1xBet Login in Sri Lanka — Account ID, Phone, App and Troubleshooting

1xBet Sri Lanka login at a glance

Three columns — what you came for, what the website handles, what the app handles. If your problem is OTP delivery, jump to the carrier section. If your problem is a forgotten Account ID, the recovery section sits below. If the main domain refuses to load, the mirror section explains the working alternative.

The login experience is identical between Sinhala and English UI — only the labels switch. Currency, market filters and bet history all stay tied to the account, not the device. Sign in on a Realme phone, finish a slip on a Windows laptop, cash out on an iPhone PWA — the session sees one account.

1xBet website login walkthrough

Desktop, mobile browser or PWA — the form is the same shape. Top-right corner of every page holds the green Login button; tap it and a sheet slides in from the right with three tabs: Account ID, Phone, Email. Pick the one that matches how you signed up. If you joined on the homepage's "one-click" flow, your tab is Account ID.

1. Open 1xbet-sri.com
   Chrome, Safari, Edge — any modern browser. The site auto-detects your locale and shows English or Sinhala based on the IP.
2. Tap Login (top-right, green)
   A slide-in sheet appears with three tabs. The default tab matches your last sign-in method. The session cookie remembers the last choice for 30 days.
3. Enter ID or phone or email
   For Account ID — paste the numeric string the system assigned at signup. For phone — the +94 prefix is locked, fill the 9 digits after. For email — the address you verified at signup.
4. Type the password
   8 or more characters, must include letters and numbers. The eye icon reveals the field; the field locks again after 10 seconds.
5. Tick Remember me (optional)
   Keeps you signed in on this browser for 30 days. Leave unticked on shared computers.
6. Sign in
   If 2FA is on, the system asks for the 6-digit Authenticator code. Otherwise you land on the homepage with your balance visible top-right.

The slide-in keeps you on the page where you started — useful when you have a bet slip open on a match page and need to sign in without losing the selection. The slip persists in browser memory until you confirm or cancel.

1xBet app login — Android and iOS

The native app login differs in one important way: after the first password sign-in, the system stores a long-lived token tied to the device's secure enclave. The next 30 days unlock with Face ID, fingerprint, or a 4-digit PIN — no password retype. The token rotates every 30 days for security.

First time on the app

1. Open the app
   Tap the orange-and-white icon. Splash screen runs for two seconds while the app pulls the current odds feed.
2. Tap "Sign in" on the bottom sheet
   The unsigned home screen offers Register and Sign In side by side. Pick Sign In.
3. Choose method
   Same three tabs as the website — ID, Phone, Email. Plus a fourth tab on Android: "QR code" for one-tap sign-in if you already have a desktop session open.
4. Enter credentials, submit
   Login completes in under two seconds on Dialog or Mobitel data. The system asks for OTP confirmation if this is a new device.
5. Enrol biometric (optional but useful)
   A prompt offers "Use Face ID for next sign-in?" — confirming binds your device biometric to the session token.

QR-code login on the app

If you have an active desktop browser session, the app offers a shortcut: tap the QR icon on the login screen, point the camera at the QR rendered on your laptop's account page, the session moves to the phone in under three seconds. Useful when you switch from laptop work to mobile mid-day and do not want to type the password.

1xBet login methods

Four supported sign-in identifiers, plus three social options. The platform does not require you to pick one at signup — every account carries an Account ID by default, and any added contact details (phone, email) can also serve as a sign-in handle later. Social logins link rather than replace.

Account ID

A numeric string the system assigns at sign-up, between 8 and 11 digits. Most accounts run a 9-digit ID. The number is not the same as your phone or NIC; it is platform-internal. People forget the ID because they rarely see it after the first session — the app shows it under Account → Profile, and the welcome email contains it. The "Forgot ID?" link on the login screen sends a recovery copy to the phone or email on file.

Phone (+94 prefix)

Whichever Sri Lankan mobile carrier you signed up with works as a login handle. The login form locks the +94 prefix and asks for the 9-digit subscriber number. The system sends an OTP to that number when you sign in from a new device. Phone-as-login fails if you ported the number to another carrier without updating it inside the account — recovery in that case runs through email.

