CRA account users are encouraged to add a backup multi-factor authentication option

February 9, 2026

Ottawa, Ontario

Canada Revenue Agency

The Canada Revenue Agency (CRA) will introduce a backup multi-factor authentication (MFA) requirement for CRA account users if they do not already have one. Users will have the option to skip this step each time they sign in during tax filing season.

With millions of Canadians accessing their CRA account each year, this new measure strengthens account security and helps to prevent account lockouts if a primary MFA option is lost or forgotten. Preventing lockouts will help reduce call volumes, allowing contact centre service representatives to focus on assisting Canadians with more complex tax and benefit related questions, especially during peak periods such as tax season.

Adding a backup MFA option to your CRA account

multi-factor authentication - backup options
Image description

Screenshot of a Canada Revenue Agency (CRA) portal page titled Multi-factor authentication—backup option. The page instructs users to set up a backup multi-factor authentication (MFA) option. It provides three choices:

  1. Authenticator app for generating one-time passcodes using a downloaded app.
  2. Passcode grid for saving or printing a unique passcode grid.
  3. Set up a backup option later.

The Next and Exit buttons are displayed at the bottom.

When you sign in to your CRA account you will be prompted to add a backup option. You can choose from the following:

If you’ve chosen to set up a backup MFA option, you will need to enter a one-time passcode to activate it.

Important: After adding a backup MFA option to your CRA account, you can decide which MFA method to use each time you sign in.

This requirement is part of the CRA’s ongoing efforts to enhance account security while also ensuring our digital services empower Canadians with the confidence and control they need to manage their taxes and benefits securely, independently, and on their own schedule. For more information, visit, Multi-factor authentication (MFA) – CRA account help

Contacts

Media Relations
Canada Revenue Agency
613-948-8366
cra-arc.media@cra-arc.gc.ca

- 30 -

Page details

2028-02-09