NEW! Multi-factor authentication FAQ

When you sign in to your account for the first time on a new device, you need more than just your username and password. You need a second "factor" - to prove who you are. A factor in authentication is a way of confirming your identity when you try to sign in. For example, a password is one kind of factor, it's something that you know. A smartphone or an email address is another kind of factor, it's something that you have. To add an additional layer of security we recommend enabling MFA. Make sure the password you use for your My Account is different than the password you use for your email address.

When you log in to My Account with MFA enabled, you may be asked to provide a unique security code called a one-time passcode (OTP). You can choose to receive this OTP either by text message or by email.

To ensure that MFA works for your account, keep your email address and recovery phone number up to date on your account profile and make sure that MFA is enabled for at least one of them.

To enable or disable MFA, follow these steps:

1. Select the Update MFA Settings button in your MyAccount Profile
2. Use the toggle On/Off button to enable or disable MFA
3. Click Save changes button to save the changes
4. To discard changes, click the X on top right corner. 

You’ll need a mobile phone number that can receive text messages to use MFA. 

You’ll need a Canadian mobile phone number that can receive text messages to use MFA. 

Standard messaging and data rates may apply. Please refer to your mobile plan for more information.

To provide you with the best possible experience, both an email address and a mobile recovery number are required to enable MFA.