The Canada Revenue Agency (CRA) is introducing a Multi-factor authentication (MFA) process to enhance the security of its online services and ensure the safety and protection of taxpayer information. When enrolled, users logging in to CRA login services will receive a one-time passcode by text message or telephone call, which will need to be entered in order to continue the login process. Anyone who is part of the EFILE community, will be asked to enroll in MFA before gaining access to online services in the future.
What to expect:
When you log in to the CRA secure services, you will need to complete the MFA enrollment process. This includes providing the CRA with a telephone number where the one-time passcode will be delivered, choosing a method of delivery for the one-time passcode and the language of the message.
Once enrolled, whether using a CRA user ID/password or a Sign-In Partner, the user will be prompted to enter a one-time passcode each time they log in to use any of the following online services:
Re-authentication using a one-time passcode will be needed if a session times out. This will occur following a period of prolonged inactivity.
For more information, go to Multi-factor authentication to access CRA login services.