CRA My Account Locked? Sign-In Error, Security Code & MFA Fix Guide (2026)

CRA My Account Locked? (Sign-In Error / Security Code / MFA) — How to Regain Access Fast (2026)

If you’re locked out of your CRA My Account due to sign-in errors, security code issues, or MFA problems, this guide walks you through the fastest and safest ways to regain access in 2026.

Why Your CRA My Account Gets Locked

• Too many incorrect attempts entering your CRA user ID or password
• Repeatedly entering the one-time passcode (MFA) incorrectly
• Wrong answers to CRA security questions
• Missing or expired CRA security code required for identity verification

These lockouts are automatic security measures. In many cases, access can be restored without calling CRA.

First: Try These Fast Fixes (Before Calling CRA)

1. Wait 30 Minutes

If the lockout was triggered by incorrect MFA or password attempts, CRA often unlocks access automatically after about 30 minutes.

2. Double-Check Credentials Carefully

Small errors (capital letters, spaces, saved autofill mistakes) can repeatedly trigger lockouts.

3. Try a CRA Login Partner (Strongly Recommended)

Before re-registering, try signing in using a CRA Login Partner (your Canadian online banking login) or a provincial partner such as BC Services Card or Alberta.ca Account.

This is CRA’s preferred recovery method and often restores access immediately.

How to Regain Access If Login Still Fails

Step 1: Use a Login Partner First

If you previously linked a bank login, attempt access through a Sign-In Partner. This avoids resetting credentials and reduces verification delays.

Step 2: Register Again Only If Partner Login Fails

If all sign-in methods fail, you can register again for CRA sign-in services:

1. Start a new CRA registration
2. Enter your SIN and personal information
3. Complete identity verification (security code or document review)
4. Set up new MFA options (phone, authenticator app, grid)

This creates new credentials and restores access when the original login is unusable.

CRA Security Code (By Mail)

If required, CRA will mail a new security code to your address on file. Delivery typically takes about 10 business days.

When You Should Contact CRA Directly

If online recovery fails, contact CRA by phone:

• 📞 1-800-959-8281 (Individual enquiries)
• Have your SIN and details from a recent tax return ready

Note: Business accounts use a different CRA phone line. Phone numbers and options may change, so always confirm on the official CRA contact page.

Fast Recovery Checklist

Action	When to Use
Wait 30 minutes	Temporary lockout from failed attempts
Login Partner (bank)	Fastest and preferred recovery method
Register again	No access to any previous credentials
Request security code	Identity verification required
Call CRA	All online methods fail

FAQ

Why does CRA lock my account even when my password seems correct?

Multiple failed attempts — including MFA errors — accumulate and trigger automatic security lockouts.

Can I set up more than one MFA method?

Yes. Using multiple MFA options is recommended to prevent future lockouts.

What if I changed my phone number?

If you can’t receive passcodes, CRA may require identity verification or phone support to update your MFA settings.

Sources

• Canada Revenue Agency — CRA sign-in help
• CRA Multi-Factor Authentication guidance
• CRA Identity verification & security codes