Skip to content

CRA

CRA Multi-Factor Authentication: Passcodes, Backup Methods and a Lost Phone

The CRA sends a one-time passcode each time you sign in, using a phone, a passcode grid or an authenticator app. Add a backup method under Security settings so a lost phone doesn't lock you out. Too many wrong passcodes lock you out for 30 minutes.

By Fact-checked by Samuel Athur

Last verified How we check our facts

Passcode not arriving?

  • Ask for it to be sent again, or to another phone number you enrolled.
  • Internet phone (VoIP)? Choose "Call me" instead of "Text me".
  • Use another method you enrolled. If nothing works, contact the CRA.

Lost your phone or passcode grid?

Sign in with another enrolled method, then update Security settings. Passcode grids expire every 18 months. If you have no other method, contact the CRA.

Good to know

The CRA only texts you for multi-factor authentication, and only if you chose the phone option. It doesn't use text messages for anything else.

Step by step

  1. Sign in to your CRA account.
  2. On the Welcome page, select Security settings.
  3. Choose Multi-factor authentication, then Continue.
  4. Select the method to add: Telephone, Passcode grid or Authenticator app.

Phone numbers

CRA individual enquiries

1-800-959-8281

Monday to Friday, 8 am to 8 pm Eastern time

From outside Canada and the U.S.: 1-613-940-8495 (collect calls through an operator)

Related

CRA Phone Number and Contact Numbers (2026): Every Line and Hours The main CRA phone number is 1-800-959-8281 for personal tax and CRA account questions. For benefits like the Canada child benefit call 1-800-387-1193, and for businesses 1-800-959-5525. All three are open Monday to Friday, 8 am to 8 pm Eastern time, and closed on weekends and public holidays. CRA Account Locked or Revoked: How to Get Back In Too many wrong passcodes lock you out for 30 minutes; three lockouts make it permanent and you must call the CRA. For forgotten credentials or a revoked user ID, register again for a new credential using your existing passcode method. If the CRA locked your account, call 1-800-959-8281. Is It Really the CRA? How to Spot a CRA Scam Call, Email or Text The CRA never demands payment by e-transfer, gift cards, prepaid cards or cryptocurrency, never threatens arrest or deportation, and never sends refunds by e-transfer or text. It only texts for sign-in passcodes. If in doubt, hang up and call the CRA on an official number.

Sources

North Help Desk is an independent guide, not a government website. Rules, amounts and phone hours can change; always confirm on the official page before you act. Spotted something out of date? Tell us.