Email

The address you verified at sign-up. If you used a one-click signup that auto-generated credentials, no email sits on the account until you add one under Account → Profile. Without an email, password recovery only routes through phone — which fails if the number is lost. Always add an email after a one-click signup; takes 90 seconds.

Social — Google, Telegram, X

Three OAuth options below the credentials form. Google is the most common; Telegram works through their official login widget; X (Twitter) uses the standard OAuth flow. The social option does not replace your Account ID — it links to it. Sign in via Google once, the next session can still use Account ID + password if you prefer. Useful as a backup if you forget the password and lose phone access.

1xBet app biometric login

Face ID, Touch ID, and Android's fingerprint or face unlock — the app supports all four. Biometric login does not replace your password; it unlocks a token the device stores in its secure enclave. The actual password never leaves the keychain on iOS or the Keystore on Android. Disabling biometric kills the token but does not affect your account.

How to enable

• Sign in once with Account ID and password.
• Open Account → Security → Biometric login.
• Tap "Enable" and confirm with the system biometric prompt (Face ID, fingerprint).
• Next launch unlocks with the biometric. The token rotates every 30 days, after which the app asks for the password once.

If biometric fails after an OS update

iOS and Android both invalidate stored biometric tokens after major OS upgrades. The first launch after iOS 18 or Android 15, for example, asks for your password once before re-binding. This is a system policy, not a 1xBet quirk.

1xBet forgot password recovery

Tap "Forgot password?" below the login form. Two channels handle reset — SMS code to the registered phone, or a reset link to the registered email. The flow shows both buttons; pick whichever you can still access.

SMS-code recovery

The system sends a 6-digit code to the +94 number on file. Code arrives in 30-90 seconds on Dialog and Mobitel, slightly longer on Hutch. Enter the code, set a new password (8+ chars, letters and numbers), confirm. Total time: under two minutes.

Email-link recovery

A reset link arrives in your email inbox within 60 seconds. Click the link, the browser opens the new-password screen, type the new password twice, submit. The link expires after 30 minutes for security. If the email does not arrive, check the spam folder — gambling-related domains sometimes filter on the first message.

If both channels fail

Live chat support handles fallback recovery. You provide NIC number, date of birth, the last successful deposit amount, and the rough date you registered. Support verifies against the account record and resets the password manually. The process runs 5-15 minutes inside business hours, longer overnight.

1xBet two-factor authentication

The platform supports Google Authenticator-style TOTP — the rolling 6-digit code that changes every 30 seconds. SMS-only 2FA is not offered as the second factor. SMS still plays a role as the channel for OTP delivery on new-device sign-ins, but TOTP is the security upgrade for full 2FA.

Setting up 2FA

1. Install Google Authenticator
   Free on Android and iOS. Microsoft Authenticator, Authy, 2FAS — any TOTP-compatible app works the same way.
2. Open Account Settings → Security → Two-Factor Authentication
   Web or app — the menu is identical. The page shows a QR code.
3. Scan the QR code
   Authenticator app picks it up, adds a 1xBet entry. The 6-digit code starts rolling immediately.
4. Save recovery codes offline
   Eight one-use recovery codes appear on screen. Screenshot them or write them down somewhere physical. They are your only path back in if you lose the phone with the Authenticator app on it.
5. Confirm setup with the first 6-digit code
   Type the current code from the Authenticator app to finish enrolment.

After 2FA is on, every new-device sign-in prompts for the 6-digit code after the password. Existing trusted sessions stay active until they expire on their own timer.

1xBet session management

Account → Security → Active Sessions lists every device with a live session — desktop browser, app on phone, app on tablet. Each entry shows the device type, the country, the IP class (Dialog, Mobitel, Hutch, SLT-Mobitel home, public Wi-Fi), and the timestamp of last activity.

