GCKey Login 2026: What It Means, How to Sign In, and What If It's Revoked
As of November 3, 2026.
GCKey is the usual way people sign in to the Immigration, Refugees and Citizenship Canada (IRCC) secure account. It is also one of the fastest ways to miss a deadline. The login loops, revoked credentials, and two-factor codes that stop a file are almost always a credential problem, not a lost application. This guide follows the official GCKey help page, last updated 10 September 2026, and the IRCC account pages.
Not every IRCC login uses GCKey. IRCC's Sign in to your IRCC account page (updated 1 September 2026) lists three different accounts: the IRCC secure account, the IRCC portal, and the permanent residence portal. Express Entry, work permits (including post-graduation work permits and International Experience Canada) and some study permit and visitor visa applications sit in the IRCC secure account, the only one of the three that IRCC labels "GCKey or Sign-In Partner." Family sponsorship, humanitarian and compassionate, and non-Express Entry provincial nominee applications use the permanent residence portal. If you are not sure which account you used, start from that IRCC page.
TL;DR
GCKey is a username and password, not an account, and it does not hold your immigration file | Anyone in any country can create one | You must use it at least once every two years or it can be revoked, and a revoked GCKey cannot be recovered | Two-factor authentication uses an authenticator app or email, plus recovery codes you must save | Canada Revenue Agency (CRA) My Account is a different login (Sign-In Partner or CRA user ID), not GCKey
What does GCKey mean, and what is it not?
GCKey (Government of Canada Key) is a credential: a username and password used to sign in to federal online services that show a GCKey button. It is not an account and it does not store your study permit, work permit, or Express Entry file. The Government of Canada says so on the GCKey help page. After you create GCKey, you still register separately for each service, including your IRCC secure account, so the credential is matched to that profile.
Anyone in any country can sign up. You do not need to be in Canada. You usually need only one GCKey for every federal service that accepts it, such as IRCC and My Service Canada Account. Keep track of which GCKey is linked to which service. Once a GCKey is linked to a government account, you must use that same username and password every time you sign in to that account.
Does GCKey work for CRA My Account?
No. The CRA sign-in page lists a Sign-In Partner (your bank), a CRA user ID and password, and a provincial partner for British Columbia and Alberta. It does not offer GCKey. Confirm that on Sign in to your CRA account before you try.
Should you use GCKey or a Sign-In Partner for IRCC?
IRCC gives two doors into the same secure account: GCKey, or a Sign-In Partner that uses online banking from a participating Canadian bank. GCKey works worldwide. A Sign-In Partner is faster if you already bank in Canada. You choose GCKey or a Sign-In Partner when you register. The IRCC account page says that if a GCKey is revoked you can choose a different sign-in method when you register again, and that if you move banks you may be able to switch your Sign-In Partner. The choice is listed on Sign in to your IRCC account.
| Feature | GCKey | Sign-In Partner |
|---|
| Who can use it | Anyone worldwide | People with a participating Canadian bank login |
| Where it is set up | Government of Canada GCKey pages | Your bank's website |
| Two-factor authentication | GCKey authenticator app or email | Handled by the bank |
| If you lose access | Recover via email or recovery questions, or create a new GCKey if revoked | Contact the bank |
| Ties to your IRCC file | Linked at registration | Linked at registration |
If you are applying from Iran, the UAE, India, or anywhere without a Canadian bank login, GCKey is the path. If you already have a Canadian bank account, a Sign-In Partner skips a separate GCKey password. The government does not receive your bank balance or account number through a Sign-In Partner.
How do you create a GCKey and an IRCC secure account?
Start at the service you need, not at a random GCKey bookmark. Open the IRCC account page, choose GCKey, then Sign Up. You create a unique username, a password that meets the on-screen checklist, recovery questions, a recovery email, and two-factor authentication. Save the recovery codes. Then register the IRCC secure account that actually holds your applications.
