Two-step verification
Turning on a second step at sign-in is the strongest protection for a Hypertax account. Here is how to set it up and what to do if you lose the device.
Updated 24 July 2026 · 1 min read
Your Hypertax account holds your tax number, your address and your pay. Two-step verification means that an email address alone is not enough to get in.
Setting it up
Open account settings, choose two-step verification, and scan the code with an authenticator app on your phone. Enter the six-digit code once to prove it works. From then on, signing in asks for a code as well as the emailed link.
Any standard authenticator app works. Hypertax does not require a particular one.
Save the recovery codes
You are shown a short list of one-time recovery codes when you turn it on. Print them, or put them somewhere that is not the phone with the app on it. Each one works once.
If you lose the phone
Use a recovery code to sign in, then turn two-step verification off and set it up again on the new device.
If the recovery codes are gone too, contact support. Recovery takes several days on purpose, because a fast recovery route is a way in for someone who is not you.
Codes by text message
Hypertax does not send verification codes by text. A phone number can be moved to another handset by someone who persuades a mobile operator to do it, and tax accounts are worth that effort. An app on your device cannot be taken that way.
Nobody will ask you for a code
Not Hypertax, and not the CRA. Read spotting a fake message.
Related articles
Creating and signing in to your account
How to make a Hypertax account, the ways to sign in, and what to do when you cannot get back in to a return you have already started.Your accountSecuritySpotting a fake tax message
The CRA does not start contact with a threatening call or a demand for gift cards. Here is how to tell a real message from a fake and where to report one.SecurityPrivacyFixing problemsWhat Hypertax stores about you
The categories of information a Hypertax account holds, where they live, who can reach them, and how long each one is kept.PrivacySecurityUploading documentsClosing your account
What deleting a Hypertax account removes, what has to be kept and why, and what you should download before you ask for the deletion.Your accountPrivacy
This article explains a form and a process. It is general information, not tax advice about your own situation, and Hypertax does not send your return to the CRA — you print it and mail it. See the not-tax-advice notice and the rest of the help centre.