Three controls live on this screen:

• Sign out one device. Tap the X next to the row. That device kills its token and asks for the password on the next launch.
• Sign out everywhere. One button at the bottom. The current device stays signed in; every other session ends. Use after losing a phone or noticing an unfamiliar entry.
• Trust this device toggle. Per-device 30-day session vs per-launch session. Untick on shared devices.

The "stay logged in" 30-day token rotates automatically. If you do not sign in for 30 consecutive days, the next login asks for the password again — same as a fresh device. Active users rarely see the prompt.

Common 1xBet login errors and fixes

One year of customer-support tickets distilled. These are the messages that hit Sri Lankan accounts most often and the quickest fix for each.

"Invalid credentials" and account block

The error label covers a handful of root causes, all surfaced the same way to avoid leaking account existence to attackers. Sequence to work through:

1. Check the tab. If you signed up with phone, the Account ID tab will reject your phone number as "invalid credentials" because the tab parses input as numeric ID only.
2. Reveal the password. The eye icon shows the characters for 10 seconds. Most "wrong password" cases are silent typos.
3. Caps lock and keyboard layout. Sinhala keyboard layout on Android occasionally hits the password field — switch back to English layout for the password row.
4. Hit reset on attempt three. The platform locks the account for 30 minutes after the third miss. Resetting the password lifts the lock instantly.

Three failed attempts within a 15-minute window trigger a 30-minute temporary block. Five additional failures after the block lifts move the account to manual review — only live chat support can unlock from that point, and they ask for NIC verification first.

OTP issues on Dialog / Mobitel / Hutch numbers

SMS OTP delivery in Sri Lanka follows carrier patterns the platform does not control. The table below reflects field testing across the three main carriers in 2026 — delivery times, common failure modes, what to do when the code does not arrive.

What to check before tapping Resend

• Signal strength. Two bars or fewer puts the OTP at the back of the SMS queue. Move to a window or step outside.
• Number format. Confirm the +94 prefix locks and the next nine digits match your subscriber number. A typo means the OTP went to someone else.
• Block lists. If you set up SMS filtering, "shortcode" senders sometimes land in a separate folder.
• Resend timer. The system rate-limits Resend at 60 seconds between requests. Tapping faster does nothing.

If three OTP attempts fail in a row, switch to email recovery from the same screen — the "Try another method" link sits below the OTP input. Email reset always works as long as the inbox is accessible.

1xBet mirror site login

1xbet-sri.com is the primary entry point for Sri Lankan accounts. The platform also runs working mirrors under several alternate domains for situations where ISP routing, registrar issues, or network filtering interrupts the main host. The mirror serves the same account, same session, same balance — the underlying servers are identical.

How to find the active mirror

• Through the app. The installed app holds an internal mirror list and rotates to whichever URL responds. If the website refuses to load, the app usually still works.
• Through the official Telegram channel. The operator publishes the current working mirror through its verified Telegram presence — search the channel name from the website's footer.
• Through email support. Reply to any previous email from the platform asking for the current mirror; the response includes the verified URL.

Mirror login behaviour

The mirror login form looks identical to the main site. Same three tabs, same OTP flow, same biometric option on the app. Cookies do not carry across mirrors — signing in on a mirror creates a fresh session that does not affect your other devices.

1xBet login on a VPN and DNS notes

VPNs and custom DNS settings are not necessary for a default Sri Lankan ISP connection. Dialog, Mobitel, Hutch and SLT-Mobitel all resolve 1xbet-sri.com without intervention. The platform does not geoblock Sri Lankan IPs. A VPN is only useful in three scenarios:

• School or office Wi-Fi blocks the domain. Institution-level filters sometimes block gambling-related hosts. A VPN routes around the filter.
• Travelling outside Sri Lanka. Some destination countries do block the operator at the ISP level. A VPN routed back to a permitted jurisdiction restores access.
• Specific ISP DNS failure. Rare, but if your ISP's DNS server returns an unresolvable answer for 1xbet-sri.com, switching to 1.1.1.1 (Cloudflare) or 8.8.8.8 (Google) restores access without needing a VPN at all.

