The Buzz

CRA: Representatives: Help keep your accounts secure

Representatives: Help keep your accounts secure

The Canada Revenue Agency (CRA) continues to add enhanced security measures to ensure Canadians feel safe and confident when using our digital services. To help further strengthen the security of your online accounts, we are increasing the security requirements for Represent a Client in Fall 2022. To continue having seamless access in the future, here is information on how to prepare for this upcoming change.

About the enhanced authentication requirements for Represent a Client

Currently, the registration process for Represent a Client includes creating a CRA user ID and password, or using a Sign-In Partner. This process also includes authenticating by entering an access code, and a postal or ZIP code. In the coming months, the security requirements will change to include the following two-step process.

Step 1 - Provide personal information

• Social insurance number
• Date of birth
• Current postal code or ZIP code
• An amount from an income tax and benefit return. The line amount requested will vary. It could be from the current tax year or the previous one.

Step 2 - Enter a CRA security code that is sent to you by mail.

*Note* - Once this change has been implemented, if you have not completed this two-step process, you will be prompted to do so the first time you sign in to Represent a Client.

How to prepare for this change

We recommend that you prepare in advance of this requirement. You have two options:

Option 1: Using an existing sign-in method that already has enhanced authentication

If you have an existing sign-in method that gives you full access to My Account or My Business Account, you can use it for Represent a Client. This option does not require any further action as the security level is already enhanced.

Option 2: Enhance the authentication level for a Represent a Client credential

If you use a different credential to access Represent a Client, you may need to upgrade its security. You can do this by signing in to My Account or My Business Account with the credential normally used to access Represent a Client. If you are not asked to complete the two-step process outlined above, then the credential already meets the security requirements and no further action is required.  If you are prompted to complete the new two-step process, then you can do so, and the security of the credential will also be enhanced for Represent a Client.