Multi-factor authentication helps to keep ones Immigration, Refugee and Citizenship (IRCC) account secure. Multi-factor authentication is mandatory for users using GCKey login. This means that users must confirm their identity every time they log into their IRCC accounts. It should be noted that users are required to enable this service only if they are signing into their account using GCKey. Those that use the Sign-in partner option are exempt from this requirement.   

Users interested in setting up GCKey multi-factor authentication can do so by first registering their device or providing an email address. They will then be prompted to choose between three multi-factor authentication methods – using a smartphone, desktop or laptop, or email address. A one-time 6-digit code will be sent for users to confirm their multi-factor authentication method. Five recovery codes will also be shown which can be used if users lose or damage their device or delete or reinstall the authenticator app.  

IRCC has recently suspended the multi-factor authentication requirement for the next two weeks because of technical issues resulting from outages. In the meantime, users can still use their GCKey username and password to sign into their accounts.