Frequently asked questions - Security
- What is a cookie?
- I don't want to set my cookies to "on". Can I still use the CRA epass services?
- What can I do to ensure my security after an online session?
- What if I don't have 128-bit encryption on my browser?
- I entered my epass password when I logged in, so why do I have to enter it again on the epass Password Confirmation page?
- What can I do to protect my personal information?
- How do I block access to my information on the CRA epass services?
- Why can I bookmark some pages and not others?
- Why can't I receive my CRA Security Code by email?
- Why do I need a CRA Security Code?
1. What is a cookie?
A "cookie" is a small piece of information sent to your computer by a Web site and used by your browser. It contains settings (such as language preference) to help you use our services. There are two types of cookies: "session cookies" and "persistent cookies".
A "session cookie" is used only during the browser session. It expires when the user closes the browser and it is not stored on your hard-drive.
A "persistent cookie" is placed on your computer and will remain on your hard-drive for a specific period of time, unless you remove it. These services use persistent cookies to set and store your language preference. These persistent cookies will not store any identifying data. For more information, see epass Cookies.
2. I don't want to set my cookies to "on". Can I still use the CRA epass services?
One of the ways we ensure that you continue to be identified and that we send the correct information during your online session is by using cookies. Right now, we have no other session management method for users who prefer not to accept browser cookies. If you don't accept cookies, you won't be able to use these services.
3. What can I do to ensure my security after an online session?
It is important to clear your browser's cache, or close and reopen your browser after an online session to stop someone from being able to view your information later. Most browsers conceal or cache images or files that you have viewed and store them locally to improve performance. Some browsers have an option to not cache encrypted sessions. See Security for more information on clearing your cache.
4. What if I don't have 128-bit encryption on my browser?
For security purposes you will need 128-bit Secure Sockets Layer (SSL 3.0) encryption on your browser to use these services. See Your browser for more information.
5. I entered my epass password when I logged in, so why do I have to enter it again on the epass Password Confirmation page?
Because of the security technology we use, you have to re-enter your epass password after you select "I agree" on the My Account for individuals and My Business Account Terms and conditions of use pages.
Enter the password you created when you registered for an epass.
The epass password you created is between eight and sixteen characters and contains at least one upper case letter, one lower case letter, and one digit.
You will also be prompted to enter your epass password each time you perform any of the following actions within the CRA epass applications:
- select the Refresh or Reload button;
- type an address in the address bar, go to the new address, and select the Back button;
- open a link in a new window; or
- toggle between the English and French pages.
6. What can I do to protect my personal information?
You can contribute to the security of your personal information by:
- Making sure you keep your personal information confidential. Do not share your SIN, line 150 amount, CRA Security Code or your User ID and Password with anyone. All pieces of information should be kept confidential. The person to whom the SIN belongs must be the one using the online service, since the required information can be used to change personal information on file with the CRA.
- Clearing your browser's cache. Make sure to delete all traces of your secure session from the memory of your computer. You should close and reopen your browser to clear your browser's cache.
- Not sending confidential information to the CRA by email. Our email does not have secure transmission capabilities.
7. How do I block access to my personal information on the CRA epass services?
To ask to have online access to your information on the CRA's My Account service disabled, call the e-service Helpdesk. After access to your information is disabled, you may change your mind and want access again. If so, you can call the e-service Helpdesk and ask that your access be re-activated.
8. Why can I bookmark some pages and not others?
You cannot bookmark pages that are in a secure part of our Web server.
9. Why can't I receive my CRA Security Code by email?
Although email is common and widely used today, it is not secure. It can be intercepted and the name of the originator can be changed. You should also be aware of Important security information regarding email fraud. The CRA will never ask you to provide us with personal information by email. If you receive such a request, do not respond and contact our e-service Helpdesk immediately.
10. Why do I need a CRA Security Code?
For My Account for individuals and My Business Account, you will need a CRA Security Code in order to complete the registration process. The separate mailing of the CRA Security Code is an added security measure. The letter provides you with your CRA Security Code but it also serves to alert you in the event someone else has attempted to register online using your personal tax information. If you have received a CRA Security Code and have not recently registered for the My Account for individuals or My Business Account services, contact our e-service Helpdesk immediately.
|
