If you regularly use HMRC online services, this is worth checking before your next filing deadline.
From 28 September 2026, HMRC began the final phase of activating Multi-Factor Authentication (MFA) for tax agents who had not yet been moved onto the new security arrangements.
MFA adds an extra security step when signing in, helping protect HMRC accounts from unauthorised access.
Why does this matter?
For businesses and accounting teams, the main issue is practical rather than tax-related.
If your login details, authentication method or access arrangements are not up to date, you could face unnecessary delays when you urgently need to access an HMRC service.
A few things worth checking now:
✓ Can the relevant team members access HMRC online services successfully?
✓ Are the contact details used for authentication still current?
✓ Does your business rely on one person or device to receive authentication codes?
✓ Are your internal access procedures clear if a key member of staff is unavailable?
✓ If you use a tax agent, do you know which HMRC tasks they handle and which still require action from you?
The key message:
Don’t wait until a filing or payment deadline to discover that you cannot access your HMRC account.
A quick access check now could save a lot of unnecessary stress later.
This post is for general information only and does not constitute tax, legal or accounting advice.