On Tuesday 7 April 2026, HMRC will temporarily add a new page to the agent online sign in journey. This page will inform agents that Multi-Factor Authentication (MFA) will soon be introduced to strengthen security on their accounts.
Agents will sign in to their accounts as usual. After entering their User ID, their Password and selecting Sign In, a new page will then appear in the user journey. This will alert agents to the introduction of MFA and will be visible to them until it is applied to their account. The page will also provide a link to further information which will be published within the Tax Agent’s Handbook. This will open in a separate tab if selected. Once published the URL of the new page will be https://www.tax.service.gov.uk/bas-gateway/agent-mfa-comms?continueUrl=%2Faccount and the button ID on the new page will be "continue".
Once MFA is applied to the agent’s account, they will no longer see this page and will instead see the access code entry screen. Once live, the MFA sign in journey for agents will mirror the existing journey for individuals and organisations. There will be no change to the 18 month application authorisation meaning that you do not need to grant a new authority to Shiraz Vatbridge, if you have already done so.
HMRC has been working collaboratively with tax advisers and professional bodies to introduce added security for agents via the introduction of MFA. We are currently undertaking the Test and Learn phase with a small group of agents. MFA testing will be extended in April, with HMRC contacting agents who they recognise would benefit from early adoption of the additional security MFA offers. This may be agents who have previously contacted HMRC due to account suspension or to raise security concerns.
To give agents time to prepare, HMRC will confirm the MFA go-live date for the wider agent community as early as possible, currently scheduled to be delivered by the end of June 2026, but subject to successful testing.