Security
If your CRA user ID and password have been revoked
Some taxpayers may have received a notification that their CRA user ID and password have been revoked. Visit CRA user ID and password have been revoked for more information.
- What is a cookie?
- I don't want to set my cookies to "on". Can I still use the CRA sign-in services?
- What happens when I select the radio buttons "Ask me a security question each time I sign in" or "Skip this step on this computer"?
- How do I sign in to the CRA without having to answer a security question?
- What can I do to ensure my security after an online session?
- What happens if I clear my cache?
- What can I do to protect my personal information?
- How do I block access to my information on the CRA sign-in services?
- Why can I bookmark some pages and not others?
- Why do I need a CRA security code?
1. What is a cookie?
A cookie is a small piece of information that is sent to your computer by a Web site and used by your browser. It contains settings to help you use our services. There are two types of cookies: session cookies and persistent cookies.
A session cookie is used only during the browser session. It expires when the user closes the browser and it is not stored on your hard drive.
A persistent cookie is placed on your computer and will remain on your hard drive for a specific period of time, unless you remove it. The CRA sign-in services use persistent cookies, which will not store any identifying data.
2. I don't want to set my cookies to "on". Can I still use the CRA sign-in services?
No. One of the ways we ensure that we send the correct information during your online session is by using cookies. Right now, we have no other session management method for users who prefer not to accept browser cookies. If you don't accept cookies, you won't be able to use the CRA sign-in services.
3. What happens when I select the radio buttons "Ask me a security question each time I sign in" or "Skip this step on this computer"?
If you select the radio button labeled "Ask me a security question each time I sign in", each time you sign in you will be asked to provide the answer to one of the questions you have chosen.
If you select the radio button labeled "Skip this step on this computer" a persistent cookie will be added to your browser and you will be remembered on this computer. Consequently, each time you sign in, you will not have to answer one of the questions you have chosen.
Note
We recommend that you only select "Skip this step on this computer" for your personal computer and not one that is shared by others; for example, in internet cafés or public libraries.
4. How do I sign in to the CRA without having to answer a security question?
To sign in to the CRA without having to answer a security question you must first sign in to a CRA sign-in service. Once you have signed in you will have the option of selecting "Skip this step on this computer."
5. What can I do to ensure my security after an online session?
The CRA takes the confidentiality of your information very seriously. We use sophisticated security techniques to protect our site and your privacy. Powerful encryption technology and security procedures protect your personal information at all times. That's why you have to use approved security protocols to view your personal information or manage your personal income tax and benefit account online. Don't forget to click "Sign out" once you are finished accessing our services. For more information, see Important security information.
6. What happens if I clear my cache?
Clearing your cache will remove any cookies that are stored on your computer's browser. This means that each time you sign in using that computer, you will have to answer one of the security questions you have chosen. If you do not want to answer one of the questions you already chose, do not clear your cache.
Note
If you are using a computer available in a public location (e.g., Internet café or library), you should clear the browser's cache or close and reopen the browser. Information stored in the browser's cache is not encrypted, so clearing the cache helps to ensure the security of your information.
7. What can I do to protect my personal information?
You can contribute to the security of your personal information by:
- Making sure you keep your personal information confidential. Do not share your SIN, personal tax information, CRA security code or your CRA user ID and password with anyone. All pieces of information should be kept confidential. The person to whom the SIN belongs, must be the one using the online service since the required information can be used to change personal information on file with the CRA.
- Clearing your browser's cache. Note: Clearing your cache will remove any cookies that are stored on your computer's browser. This means that each time you sign in using that computer, you will have to answer one of the security questions you already chose.
- Not sending confidential information to the CRA by email. Our email does not have secure transmission capabilities.
8. How do I block access to my personal information on the CRA sign-in services?
To ask to have online access to your information on the CRA sign-in services disabled, call the Individual tax enquiries. After access to your information is disabled, you may change your mind and want access again. If so, you can call the Individual tax enquiries and ask that your access to your information on the CRA sign-in services be enabled.
9. Why can I bookmark some pages and not others?
You cannot bookmark pages that are in a secure part of our Web server.
10. Why do I need a CRA security code?
The issuance of the CRA security code is an added security measure. If you have received a CRA security code and have not recently registered for the My Account for Individuals, My Business Account, Represent a Client, CRA BizApp, MyCRA or MyBenefits CRA services, contact our Individual tax enquiries immediately.
Report a problem or mistake on this page
- Date modified: