Multi-factor authentication (MFA) will add an extra layer of security to agent services accounts (ASA) and will be mandatory from October. Once MFA is activated, whenever an adviser signs into their account they will be asked to enter a one-time, six-digit access code through an authenticator app or by text message or voice call.
MFA is already part of the security sign-in requirement for individual users of Government Gateway accounts, but this is the first move to provide the added security for professional tax advisers and accountants. This follows a ‘successful period of testing’ by HMRC with the agent community.
‘MFA already protects Government Gateway accounts for individuals and organisations,’ HMRC said. ‘We are now extending MFA protection to agent accounts in response to ongoing and evolving online security threats.’
HMR