Security changes: Multi-factor authentication(MFA)

Multi-factor authentication, or MFA, is one way to combat fraud by asking customers for information that only they should know and have. Think of it as needing a personal identification number to use an ATM card. If the ATM card falls into the wrong hands, it can't be used without knowing the PIN.

We're in the process of adding MFA to all relevant products.

We have increased the number of steps to access your account because of the increase of identity theft and fraudulent tax filings. You entrust us to protect sensitive data, and we take that seriously.

As an industry leader, Intuit is continuing to work in concert with the CRA, the provincial government and the industry at large to further strengthen the Canadian tax system and decrease tax fraud on several fronts. The addition of features like stronger passwords, notifications and MFA to our professional tax products is just one of the actions we're taking to protect customer information and combat tax fraud.

Tax fraud is constantly evolving, and we will evolve with it. We always recommend that customers take precautions to protect their identity.  It is important that users not only create strong passwords, but more importantly, create unique passwords for each of their accounts.

It may take a few minutes for the code to arrive. Be sure to check your bulk, junk,or spam mail folder to see if the code is there. If the code doesn't arrive, click the Didn't receive a code link in the Check your email window to generate another code.

Note: Once you generate a new code, any prior code will expire. It's important that you use the most recent confirmation code in the Check your email window.

If you have typed the exact code that was sent and it doesn't work, it could be because you've generated multiple codes and are not using the most recent one.

Click Didn't receive a code, then wait until the new code arrives. This may take several minutes. Use the most recent code sent to you.

Note: Some email platforms will append emails from the same sender, so your latest code may display as a response or reply to one of the earlier codes.

When you log in from a new computer or change your sign-in information, such as your user ID, email address, or password, you will be required to take these additional steps to validate your identity.

The confirmation code will be sent to the email address or phone number currently associated with your account. If you do not have access to the email address or phone number associated with your account, you will need to verify your identity another way. You can select Confirm my account a different way.