CRA account help - Keep your CRA account secure
The CRA has many supports in place to help you keep your CRA sign-in services secure.
On this page
- Manage your CRA security settings
- Do not share your personal information
- Ensure your security after an online session
- Watch out for suspicious activity in your CRA account
- Scam prevention and the CRA
Manage your CRA security settings
You can manage your security settings from the Welcome page of your CRA account. The options available depend on which sign-in option you chose:
CRA user ID and password
Once you are signed in to your CRA account, you can manage any of the following CRA security options:
- CRA sign-in information
- Change CRA user ID
- Change CRA password
- Change CRA security questions and answers
- Revoke CRA user ID
- View recent CRA sign-in history
- View the Terms and conditions of use
- Multi-factor authentication
- Update your phone number
- Add or remove the telephone, passcode grid and authenticator app options.
- Personal Identification Number (PIN)
- Create, edit or delete a PIN
For more information: About CRA user ID and password
Sign-In Partner
To revoke or change your banking user ID or password or to manage your security questions, contact your financial institution.
Once you are signed in to your CRA account, you can manage the following security options:
- Multi-factor authentication
- Update your phone number
- Add or remove the telephone, passcode grid and authenticator app options.
- Personal Identification Number (PIN)
- Create, edit or delete a PIN
For more information: About Sign-In Partners
Provincial partner
For any updates to your credential, contact your provincial partner.
Once you are signed in to your CRA account, you can manage the following security options through your Security settings:
- Personal Identification Number (PIN): Create, edit or delete a PIN
- Alberta only: Update your multi-factor authentication (MFA) options
For more information: About provincial partners
Do not share your personal information
You can contribute to the security of your personal information by keeping your personal information confidential.
Do not share your SIN, personal tax information, CRA security code or your CRA user ID and password with anyone. All pieces of information should be kept confidential. The person to whom the SIN belongs must be the one using the online service, since the required information can be used to change personal information on file with the CRA.
Do not send confidential information to the CRA by email. Our email does not have secure transmission capabilities.
Ensure your security after an online session
Don't forget to click Sign out once you are finished accessing our services.
If you are using a computer available in a public location (for example, a library) you should clear the browser's cache or close and reopen the browser. Information stored in the browser's cache is not encrypted, so clearing the cache helps to ensure the security of your information.
Clearing your cache will remove any cookies that are stored on your computer's browser.
Learn more: Access online services safely
Watch out for suspicious activity in your CRA account
You should monitor your CRA account for any suspicious activity.
Learn more about what to look out for: Protect your CRA account
Scam prevention and the CRA
The CRA will also never ask you to provide your personal information by email. If you receive such a request, do not respond and delete it from your Inbox.
Know what to expect when the CRA contacts you, what we may or will not ask for, as well as examples of recent CRA-related scams.
Scams and fraud - CRA
Page details
- Date modified: