When you receive your GIN, you would be required to create an account with the government portal. This is essential to reduce the number of trips to HHS as everything will be able to be performed within the site. Since all government sites are required to have SSL certificates, and login credentials are salted with military grade encryption, one could be confident that their login credentials will be kept safe.
For citizens living in Kaldus, they will need to go to HHS. They will verify their identity via DNA comparison. Once that is done, the HHS worker will work with the citizen to provide their GIN, and help them create an account. Assuming that the citizen likely has a computer that they own, the worker will use the citizen’s computer to create their account. Assuming they have a smart phone, they will also be advised to provide for 2FA through an app that will install on their phone. This could be Kal-OS Wallet App, or Google Authenticator. Other options are also available. This 2FA will be required when logging in from a new device. The citizen will need to log in with their device once a quarter if they do not wish to provide their 2fA code when logging in. They will of course have to set that the computer remembers the device, and clearing cookies will require a 2FA code.
For people living outside of Kaldus, they will receive their GIN via email. This will come in the form of a protected .zip file. The password that the foreigner setup when acquiring their DNA kit will be the password for opening the protected .zip file, and that GIN will be used to log in. All non-citizens are required to setup 2FA since it would be nearly impossible to visit an HHS office if something was to go wrong. The 2FA will be that additional level or protection.
In either case, the person signing in will go to https://gov.ka/login. They will enter their GIN, and password. Once they logged in and verify their 2FA code if they are logging from an unrecognized device, they will be able to perform any of the functions they will need to do. This could be voting (if a citizen), acquiring GAON, acquiring .png file of their ID card, and setup alternative contact information. One of the first things that a resident might want to do is acquiring a GAON for their bank account, and phone plan.
All government websites will be their domain/login for logging in. This will reduce any would be issues with fake sites. Most browsers has a password manager. If you are going to a phishing site, the password manager will not enter the credentials automatically. This might warrant the opportunity to inspect the URL the link sent them to. Even better, it would make sense to enter the Login URL directly in the browser address field.