to the agency. If a redirect or unfamiliar login page worries you, stop and confirm through the agency’s published contacts.

3. Prepare information without oversharing

The documents and information needed depend on the specific service. Check the relevant agency’s current instructions rather than relying on a forwarded checklist. In general, it helps to know which account is involved, have access to your own registered phone or email, and bring any existing reference relating to the matter.

  • Have the relevant identity or reference information available to you.
  • Keep original documents safe and provide copies only when needed.
  • Check that any requested scans are readable before the appointment.
  • Bring a way to save your own receipts, references or documents securely.

This is preparation guidance, not a statement that any particular document is mandatory. Don’t guess at missing information, and don’t let someone enter details you know are inaccurate. If the official instructions are unclear, ask the responsible agency rather than treating a helper’s assumption as a rule.

4. Never share passwords or one-time PINs

Never share your passwords or one-time PINs, also called OTPs, with anyone, including a person assisting you. Enter them yourself on the verified official page, with the screen and keyboard positioned for privacy. Don’t read them aloud, forward them through WhatsApp or allow them to be saved in someone else’s browser.

Keep control of your phone and recovery email. If help requires you to surrender credentials, stop and ask for another way to receive guidance. For an account-access problem, use the agency’s official recovery or support route. Don’t rely on someone who claims they can bypass account security.

5. Review before confirming and keep your records

Read the information on screen before confirming anything. Check names, contact details and the description of the request. Ask for unfamiliar wording to be explained, but remember that a helper cannot make the agency’s decisions. Don’t approve a declaration you haven’t read or don’t understand.

Keep your own copy of any reference, confirmation or receipt. On a shared computer, sign out and make sure your account hasn’t been left open. Ask how temporary scans and downloaded documents will be removed. Avoid leaving personal documents in shared folders or sending them to a group chat for convenience.

6. Leave decisions with the responsible agency

Approvals, eligibility and processing times are decided by the relevant agency. An independent helper cannot promise approval, priority treatment or a particular completion date. If an application needs clarification or a decision appears incorrect, use the agency’s published support or review channels rather than paying someone who promises an inside connection.

You can ask about assistance without exposing your account. Start with a short description of the problem and the agency involved. Keep credentials private, confirm the scope of help and use official information for decisions that affect your records.

Share: WhatsApp

Want help putting this into practice?

Tell me what you're working on and I'll suggest the simplest next step.