# CRA account locked: how to unlock it and get back in

Source: https://canadataxdesk.com/cra-account/cra-account-locked
Publisher: Canada Tax Desk (canadataxdesk.com), independent editorial site
Topic: CRA Account
Last updated: 2026-09-18

> A CRA account locked after wrong passcodes usually reopens by itself after 30 minutes. If it locks 3 times, or you have forgotten your user ID, password or security answers, you can register again online to create new sign-in details and keep your existing records. Only a lock the CRA placed for security reasons needs a phone call.

## Key facts

- Temporary passcode lock: 30 minutes
- Permanent lock: After 3 temporary lockouts
- Self-service recovery: Register again for new credentials (added February 2026)
- Not fixable online: Locks the CRA placed for security reasons
- Filing while locked: NETFILE through certified software still works

## Why a CRA account gets locked

The CRA locks an account when someone enters wrong information too many times. That protects you if a stranger is guessing, but it also catches people who mistype. The CRA lists five places where repeated misses trigger a lock.

| Wrong entry | Type of lock | How it clears |
| --- | --- | --- |
| CRA user ID or password | Credential lock | Register again for new sign-in details |
| One-time MFA passcode | 30-minute lock | Wait, or use another MFA option |
| Security questions | Credential lock | Register again for new sign-in details |
| CRA security code | Registration lock | Register again later, or contact the CRA |
| Document verification service | Registration lock | Choose the mailed code instead, or contact the CRA |

What triggers a CRA account lock and what it means

A separate category is a lock or revocation the CRA applies itself, for example when it sees signs that an account was compromised. That lock is deliberate, and nothing you do online will lift it.

## How to reopen a locked CRA account yourself

Since February 2026 the CRA has offered self-service account recovery. If you are locked out because you forgot your sign-in information or security answers, you can get back in online without phoning.

1. If the lock came from wrong passcodes, wait the full 30 minutes. Do not keep retrying during the lock.
2. After the wait, sign in and choose a different MFA option you already enrolled, such as your passcode grid or authenticator app.
3. If you forgot your user ID, password or security answers, go to the canada.ca sign-in page and start registration again.
4. Re-verify your identity with the document verification service or a CRA security code.
5. Confirm with an MFA option you set up earlier, then create new credentials. Your tax records, mail and banking details stay in place.

Step 5 is where a backup MFA option pays off. Recovery asks for an existing passcode method, so people who only had one phone number on file and lost it are the ones most often forced to call. Our page on [CRA multi-factor authentication](https://canadataxdesk.com/cra-account/cra-backup-mfa) explains how to add a second one.

## When you need to call the CRA

Self-service does not cover every case. Call the CRA using the individual enquiries number on its [official contact page](https://www.canada.ca/en/revenue-agency/corporate/contact-information.html) if any of these apply.

- You have been locked out for wrong passcodes 3 times, which makes the lock permanent.
- The CRA locked or revoked your credentials for security reasons.
- You tried registering again and still cannot get in.
- You no longer have access to any MFA option you enrolled.

Have your SIN, date of birth, address and a recent notice of assessment ready. The agent will ask identifying questions before making changes. A genuine CRA agent will not ask for your banking password or a passcode you received by text.

> **Revoked credentials:** If the CRA revoked your user ID after a suspected breach, you can use a different sign-in option or go through registration again. Treat any unexpected message saying your account is locked as a possible scam, and check by signing in through canada.ca yourself.

## Can I file my taxes if my CRA account is locked?

Yes. A locked CRA account does not stop you from filing. NETFILE runs through certified tax software and does not need a CRA login, so you can still transmit your return while you sort out access. Our [NETFILE guide](https://canadataxdesk.com/netfile) covers the process.

What you lose is convenience. The [Auto-fill my return](https://canadataxdesk.com/filing/auto-fill-my-return) feature needs a working CRA login, so you will type slip amounts by hand. You also cannot see your notice of assessment until you are back in, because digital notices are only shown in My Account since February 2026.

The NETFILE access code on your last notice is optional, so leave it blank if you cannot retrieve it. For a 2026 return in the 2027 season, the NETFILE opening date is not yet announced; the CRA usually publishes it in the fall.

## Preventing future CRA account locks

A few minutes of setup now avoids the phone queue later.

If your trouble is signing in rather than a lock, the [CRA login help](https://canadataxdesk.com/cra-account/cra-login-help) page covers routes and error messages. For an overview of the whole account, start with the [CRA My Account guide](https://canadataxdesk.com/cra-account).

## Common questions

### How long is a CRA account locked for?

A lock caused by wrong one-time passcodes lasts 30 minutes. After 3 such locks, the account stays locked until the CRA releases it. Credential locks from wrong passwords or security answers last until you register again or contact the CRA.

### Can I get back into a locked CRA account online?

In most cases, yes. Go through registration again, re-verify your identity with photo ID or a security code, confirm with an existing MFA option and create new sign-in details. This does not work if the CRA locked the account for security reasons.

### Will registering again delete my CRA account information?

No. Registering again only replaces your sign-in credentials. Your returns, notices, mail and banking details stay attached to your SIN.

### Why is my CRA account locked when I did not try to sign in?

Someone else may have tried to guess your credentials. Once you are back in, review the sign-in history under Security settings and report anything you do not recognize to the CRA as suspicious activity.

### Can I use my bank to get around a locked CRA user ID?

If your bank is a Sign-In Partner, you can register that route as another way in. It will not bypass a lock the CRA placed on the account itself.

## Sources

- [Locked account: CRA account help](https://www.canada.ca/en/revenue-agency/services/e-services/cra-login-services/help-cra-sign-in-services/locked-account.html)
- [My Account for individuals: CRA sign-in](https://www.canada.ca/en/revenue-agency/services/e-services/digital-services-individuals/account-individuals.html)
- [What you need for the 2026 tax-filing season](https://www.canada.ca/en/revenue-agency/news/newsroom/tax-tips/tax-tips-2026/what-you-need-for-2026-tax-filing-season.html)
- [Multi-factor authentication: CRA account help](https://www.canada.ca/en/revenue-agency/services/e-services/cra-login-services/help-cra-sign-in-services/multi-factor-authentication.html)