CRA Benefits

CRA adds optional security step for online tax filing

The CRA will offer an optional account sign-in step for people, representatives and preparers filing or adjusting 2026 returns through NETFILE or EFILE.

cra tax filing: CRA adds optional security step for online tax filing

The Canada Revenue Agency is adding an optional account authentication step to CRA tax filing for the 2026 tax year.

The change will begin on February 22, 2027, when individuals, authorized representatives and tax preparers can sign in to a CRA account while submitting or adjusting income tax and benefit returns online.

The agency says the added check is intended to reduce unauthorized filings and fraudulent returns while giving taxpayers another way to confirm who is sending a return.

Cra Tax Filing: What is changing for online tax filing

People filing their own returns through NETFILE will be able to choose the new authentication option when using certified tax software.

After selecting the option, the filer will sign in to a CRA account before continuing with the NETFILE submission.

The CRA says the sign-in confirms the filer’s identity and helps establish that the person is filing for themselves or is authorized to file for another taxpayer.

The option will also apply when a taxpayer or representative adjusts a return, according to the agency’s September 22, 2026 announcement.

Authentication will remain optional for 2026 returns, so taxpayers will still be able to use the existing online filing process without completing the new sign-in step.

How the CRA authentication step works

Authorized representatives will be able to authenticate themselves before filing a client’s return through NETFILE.

Tax preparers and other EFILE users will also be able to sign in to a CRA account before transmitting returns through EFILE.

For EFILE users, the sign-in confirms the identity of the person initiating the filing transaction and does not require that person to be an authorized representative of the taxpayer.

Volunteers working through the Community Volunteer Income Tax Program will follow the same authentication process as other EFILE users.

Once an EFILE session remains active, the user can continue filing returns without authenticating again.

The CRA says another authentication will be required after the session ends.

First-time filers will still be able to file

First-time filers with no previous filing history will not have access to a CRA account for this purpose and will not be able to select the authentication option themselves.

They will still be able to submit a return through NETFILE without the new authentication step.

An authorized representative can also file on behalf of a first-time filer and choose to authenticate themselves.

This means the new process is not intended to block people who are filing a Canadian income tax return for the first time.

What taxpayers should do before February 2027

Taxpayers who want to use the optional security feature should make sure they can access their CRA account before the next filing season.

  • Register for a CRA account if one has not already been created.
  • Resolve any locked, restricted or inaccessible account issues before filing.
  • Review personal information stored in the account.
  • Add a backup multi-factor authentication method where available.
  • Confirm that any representative is authorized before the return is filed.

The CRA specifically advises users with locked or restricted accounts to resolve those issues before attempting to file.

The agency also encourages taxpayers to update account information and add a backup multi-factor authentication method.

Why the CRA is introducing the option

The CRA says the authentication step adds another layer of protection around personal and financial information used in online returns.

It is also intended to make it harder for someone to submit a return without the taxpayer’s knowledge or without proper authority.

The optional design gives taxpayers and preparers time to become familiar with the process before any broader change is considered.

The announcement does not state that authentication will become mandatory for future tax years.

NETFILE and EFILE remain separate filing channels

NETFILE is the CRA service used by individuals and authorized representatives to send returns through certified tax software.

EFILE is used by approved tax preparation providers and volunteers to transmit clients’ returns from certified professional software.

CRA statistics for the 2026 tax-filing season show the scale of these electronic channels, with EFILE and NETFILE accounting for most returns received by the agency during the period covered.

The new authentication option will operate within both channels but will not replace the existing filing services.

Taxpayers should continue using CRA-certified software and follow the instructions displayed by their software provider during the 2027 filing season.

What happens next

The optional authentication process is scheduled to open on February 22, 2027, for 2026 income tax and benefit returns.

Until then, taxpayers can prepare by ensuring that their CRA account works and that their contact and security information is current.

People who do not have a CRA account, including eligible first-time filers, will continue to have other ways to file their returns online.

The CRA’s existing tax-filing pages will provide operational instructions as the 2027 filing season approaches.

Frequently Asked Questions

When will the CRA’s optional authentication step begin?

It is scheduled to begin on February 22, 2027, for people filing or adjusting 2026 income tax and benefit returns online.

Will CRA-account authentication be mandatory?

No. The CRA says authentication will be optional for 2026 returns filed through NETFILE or EFILE.

Can first-time tax filers still file online?

Yes. First-time filers without a CRA account can still submit their returns through NETFILE without using the optional authentication step.

Who can use the new CRA authentication option?

Individuals, authorized representatives, tax preparers and participating CVITP volunteers will be able to use the option when filing through the applicable online service.

What should taxpayers do before the 2027 filing season?

They should register for a CRA account if needed, resolve access problems, update personal information and review their account’s security settings.

Fact-Checked: Key dates, affected users, filing channels and first-time-filer rules were checked against the Canada Revenue Agency’s official September 22, 2026 announcement and related Canada.ca filing information.

Disclaimer: The authentication option is scheduled for the 2027 filing season, and taxpayers should follow the CRA’s official instructions when the service becomes available.

Discover more from CTC News

Subscribe now to keep reading and get access to the full archive.

Continue reading

10 New Canada Laws and Rules Taking Effect In August 2026

4 New CRA Benefit Payments Coming In August 2026

New Express Entry Draw On August 5 Sent 3,000 PR Invitations

New Ontario-OINP Permanent Residence Pathway Intake Is Now Open

New CRA Breach Settlement Claims Now Open For Up To $5,000