Security

Security requires a partnership between two parties-in this case, you and the Canada Revenue Agency (CRA).

• CRA's part
• Your part
• Security tips
• FAQ-Security

CRA's part

The CRA is responsible for providing Internet filing access only to business clients who provide us with their Business Number and their personalized Web access code. We'll provide security at our site and ensure that your business's confidential information is securely stored in our computers.

We're also responsible for ensuring that your confidential information is transmitted in an encrypted format between your computer and our servers. This ensures that no other Internet users are able to alter or view data transmitted between you and us.

We use sophisticated security techniques to protect this site. State-of-the-art encryption technology and security procedures protect your confidential information at all times. While every possible effort has been made to ensure the safety and integrity of transactions at our Web site, the Internet exists as a public network and therefore is outside of our control.

We're taking precautions to ensure the confidentiality of the data transmitted using Internet filing. Using 128-bit SSL encryption protects information by verifying the identity of the parties on both ends of the Internet connection, before confidential information is exchanged. Your electronic authentication is identified when you log onto the transmission Web page. Throughout the session, extensive measures are taken to ensure security is maintained.

Top of page

Your part

To access our protected areas and services, you'll need to give us your Business Number and the Web access code that is printed on your personalized T4 Summary. These two pieces of identification make up your electronic authentication which is considered an official signature. Make sure that you keep each piece of your identification confidential so that your electronic signature can't be used by others.

You have to use approved security protocols to access our site. We limit access to browsers supporting 128-bit secure sockets layer (SSL) encryption. This is the most secure form of encryption currently available in North America. It is your responsibility to download and install the necessary browsers, as well as to clear your browser's disk cache and also its memory cache (refer to your browser's help guide).

Security tips

Here are some tips to help ensure your information return remains confidential.

• Keep your Web access code secret! Only with your Web access code can you transmit your Internet filing information return.
• If you leave your computer on after completing activities in a secure area of the site, clear the cache. You should also turn off and restart the browser to eliminate copies of Web pages that may have been stored on your computer's hard drive.
• Never send confidential information-such as your Business Number or Web access code-via Internet email. Our encryption system does not function on email.

Top of page

FAQ - Security

1. If hackers can illegally access high-security Web sites, how can the CRA be so sure it can stop illegal access?
   We're taking every precaution to minimize risk and provide protection against hackers. Secure sockets layer protocol (also known as SSL) ensures the privacy of information passing between your browser and our Web servers. By encrypting the information, SSL allows the transmission and authentication processes to occur safely. Data cannot be altered when SSL is in use. This is the most secure form of encryption commonly available in North America.
   
   
2. What's the difference between 40-bit and 128-bit encryption?
   Previous versions of Netscape and Internet Explorer offered two levels of security: 40-bit and 128-bit encryption. If you have an older version of Netscape or Internet Explorer that is using 40-bit, you must upgrade to 128-bit. According to Netscape, 128-bit encryption is 309,485,009,821, 345,068,724,781,056 times more powerful than 40-bit encryption.
   
   
3. How can you know for sure that you're communicating with the CRA?
   If you're using Netscape Navigator, you can check that you're communicating with the CRA by clicking on the or the in the bottom right corner of your browser during an online session. Security details will be displayed, including certificate information that allows you to verify the identity of the CRA.

   If you're using Microsoft Internet Explorer, you can check that you're communicating with the CRA by selecting Properties from the File menu and then clicking on the Security tab. The dialog box will display security details, including certificate information that allows you to verify our identity. If you're running Microsoft Internet Explorer version 4 or higher, you can click on the in the bottom right corner of the browser to view security details.