New features in 2026
CRA has made incremental improvements to My Business Account throughout 2025, with several significant updates landing for the 2026 filing season.
Enhanced document submission
The "Submit documents" feature now supports larger file sizes (up to 150MB per submission, up from 50MB) and additional file formats. More importantly, the system now provides confirmation numbers that you can actually reference in correspondence—a basic feature that was inexplicably missing before.
Improved GST/HST portal
GST/HST return filing through My Business Account has been streamlined. The new interface:
- Prefills more fields from historical data
- Shows real-time account balance including pending returns
- Allows viewing of all historical returns (previously limited to 7 years)
- Provides downloadable statements in PDF format
Notice of Assessment access
Corporate NOAs are now available in My Business Account within 24-48 hours of processing, rather than the previous 5-10 business day delay. This doesn't affect paper mailing times, but practitioners can access results much faster online.
Payroll improvements
T4 Summary viewing and amendment submission has been simplified. The previous system required navigating through multiple screens; the new interface consolidates payroll information into a single dashboard view.
Mobile access note
My Business Account remains difficult to use on mobile devices. CRA states mobile optimization is "planned" but no timeline has been announced. For field work or client meetings, expect to use a laptop.
Registration and access updates
CRA has made changes to how businesses register and access My Business Account.
Sign-in partners expansion
Beyond the existing major bank sign-in options, CRA has added:
- Interac sign-in verification (expanding credit union access)
- BC Services Card digital ID
- Alberta.ca Account
However, the fundamental tension remains: business accounts require a separate registration from personal accounts, and many clients find this confusing. The GCKey option remains available but increasingly feels outdated compared to banking sign-in.
Multi-factor authentication now mandatory
As of January 2026, MFA is required for all My Business Account logins. This applies to both direct access and Represent a Client access. The options are:
- SMS verification (least secure, but most accessible)
- Email verification
- Authenticator app (recommended)
Update client contact information
With mandatory MFA, clients with outdated phone numbers or email addresses in their CRA profile may be locked out. Verify contact information before the busy season to avoid access issues.
Represent a Client changes
For accounting firms, Represent a Client (RAC) is the primary interface with CRA. Several 2026 changes affect how authorization and access work.
Authorization levels clarified
CRA has restructured authorization levels to be more granular:
| Level | Permissions |
|---|---|
| Level 1 (View) | View account information, notices, statements. No filing ability. |
| Level 2 (File) | Level 1 + submit returns, adjustments, elections. Standard for preparers. |
| Level 3 (Full) | Level 2 + update business information, banking, and addresses. Typically reserved for trusted advisors. |
Electronic authorization improvements
The online authorization process has improved significantly:
- Faster processing: Electronic authorizations now process in real-time (previously 1-3 business days)
- Confirmation emails: Both representative and business owner receive confirmation
- Expiry warnings: System now sends reminders 60 days before authorization expires
- Bulk renewal: Firms can now renew multiple authorizations in a single session
Authorization by business owners
The pain point of getting client authorization remains. New options include:
- Digital signature: Clients can now authorize via their My Business Account without mailing forms
- Temporary access: New "one-time" authorization for specific transactions (useful for one-off engagements)
- Group authorization: Hold companies can grant access to all subsidiaries in one action
API access and integrations
CRA's API availability continues to expand, with implications for tax software and practice management tools.
Auto-fill for T2
T2 Auto-fill is now available for 2025 returns filed in 2026. This pulls:
- Prior year filing information
- Account balances (tax payable, installments, refunds)
- T5 and investment slips issued to the corporation
- Registered GST/HST and payroll account information
TaxCycle and Profile both support T2 Auto-fill. The integration works similarly to T1 Auto-fill—connection to CRA within the software, download of available data, and merge with existing return data.
EFILE improvements
EFILE acknowledgments are now available faster (typically within minutes rather than hours). The system also provides more detailed rejection reasons, reducing back-and-forth when returns are rejected.
Third-party API access
CRA has expanded API access for registered software vendors, though direct API access for accounting firms remains limited. If you're using a practice management platform that integrates with CRA, expect improved data synchronization in 2026.
What's still missing
Despite improvements, My Business Account has notable gaps.
No unified view
Each business number is still a separate account. For practitioners managing clients with multiple BNs (operating company, holdco, properties), there's no dashboard view across all entities. You must log in and out of each account separately.
Limited historical data
While GST/HST history has improved, T2 return access remains limited. You can view filing status but not the actual returns submitted. For historical return copies, you still need to request them through formal channels.
Communication gaps
There's no secure messaging system. You can't send questions to CRA through My Business Account—you must call or mail. This seems like an obvious feature that would reduce call centre volume.
No workflow integration
My Business Account is a standalone portal. It doesn't integrate with practice management systems, doesn't support task management, and doesn't track what you've done. Everything is a manual process.
Comparison with US counterpart
IRS Tax Pro Account offers features that CRA hasn't implemented: secure messaging, centralized client management, and authorization tracking. CRA's system is functional but feels several years behind.
Practical tips for firms
Authorization maintenance
Build authorization checks into your workflow:
- Run a quarterly report of all client authorizations and expiry dates
- Send renewal requests 90 days before expiry (gives buffer for delayed responses)
- Document authorization levels for each client in your practice management system
- Train all staff on the difference between Level 1, 2, and 3 access
Staff access management
For firms with multiple preparers:
- Each preparer should have their own RepID (not shared credentials)
- Maintain a log of which staff have access to which client BNs
- Immediately revoke access when staff leave the firm
- Review access annually during your quality control procedures
Documentation practices
Always screenshot or PDF important confirmations from My Business Account. CRA's system can be inconsistent about what's available historically. Save:
- Filing confirmations and acknowledgments
- Document submission confirmations (with reference numbers)
- Account balances at key dates
- Any correspondence or notices
Client education
Many clients still don't have My Business Account access. Consider adding to your onboarding:
- Registration assistance (can be done during a client meeting)
- Authorization setup for your firm
- Overview of what they can see and do themselves
- Explanation of what requires professional assistance
Beyond CRA's portal
While My Business Account is essential, it's just one piece of the corporate tax workflow. Resolved handles the bookkeeping-to-tax data flow—extracting transactions, categorizing expenses, and preparing data for T2 filing. See how it works.