LOCKED OUT? ERROR ERR.019? DO NOT CALL YET.
The Nightmare: “Your Account is Locked”
It is the most frustrating screen in Canada. You are trying to check your T4s or verify your Canada Carbon Rebate deposit, and BAM: Error ERR.019. The screen says “Contact Us,” but calling the CRA means waiting on hold for 2+ hours during tax season.
Usually, this error triggers after 5 failed login attempts or 3 failed Multi-Factor Authentication (MFA) codes. But in 2026, the rules have changed. The CRA has introduced a Self-Service Unlock Mechanism that bypasses the phone queue entirely.
As of 2026, you do not need to call the CRA to unlock your account if you remember your SIN. Instead of trying to “Recover” your old password, you must simply Register for a New Account using the exact same SIN. The system will detect your identity, override the lock, and issue a new User ID immediately.
Why does this work? The “Register” function forces a fresh identity verification check. Once you verify your identity (usually via Line 15000 from your last tax return), the system essentially “resets” your access, deleting the old locked credential and replacing it with a fresh one. It is a backdoor that saves hours of hold music.
Pre-Flight Check: Do You Have The Data?
Before you attempt the “Re-Registration” trick, you need specific data points. The CRA security system (CRA-2FA) will ask you for a number from your 2024 or 2025 Tax Return. If you guess this wrong 3 times, you are permanently locked out and will have to call.
Must be your exact 9-digit number. No hyphens needed.
Have your 2024 Notice of Assessment (NOA) ready. You need the exact dollar amount from Line 15000.
Must match what the CRA currently has on file (not necessarily where you live today if you moved last week).
The 2026 Self-Unlock Protocol
Forget the “Forgot Password” link. That link often loops you back to the error page if your account is hard-locked. Follow this specific path to force a reset.
Go to the “Register” Page (Not Login)
Navigate to the CRA My Account page but ignore the login fields. Scroll down and click the button that says “CRA Register”. You are acting like a new user.
Enter SIN to Trigger “Revocation”
Enter your SIN. The system will alert you: “A User ID already exists for this SIN.” It will ask if you want to revoke the old one and create a new one. Click YES / CONTINUE.
The “Line 15000” Challenge
This is the moment of truth. Enter the amount from Line 15000 of your latest assessed tax return. Once this matches, the lock is lifted instantly.
Wait Times vs. Reset Times
Why use the self-service method? Because 2026 tax season call volumes are projected to be historical highs due to the new Carbon Rebate changes. Here is the reality of the situation.
| Method | Avg. Time | Success Rate |
|---|---|---|
| Phone (1-800-959-8281) | 2h 45m | Low (Calls Drop) |
| Self-Service Reset | 12 Minutes | High (95%) |
| Mail (Request Code) | 10 Business Days | 100% (Slow) |
*Data based on Jan 2026 CRA Service Standards.
WARNING: The “Feb 2026” MFA Trap
Starting February 2026, the CRA has implemented a new mandatory security rule: Backup MFA.
If you only have ONE Multi-Factor Authentication method set up (e.g., just SMS text), you may be forced to add a second one (like a Grid Card or Authenticator App) upon your next login.
Many users are getting locked out because they changed their phone number and didn’t set up a backup. Pro Tip: Once you regain access, immediately go to “Security Settings” and generate a Passcode Grid (PDF). Save this file. It is your “Skeleton Key” if you ever lose your phone or travel abroad.
When All Else Fails: Contact Protocol
If the “Re-Register” trick fails (usually because you moved and didn’t update your address, so the Postal Code check fails), you have no choice but to call.
Strategy: Do not call on Monday mornings. The best time to call is Tuesday to Thursday, between 8:00 AM and 9:30 AM local time.
FAQ: Unlocking Your Account
No. Your tax data is linked to your SIN, not your User ID. When you create a new User ID, it simply re-connects to your existing history, NOAs, and T4 slips. Nothing is lost.
They are similar. ERR.019 is a specific “Account Locked” status. CER.019 is a general “Service Not Available” error, often caused by trying to access the site during maintenance hours (e.g., 3 AM to 6 AM ET).
Sometimes. If your CRA account is “hard locked” (ERR.019), switching to a Sign-In Partner usually won’t work because the lock is on the SIN level. You must perform the unlock/register process first.
If you lost your NOA, check your physical files or tax software (TurboTax, Wealthsimple) from last year. They store a PDF copy of your return. Without this number, you cannot self-unlock.
Once logged in, go to “Profile” -> “Security Options” -> “Multi-factor authentication settings”. Add a secondary phone number or generate a Passcode Grid immediately.