HMRC Completes Multi-Factor Authentication Rollout for All Tax Agent Accounts

HM Revenue and Customs (HMRC) has completed the rollout of multi-factor authentication (MFA) across all tax agent accounts. As of 15 October 2026, the additional security measure is active on all relevant accounts. The change is designed to strengthen online security and help protect sensitive tax information belonging to agents and their clients.

MFA adds an extra step to the standard sign-in process. In addition to entering a Government Gateway user ID and password, users must verify their identity using a one-time access code. This helps reduce the risk of unauthorised access, even if sign-in credentials are compromised.

HMRC advises tax agents to sign in to their accounts after MFA activation and check that their chosen access code method is working correctly. Reviewing these settings in advance can help prevent access issues when filing tax returns or completing other work on behalf of clients. MFA will also be enabled automatically on all newly registered agent accounts.

If you use HMRC tax services on behalf of clients, it is important to review your security settings and ensure that all authorised users can access their accounts. Capital Accountants monitors HMRC updates to help clients stay informed about important changes to tax procedures and digital services.