Is CRA My Account safe to use?

Yes — CRA My Account is generally safe to use if you access it through the official Canada.ca website and follow basic account-security practices.

What’s generally safe about it:

• CRA uses secure online sign-in systems, and you can also sign in through a sign-in partner (a participating Canadian bank). That means CRA does not receive or store your bank password directly.
• The safest approach is to go to Canada.ca yourself and start the login from there.

What to be careful about:

• Phishing is the biggest risk. Don’t click login links in unexpected emails or texts, even if they claim to be from CRA.
• Use a unique, strong password that you don’t reuse anywhere else.
• Review your account regularly for unexpected changes to your address, direct deposit, or other profile details.
• If anything looks suspicious, log out, go back to the official site, and contact CRA using the phone number listed on Canada.ca.

One important caveat: CRA login features and security steps can change over time, so if you’re relying on a specific requirement or notification behavior, check the current CRA help page or sign-in page first.