Multi-factor authentication help for secure online services

On this page

• Online services using multi-factor authentication
• Registering for multi-factor authentication
  • For GCKey users
  • For Sign-in Partner users
• What to expect after registering for multi-factor authentication
• If you didn't receive your passcode
• Getting locked out of your account or receiving a one-time passcode in error
• Contact us
• Related links

Online services using multi-factor authentication

The following CBSA online services use this extra layer of security:

• CERS portal
• eManifest portal
• Trusted Trader portal
• CARM Client portal

Registering for multi-factor authentication

If you haven't already registered for multi-factor authentication, the next time you access one of the CBSA online services, you will need to provide and confirm an email address. If you agree to the multi-factor authentication privacy and consent statement, you will be sent a one-time passcode to the email address you provided to us each time you sign in to a portal.

Note: If your organization uses a shared email address to communicate with us, please make sure all users have access so they can receive the one-time passcode.

The steps to register differ, depending on the process you normally use to sign in to your respective portal.

For GCKey users

1. From the portal sign in page, choose the GCKey sign-in option
2. Enter your username and password
3. Select Sign in
4. GCKey Welcome screen will be displayed. Select Continue
5. Since you have not already enrolled for multi-factor authentication, you will be prompted to enter and confirm an email address and agree to the multi-factor authentication privacy and consent statement
6. Select Continue
7. A registration screen will be displayed and a one-time passcode will be sent to the email address provided
8. Enter the passcode you received and select Submit
9. Registration screen will inform you on successful registration for multi-factor authentication
10. You are now signed in

For Sign-in Partner users

1. From the portal sign-in page, choose the Sign-in Partner option
2. On the Interac ID page, select the financial institution you wish to use
3. At the financial institution's site, enter the required sign-in information
4. You will be automatically directed to your respective CBSA portal
5. Since you have not already enrolled in multi-factor authentication, you will need to provide an email address
6. After agreeing to the terms and conditions, a one-time passcode will be sent to the email address you provided. Once received, enter the passcode and continue to the CBSA portal
7. You are now signed in

What to expect after registering for multi-factor authentication

Each time you access your online service, a one-time passcode will be sent to the email address you provided when you signed up for multi-factor authentication. This is an extra layer of security designed to protect your user information. It cannot be disabled.

A one-time passcode:

• can only be sent by email (it can't be sent by telephone)
• is only good for a single sign-in session
• is only valid for 5 minutes, once generated

If you're not able to use the one-time passcode within 5 minutes, repeat the portal sign-in process to generate another passcode.

If you didn't receive your passcode

First, check your junk email folder. If you cannot find an email with the passcode, you can resend the passcode by selecting the Resend button or repeat the portal sign-in process. This will generate a new passcode.

If after continued attempts you do not receive an email with the passcode, please contact us following the instructions below.

Getting locked out of your account or receiving a one-time passcode in error

If your account gets locked because you entered the wrong passcode too many times or if you received an email with a one-time passcode in error, please contact us following the instructions below.

Contact us

Related links

• Canadian Centre for Cyber Security: What is multi-factor authentication
• Get Cyber Safe