Canada Tax Update | October 2026
CRA Tax Filing 2027: New Online Authentication Step Explained
The Canada Revenue Agency (CRA) has announced a new optional authentication step for online income tax filing beginning February 22, 2027. The measure is designed to strengthen security when individuals, authorized representatives and professional tax preparers submit or adjust tax returns electronically.
Under the new process, users can sign in to their CRA account to verify their identity before continuing with an electronic filing through NETFILE or EFILE. The CRA says this additional verification can help prevent unauthorized filings and fraudulent tax returns.
Importantly, the authentication step is optional. Eligible taxpayers can still file through NETFILE without completing it, including first-time filers who do not yet have access to a CRA account. Taxpayers who already have a CRA account should check that they can sign in before the 2027 tax season begins.
Official source: Canada Revenue Agency authentication announcement, September 22, 2026.
CRA Tax Filing 2027: Key Details
| New authentication begins | February 22, 2027 |
|---|---|
| Tax return covered | 2026 income tax and benefit return |
| Responsible agency | Canada Revenue Agency |
| Authentication method | Sign in to your CRA account |
| Is the new step mandatory? | No, it is optional |
| Individual filing service | NETFILE through compatible tax software |
| Professional filing service | EFILE for tax preparers and participating volunteers |
The February 22, 2027, date is the announced start date for the new authentication option. It is not the filing deadline for the 2026 tax return.
What Is the New CRA Authentication Step?
Authentication is a process used to confirm the identity of a person accessing a digital service. For the upcoming tax season, the CRA is introducing an additional opportunity for users to verify themselves by signing in to their CRA account before electronically submitting a tax return.
The new option applies to people filing their own returns, authorized representatives filing for clients and tax preparers submitting returns through EFILE. The exact role of the person signing in differs according to the filing method.
For individuals using NETFILE, signing in helps confirm that they are filing or adjusting their own return. If an authorized representative is filing for another individual, the representative must already have the appropriate authorization from the taxpayer.
For EFILE users, the optional step verifies the identity of the person initiating the electronic filing transaction. The CRA says an EFILE user does not have to be an authorized representative of the taxpayer simply to complete this identity-verification step. Once authentication succeeds, the user can continue filing while the authenticated session remains active.
Why Is the CRA Introducing This Change?
Tax returns contain sensitive information, including income, deductions, credits, personal details and banking information. Protecting this information is important because fraudulent or unauthorized tax filings can affect taxpayers and government benefit administration.
The CRA identifies two main purposes for the new authentication option: improving account security and helping prevent fraud. Requiring users who choose the additional step to sign in to their CRA account gives the agency another way to verify who is initiating a filing transaction.
Stronger identity verification
Signing in to a CRA account adds an identity check before an electronic return is submitted. This can help distinguish legitimate filing activity from transactions initiated without the taxpayer’s knowledge.
Protection against unauthorized filing
The additional step is intended to strengthen safeguards against fraudulent returns and unauthorized adjustments. It is one part of the CRA’s wider approach to protecting digital tax services.
More secure digital services
The measure supports the CRA’s ongoing work to improve the security of online interactions involving income tax and benefit information.
The CRA has not described this optional step as a replacement for existing account security measures. Taxpayers should continue protecting their credentials and using the available multi-factor authentication options when signing in.
How the New Authentication Process Works for Individuals
Individuals will continue to use compatible tax software and NETFILE to electronically submit their 2026 income tax and benefit return. The new authentication option adds a CRA account sign-in step for taxpayers who choose to use it.
- Prepare your tax return: Gather your tax slips, receipts, income details and other information required for your return.
- Open compatible tax software: Complete your return using software that supports the CRA NETFILE service.
- Choose the authentication option: When using the new option, sign in to your CRA account to verify your identity.
- Complete the sign-in process: Follow the CRA account security prompts required for access.
- Continue with NETFILE: After authentication succeeds, proceed with submitting your return through the tax software.
- Keep your confirmation: Save the submission confirmation and any records provided by your tax software.
The CRA says taxpayers who choose not to use the optional authentication step can still file using NETFILE. First-time filers who have no previous filing history and cannot access a CRA account can also file their return through NETFILE without using this option.
What First-Time Tax Filers Need to Know
First-time filers may not have access to a CRA account because they have no previous filing history. The CRA has explicitly stated that these individuals will not be able to select the new account-based authentication option themselves if they do not have an account.
This does not prevent them from submitting a tax return. They can continue using NETFILE and compatible tax software under the applicable filing rules. The absence of a CRA account should not be confused with a ban on electronic filing.
The CRA also says an authorized representative can file a return for a first-time filer and choose to authenticate themselves. Anyone using a representative should ensure that the person has the required authorization to act on their behalf.
How the New Step Works for Tax Preparers and EFILE Users
EFILE is the CRA’s electronic filing service used by professional tax preparers and participating volunteers to submit returns for clients. Beginning with the 2027 filing season, EFILE users can choose to sign in to their own CRA account before submitting a 2026 tax return.
This authentication step verifies the identity of the individual initiating the filing transaction. According to the CRA, it does not automatically mean that the EFILE user must be an authorized representative of the taxpayer whose return is being filed.
Tax preparers should confirm that their own CRA account is accessible before the filing season begins. If an account is locked, restricted or otherwise inaccessible, the CRA recommends resolving the problem through its available self-service options before attempting to use the new authentication process.
Volunteers participating in the Community Volunteer Income Tax Program (CVITP) will follow the same authentication process as other EFILE users. They should continue following the program’s eligibility, privacy and filing procedures when helping taxpayers.
Official guidance: CRA EFILE news and program updates.
Is CRA Authentication Mandatory in 2027?
No. The newly announced authentication step is optional for the 2026 tax return filing process beginning February 22, 2027. Taxpayers who can access their CRA account may choose to complete the additional verification, while individuals who do not use it can still file through NETFILE.
The optional nature of this new filing step should not be confused with the CRA’s existing sign-in security requirements. Multi-factor authentication (MFA) remains part of CRA account security. Users signing in to their accounts must follow the security procedures presented by the CRA.
The CRA encourages taxpayers and tax preparers to prepare in advance so that account access problems do not create avoidable delays during the busy filing period.
Prepare Your CRA Account Before February 2027
Checking your CRA account before tax season can reduce the chance of being delayed by forgotten credentials, an inaccessible account or missing security settings. Taxpayers who want to use the optional authentication step should ensure that they can sign in successfully.
1. Confirm your sign-in credentials
Visit the official CRA website and confirm that your sign-in method works. Depending on your account setup, you may use a CRA user ID and password or an available sign-in partner. Never enter your credentials on a website reached through a suspicious email or text message.
2. Check multi-factor authentication
CRA account users need to complete the account’s multi-factor authentication process. The CRA provides options that can include a phone-based code, a third-party authenticator app or a passcode grid. Available options and prompts depend on the account process.
3. Add a backup authentication option
The CRA has introduced backup MFA options to help users regain access if their primary method is unavailable. A backup option can help prevent account-access problems during tax season. Follow the current instructions in your CRA account to configure the options available to you.
4. Resolve account restrictions early
If your account is locked or restricted, use the CRA’s official account recovery and self-service guidance. Resolving problems before filing opens can be easier than waiting until tax season when many taxpayers need assistance.
5. Check representative authorization
If an accountant or tax preparer will file your return, confirm that the representative has the appropriate authorization to access your tax information and act on your behalf. Authentication of the preparer and authorization to represent a taxpayer are separate matters.
Official account guidance: Help with CRA sign-in services.
What If You Cannot Access Your CRA Account?
If you cannot sign in, first use the official CRA sign-in help pages to identify the problem. Forgotten credentials, security-question issues, a lost authentication device and account restrictions may require different recovery steps.
The CRA has advised users with locked, restricted or inaccessible accounts to resolve those issues before filing. Depending on the situation, self-service recovery may allow you to restore access without contacting the CRA by telephone.
