🔐 Access online services safely – Canada Revenue Agency

The Canada Revenue Agency (CRA) provides secure online services that let you manage tax and benefit information, access your accounts and complete transactions. To keep your personal and financial data safe, both you and the CRA follow security best practices when using CRA digital services.

🛡 What the CRA does to protect your information

Because the Internet is an open and public network, extra protections are required when sensitive data is transmitted or stored. The CRA’s security measures include:

• Using specially configured web servers with corporate firewalls to block unauthorized access.
• Encrypting personal and financial information with the Transport Layer Security (TLS) protocol so data cannot be read if intercepted.
• Securely storing personal information on systems that are not directly accessible from the internet.
• Preventing the exchange of personal data through unsecured email — CRA offers secure communication channels instead.

These safeguards help ensure that confidential information you submit through CRA online services cannot be altered or accessed by unauthorized third parties.

👨‍💻 What you can do to stay safe

You play an important role in protecting your online security. Follow these trusted practices:

• Keep your browser and system up to date. Modern browsers that support the latest TLS encryption help prevent access issues or data risks.
• Use strong, unique passwords and change them regularly. Avoid easily guessed names, dictionary words, or dates.
• Install and update antivirus software and personal firewalls to protect your computer from malware and network intrusions.
• Enable cookies in your browser because they help establish secure sessions for online services.
• Clear your browser cache and restart after secure sessions to prevent residual data from remaining on your device.
• Keep JavaScript and any required applets enabled as some CRA services rely on them for login and security checks.

🧠 Identifying yourself securely

To access secure CRA services, you must authenticate your identity. This often involves:

• Providing confidential information such as personal identifiers or a digital signature.
• Keeping passwords or digital signature components private so others cannot impersonate you.

For services like CRA Login, identities are verified online, and you may have options like Sign-In Partners or document verification services to streamline access.

📅 Browser security and compatibility

Before you start a secure session with CRA services, your browser is tested for compliance. If it doesn’t meet current security standards (such as supporting TLS 1.2 or higher), you may see connection errors.

Updating your browser and operating system to recent versions usually resolves access issues. Instructions for major browsers (Chrome, Firefox, Safari) and operating systems (Windows, Mac OS) are available on Government of Canada resources.

📌 Summary – Best Practices for Safe CRA Access

• The CRA uses strong encryption and secure systems to protect your online transactions.
• You should use updated browsers, strong passwords, and security software to keep your information secure.
• Online authentication often requires identity verification; safeguarding your login credentials prevents unauthorized access.

Whether you use My Account, My Business Account or other CRA digital services, following these security practices ensures a safer online experience.