Security

1. What is a cookie?
2. I don't want to set my cookies to "on". Can I still use the CRA sign-in services?
3. What happens when I select the radio buttons "Ask me a security question each time I sign in" or "Skip this step on this computer"?
4. How do I sign in to the CRA without having to answer a security question?
5. What can I do to ensure my security after an online session?
6. What happens if I clear my cache?
7. What can I do to protect my personal information?
8. How do I block access to my personal information on the CRA sign-in services?
9. Why can I bookmark some pages and not others?
10. To complete the registration process, why do I need a CRA security code or to use Interac® document verification service?
11. What do I do if I received a CRA security code I did not request?
12. How can I gain full access to the CRA sign-in services?

1. What is a cookie?

A cookie is a small piece of information that is sent to your computer by a Web site and used by your browser. It contains settings to help you use our services. There are two types of cookies: session cookies and persistent cookies.

A session cookie is used only during the browser session. It expires when the user closes the browser and it is not stored on your hard drive.

A persistent cookie is placed on your computer and will remain on your hard drive for a specific period of time, unless you remove it. The CRA sign-in services use persistent cookies, which will not store any identifying data.

2. I don't want to set my cookies to "on". Can I still use the CRA sign-in services?

No. One of the ways we ensure that we send the correct information during your online session is by using cookies. Right now, we have no other session management method for users who prefer not to accept browser cookies. If you don't accept cookies, you won't be able to use the CRA sign-in services.

3. What happens when I select the radio buttons "Ask me a security question each time I sign in" or "Skip this step on this computer"?

If you select the radio button labeled "Ask me a security question each time I sign in", each time you sign in you will be asked to provide the answer to one of the questions you have chosen.

If you select the radio button labeled "Skip this step on this computer" a persistent cookie will be added to your browser and you will be remembered on this computer. Consequently, each time you sign in, you will not have to answer one of the questions you have chosen.

4. How do I sign in to the CRA without having to answer a security question?

To sign in to the CRA without having to answer a security question you must first sign in to a CRA sign-in service. Once you have signed in you will have the option of selecting "Skip this step on this computer."

5. What can I do to ensure my security after an online session?

The CRA takes the confidentiality of your information very seriously. We use sophisticated security techniques to protect our site and your privacy. Powerful encryption technology and security procedures protect your personal information at all times. That's why you have to use approved security protocols to view your personal information or manage your personal income tax and benefit account online. Don't forget to click "Sign out" once you are finished accessing our services. For more information, see Important security information.

6. What happens if I clear my cache?

Clearing your cache will remove any cookies that are stored on your computer's browser. This means that each time you sign in using that computer, you will have to answer one of the security questions you have chosen. If you do not want to answer one of the questions you already chose, do not clear your cache.

7. What can I do to protect my personal information?

You can contribute to the security of your personal information by:

• Making sure you keep your personal information confidential. Do not share your SIN, personal tax information, CRA security code or your CRA user ID and password with anyone. All pieces of information should be kept confidential. The person to whom the SIN belongs, must be the one using the online service since the required information can be used to change personal information on file with the CRA.
• Clearing your browser's cache. Note: Clearing your cache will remove any cookies that are stored on your computer's browser. This means that each time you sign in using that computer, you will have to answer one of the security questions you already chose.
• Not sending confidential information to the CRA by email. Our email does not have secure transmission capabilities.

8. How do I block access to my personal information on the CRA sign-in services?

To ask to have online access to your information on the CRA sign-in services disabled, call the Individual tax enquiries. After access to your information is disabled, you may change your mind and want access again. If so, you can call the Individual tax enquiries and ask that your access to your information on the CRA sign-in services be enabled.

9. Why can I bookmark some pages and not others?

You cannot bookmark pages that are in a secure part of our Web server.

10. To complete the registration process, why do I need a CRA security code or to use Interac® document verification service?

As an extra security measure, we verify the identity of individuals who register for the CRA sign-in services. This is done to ensure the safety of your tax information.

11. What do I do if I received a CRA security code I did not request?

If you have received a CRA security code and have not recently registered for the CRA sign-in services, Contact us.

12. How can I gain full access to the CRA sign-in services?

To gain full access, you can verify your identity by either using Interac document verification service which gives you immediate access to the CRA sign-in services. Alternatively, you can choose to wait for a CRA security code to be mailed, which could take up to 10 business days.