If you are a first-time filer without a CRA account, remember that you can still use NETFILE without the optional authentication step. If you use a tax preparer, check that the preparer has the required authorization and follows the applicable EFILE procedures.
Always access account recovery through the official Canada.ca website. Do not share passwords, one-time authentication codes or sensitive tax information with someone who contacts you unexpectedly claiming to represent the CRA.
Does the Authentication Change Affect Tax Deadlines?
The new authentication announcement concerns online filing security. It does not itself establish a new filing deadline, change the amount of tax a person owes or announce a new tax credit.
The February 22, 2027, date is the announced start of the new authentication option for filing 2026 tax returns. Taxpayers should check the CRA’s official tax-filing pages for the applicable filing and payment deadlines, including any rules that apply to self-employed individuals and their spouses or common-law partners.
Do not confuse the start of electronic filing with the filing deadline. A taxpayer’s obligation to file and pay any balance due depends on the applicable tax rules and personal circumstances.
CRA Tax Filing 2027: Authentication vs. Existing Account Security
| Feature | Purpose | What users should know |
|---|---|---|
| New filing authentication | Verify the person initiating an electronic filing transaction | Optional from February 22, 2027, for the 2026 return filing process |
| Multi-factor authentication | Protect access to a CRA account | Part of the existing account sign-in security process |
| Representative authorization | Permit a representative to access tax information and act for a taxpayer | Must be arranged where required; identity authentication alone does not grant authorization |
| NETFILE or EFILE submission | Transmit a tax return electronically to the CRA | The filing service remains the electronic submission method |
Frequently Asked Questions
1. What is the new CRA authentication step for 2027?
It is an optional security step that allows individuals, authorized representatives and tax preparers to sign in to a CRA account to verify their identity before continuing with electronic tax filing.
2. When does the new authentication step start?
The CRA announced February 22, 2027, as the start date for the new option when filing 2026 income tax and benefit returns.
3. Is the new authentication step compulsory?
No. The new filing authentication step is optional. Taxpayers can continue using NETFILE without completing it, subject to the normal filing requirements.
4. Can first-time taxpayers file without a CRA account?
Yes. The CRA says first-time filers without access to a CRA account can still file their returns through NETFILE. They cannot personally use the new account-based authentication option if they do not have an account.
5. Does the new step apply to tax preparers?
Yes. EFILE users can choose to authenticate by signing in to their own CRA account before submitting returns. The authentication verifies the identity of the person initiating the transaction; it does not itself establish authorization to represent a taxpayer.
6. Will the new authentication process change tax filing deadlines?
The authentication announcement does not establish new tax deadlines. Check the CRA’s official filing guidance for the dates applicable to your tax situation.
7. What should I do if my CRA account is locked?
Use the CRA’s official sign-in help and account recovery options to restore access. The agency recommends resolving account-access problems before filing season begins.
8. Is the new authentication step the same as multi-factor authentication?
No. The new option verifies the person initiating an electronic filing transaction through a CRA account sign-in. Multi-factor authentication is part of the security process used to access the CRA account itself.
9. Does using authentication guarantee that a tax refund will arrive faster?
The CRA announced the step as a security measure, not as a guarantee of faster refund processing. Refund timing depends on the return and the CRA’s processing requirements.
Official CRA Resources
- CRA announcement: New authentication option for online tax filing — the primary source for the February 2027 start date and process details.
- CRA sign-in help — account access, sign-in and recovery guidance.
- CRA multi-factor authentication guidance — information about account security options.
- CRA EFILE news and program updates — guidance for professional tax preparers and electronic filers.
- How to file a personal income tax return — official information about tax filing methods and available services.
Conclusion
The CRA’s new online authentication option is scheduled to begin February 22, 2027, for the filing of 2026 income tax and benefit returns. By allowing users to sign in to their CRA account before proceeding through NETFILE or EFILE, the agency aims to strengthen identity verification and reduce unauthorized filing activity. The step is optional, and first-time filers without CRA account access can still use NETFILE. Taxpayers and tax preparers should check their account access, review security settings and confirm representative authorization where necessary before the next tax season.