Use a current browser (Chrome, Firefox, Safari, or Edge). Turn JavaScript and cookies on. Do not bookmark pages you see after you sign in. Those steps are on the GCKey help page under browser errors. Create the credential on a laptop if you can. Mobile browsers fail more often during signup.
You can hold more than one GCKey (work versus personal). Use a different recovery email for each one, and remember which GCKey is tied to IRCC.
How do you sign in to IRCC with GCKey?
Sign in the same way every time. On the IRCC sign-in page, choose the GCKey button, enter the username and password you used when you registered that IRCC account, continue through two-factor authentication, and you land in the secure account. If you use a different GCKey than the one you registered with, IRCC will not show your file.
The list of Government of Canada accounts is the directory of services that accept GCKey. For immigration, stay on the IRCC account pages rather than a third-party "login" clone.
To check an application after you are in, use IRCC's check application status instructions. Status lives in the secure account, not in GCKey.
What two-factor method does GCKey use?
After username and password, GCKey asks you to confirm it is you. The official options are an authenticator app on a phone or desktop, or an email address. When you set that up, GCKey gives you recovery codes. Save those codes offline. If you lose the phone and the codes, the help page says you have to create a new GCKey.
If you still have the original method, sign in, complete two-factor, then use Change your two-factor authentication and save the new codes. Old codes stop working. If you lost the method, use a saved recovery code on the Recover account path, then change the method. Those steps are under Change your GCKey two-factor authentication.
Any modern authenticator app that generates time-based codes works. The government does not require a branded IRCC app.
Why was my GCKey revoked, and can I get it back?
No. If GCKey says your username and password have been revoked, you cannot recover that credential. You register again and, during that process, you may be able to recover the user profile or link existing applications. The two usual reasons are inactivity and a compromised password. The system requires you to use GCKey at least once every two years. That rule is on the official revoked GCKey section.
If you still want GCKey after a revocation, go to the IRCC sign-in page, choose GCKey, Sign Up, and create a new username and password. Do not reuse the old password. Then re-enrol in each service. You can also revoke GCKey yourself. That cannot be undone, and you lose access to every federal service that used that credential until you re-register.
What if you forgot the username or password?
Recover from the Welcome to GCKey page of the service you are trying to use, not from a random search result. Forgot username emails the username to the recovery address you registered. Forgot password uses that email plus a recovery question, or the recovery questions and memorable person and date if you never added email. If you added no recovery email and you forgot both username and password, the help page says you create a new GCKey and register again.
Keep the recovery email unique to that GCKey. If the address is already on another GCKey, the system warns you and you either recover the old one, use a different email, or move the address (which removes it from the other GCKey).
How should a representative handle your GCKey?
Do not give your GCKey password to a consultant. A licensed representative uses IRCC's representative process, not your personal credential. A shared password is a compromised password, and compromised credentials are one of the two reasons IRCC lists for revoking a GCKey. It is also how files get moved without your knowledge. Go Far Global is a licensed firm. A Regulated Canadian Immigration Consultant (RCIC) can be appointed on the file without taking over GCKey.
If someone already has your password, change it, review the applications linked to the account, and consider whether you need a new GCKey. Then book a consultation if the file itself needs a review.
What questions do people ask about GCKey?
The questions below cover what GCKey means, revoked messages, authenticator apps, and whether one GCKey covers every IRCC application.
What does "your GCKey username and password have been previously revoked" mean?
It means that credential is dead. Create a new GCKey and re-link the IRCC account. You cannot recover the old one.
Can I use the same GCKey for Express Entry and a work permit?
Yes, if both applications sit in the same IRCC secure account that you registered with that GCKey. Use the same sign-in path every time.
Does GCKey expire?
Yes, through inactivity. Use it at least once every two years. A revoked GCKey is not the same as a forgotten password.
Sources
Disclaimer
This article is for informational purposes only and does not constitute immigration or legal advice. Immigration laws and policies change frequently. Each case is unique and outcomes depend on individual circumstances. Consult a Regulated Canadian Immigration Consultant (RCIC) before making immigration decisions.
