IRCC Canada Introducing the latest security measure! The multi-factor authentication adds an extra layer of protection for your IRCC account.
The new IRCC GCKey multi-factor authentication takes effect today, July 31, 2023, enhancing the security of applicants’ personal information by preventing unauthorized access to their accounts.
Starting today, all applicants and their representatives must set up the new multi-factor authentication when creating a new account to apply using a GCKey or when signing in to an existing account with their GCKey. This additional security measure is now mandatory to safeguard personal information and prevent unauthorized access.
Indeed, multi-factor authentication is now mandatory for all applicants and representatives. They will be required to use it each time they access the IRCC account using GCKey. This measure ensures an added layer of security to protect their sensitive information effectively.
Who needs to set up new IRCC GCKey Multi-Factor Authentication?
If you possess a GCKey, using multi-factor authentication is mandatory when logging into your account. However, it is not obligatory if you opt for the Sign-In Partner option instead.
Below are the accounts that require new IRCC multi-factor authentication:
- IRCC Secure Account
- Authorized Paid Representatives Portal
- Employer Portal
- Provincial and Territorial Partner Portal
- Designated Learning Institutions Portal
- Provincial and Territorial Public Health Authority Portal
- Partner Portal (for the Visa Application Centre Portal and the Validation Portal)
How do I set up new IRCC GCKey Multi-Factor Authentication?
In your GCKey account, you have the option to select one of the multi-factor authentication methods provided by IRCC.
Using a smartphone, tablet, desktop, or laptop:
This method is highly recommended by IRCC and involves downloading a free authenticator app from the Play Store or App Store.
Once you log in to your GCKey account, you will receive a prompt to either provide your email address or register a device for multi-factor authentication.
At this point, you will be required to select the option to register your device, which can be either a tablet or a smartphone.
Upon selecting this option, you will be presented with a QR code and a secret key displayed on the screen. If you are using a smartphone or tablet, you can scan the QR code using the authenticator app installed on your device. Alternatively, you can manually enter the secret key into the authenticator app.
Once you complete the scanning or manual entry of the secret key in the authenticator app, it will generate a 6-digit passcode. Enter this passcode on the GCKey authentication screen and click ‘Continue’ to confirm your authentication.
After signing in to your GCKey account, you will be prompted to register an email address or device for multi-factor authentication.
Enter your email address and click on ‘continue.’ Following this, IRCC will email you a 6-digit passcode.
Input this passcode on the GCKey screen and select ‘continue’ to confirm your authentication.
Important Information After Confirming Authentication
After confirming your chosen multi-factor authentication method, IRCC will provide you with five recovery codes. These codes serve as a backup in case you lose or damage your registered device, or if you delete or reinstall the authenticator app.
It is crucial to save these recovery codes in a secure and easily accessible place. Once you have safely stored the recovery codes, your registration process will be considered.