Poland Retains KSeF Token Authentication and Publishes Expanded KSeF 2.0 Manuals

The Ministry of Finance updated its KSeF 2.0 manual and removed the date that would have ended token authentication on 31 December 2026. On the information currently available, tokens therefore remain an accepted authentication method rather than a short transitional solution.

The official downloads page includes four KSeF 2.0 manuals updated on 6 August 2026. The manuals address initial access, issuing and receiving invoices, additional functions and permission models for local-government units, VAT groups and other organizational structures. Separate user documentation is available for the KSeF taxpayer application and mobile application. [ksef.podatki.gov.pl], [sovos.com]

Businesses should not interpret the continued availability of tokens as a reason to defer access-control work. Tokens should be inventoried, assigned to accountable owners, protected against unauthorized use and revoked promptly when personnel or service-provider relationships change.

Implementation testing should include certificate-based and token-based authentication, permission delegation, self-billing, Peppol-provider access, online and offline invoices, QR codes, UPO retrieval and correction processes. Groups with multiple Polish registrations should pay particular attention to internal identifiers and permissions for VAT groups and organizational units. [ksef.podatki.gov.pl]