VPN-and-account-flagging notes

Signing in through a VPN that routes traffic via a country where 1xBet does not hold a licence can flag the account for review. The platform recognises VPN exit IPs and matches them against its licence map. If you must use a VPN, choose an exit node in a country listed on the operator's accepted-jurisdiction list — Cyprus, Curaçao, Russia, Brazil and several others qualify. Avoid US, UK and Australian exit nodes.

1xBet login safety checklist

Three categories of risk hit account holders most often — phishing pages that mimic the login form, credential reuse across other sites, and stale 2FA recovery codes. The checklist below covers each.

Phishing-page detection

• URL host check. The legitimate site shows 1xbet-sri.com or a mirror published through the app, Telegram or email. Anything ending in .tk, .ml, .cf, or hosted on a free CDN with a long sub-path is a phishing trap.
• HTTPS lock. The browser shows a padlock and the certificate is valid. Click the lock to confirm the certificate was issued to the correct entity. Self-signed certificates or domain-mismatch warnings mean close the tab.
• Form layout. The real login slides in from the right on desktop and shows three tabs (ID, Phone, Email). A phishing page often shows a centred modal with only one tab — a common rendering shortcut for fake clones.

Credential-reuse risk

Using the same password on 1xBet that you use on a smaller, less-secured site is the biggest single risk to your account. If the other site leaks its password database, attackers run the same email/password pair against high-value targets including betting sites. A unique password for 1xBet — generated by a password manager — solves this in one move.

2FA recovery code health

The eight recovery codes the system generates at 2FA setup expire individually as they are used. Once you use one, you have seven left; once you use all eight, the system asks you to generate a fresh set. Most accounts never get there because they never lose their phone — but if you do not check the count, you might find yourself locked out the day you need to recover. Once a year, open Security → 2FA and confirm the count is at least 6.

1xBet login FAQ

What if I forget my 1xBet Account ID?

The Account ID is the numeric string assigned at signup — usually 9 digits. Tap "Forgot ID?" on the login screen and choose recovery by phone or email. The system sends the ID to whichever channel matches your registered details. If both fail, live chat handles identity verification with NIC and date of birth, then resends the ID.

OTP is not arriving on my Dialog number — what now?

Dialog gateways usually deliver in under 60 seconds. If nothing arrives in 2 minutes, tap Resend once — the system rate-limits a second resend for another 60 seconds. Confirm signal strength; if you sit on edge-of-cell coverage, the OTP arrives several minutes late. Move to a stronger spot, retry. If three OTPs fail, switch to email recovery.

How many failed login attempts trigger a block?

Three failed attempts inside a 15-minute window trigger a temporary 30-minute block. The block lifts on its own; resetting the password clears it sooner. Five additional failures after the block lifts moves the account to manual review — live chat handles unlock after NIC verification.

Can I log in to the 1xBet app with Face ID or fingerprint?

Yes — both Android and iOS. You sign in once with the password, then enable biometric login under Settings → Security. Face ID or the fingerprint sensor unlocks the app for 30 days before the next password check. Biometric data never leaves the device.

Does 1xBet support two-factor authentication?

Yes. Google Authenticator-style TOTP is the supported second factor. Scan the QR code under Account Settings → Security → Two-Factor Authentication, save the eight recovery codes offline, and every new-device login asks for the 6-digit rolling code after the password.

What is the official 1xBet mirror for Sri Lanka?

1xbet-sri.com routes to the active host. If the main domain shows a registrar block, the operator publishes the working mirror through its official Telegram channel and inside the app itself. Avoid mirror lists shared on random forums; they are a phishing risk.

Do I need a VPN to log in to 1xBet from Sri Lanka?

No — not as a default. Sri Lankan ISPs do not block 1xbet-sri.com. A VPN matters only behind a restrictive school or office network, or when you travel to a country that blocks the operator. Signing in via a VPN routed through a restricted jurisdiction can flag the account.

How do I log out of every device at once?

Account → Security → Active Sessions. The list shows every device with a live session. Tap "Sign out everywhere" and confirm with the password. Useful after losing a phone or noticing an unfamiliar entry.

Updated: 05.06.2026