GCKey Login 2026: What It Means, How to Sign In, and What If It's Revoked
As of August 31, 2026.
GCKey is the usual way people sign in to Immigration, Refugees and Citizenship Canada (IRCC) online. It is also one of the fastest ways to miss a deadline. The login loops, revoked credentials, and two-factor codes that stop a file are almost always a credential problem, not a lost application. This guide follows the official GCKey help page, last updated 28 August 2026, and the IRCC account pages.
TL;DR
GCKey is a username and password, not an account, and it does not hold your immigration file | Anyone in any country can create one | You must use it at least once every two years or IRCC-style services will treat it as revoked, and a revoked GCKey cannot be recovered | Two-factor authentication uses an authenticator app or email, plus recovery codes you must save | Canada Revenue Agency (CRA) My Account is a different login (Sign-In Partner or CRA user ID), not GCKey
What does GCKey mean, and what is it not?
Short answer: GCKey (Government of Canada Key) is a credential: a username and password used to sign in to federal online services that show a GCKey button. It is not an account and it does not store your study permit, work permit, or Express Entry file. The Government of Canada says so on the GCKey help page. After you create GCKey, you still register separately for each service, including your IRCC secure account, so the credential is matched to that profile.
Anyone in any country can sign up. You do not need to be in Canada. You usually need only one GCKey for every federal service that accepts it, such as IRCC and My Service Canada Account. Keep track of which GCKey is linked to which service. Once a GCKey is linked to a government account, you must use that same username and password every time you sign in to that account.
Does GCKey work for CRA My Account?
Short answer: No. The CRA sign-in page lists a Sign-In Partner (your bank), a CRA user ID and password, and a provincial partner for British Columbia and Alberta. It does not offer GCKey. Confirm that on Sign in to your CRA account before you try. Mixing the two logins is one of the more common support tickets we see from people who just created GCKey for IRCC and then try it on taxes.
Should you use GCKey or a Sign-In Partner for IRCC?
Short answer: IRCC gives two doors into the same secure account: GCKey, or a Sign-In Partner that uses online banking from a participating Canadian bank. GCKey works worldwide. A Sign-In Partner is faster if you already bank in Canada. You cannot switch methods on an existing IRCC account. The choice is listed on Sign in to your IRCC account.
| Feature | GCKey | Sign-In Partner |
|---|
| Who can use it | Anyone worldwide | People with a participating Canadian bank login |
| Where it is set up | Government of Canada GCKey pages | Your bank's website |
| Two-factor authentication | GCKey authenticator app or email | Handled by the bank |
| If you lose access | Recover via email or recovery questions, or create a new GCKey if revoked | Contact the bank |
| Ties to your IRCC file | Linked at registration | Linked at registration |
If you are applying from Iran, the UAE, India, or anywhere without a Canadian bank login, GCKey is the path. If you already have a Canadian bank account, a Sign-In Partner skips a separate GCKey password. The government does not receive your bank balance or account number through a Sign-In Partner.
How do you create a GCKey and an IRCC secure account?
Short answer: Start at the service you need, not at a random GCKey bookmark. Open the IRCC account page, choose GCKey, then Sign Up. You create a unique username, a password that meets the on-screen checklist, recovery questions, a recovery email, and two-factor authentication. Save the recovery codes. Then register the IRCC secure account that actually holds your applications.
Use a current browser (Chrome, Firefox, Safari, or Edge). Turn JavaScript and cookies on. Do not bookmark pages you see after you sign in. Those steps are on the GCKey help page under browser errors. Create the credential on a laptop if you can. Mobile browsers fail more often during signup.
You can hold more than one GCKey (work versus personal). Use a different recovery email for each one, and remember which GCKey is tied to IRCC.
How do you sign in to IRCC with GCKey?
Short answer: Sign in the same way every time. On the IRCC sign-in page, choose the GCKey button, enter the username and password you used when you registered that IRCC account, continue through two-factor authentication, and you land in the secure account. If you use a different GCKey than the one you registered with, IRCC will not show your file.
The list of Government of Canada accounts is the directory of services that accept GCKey. For immigration, stay on the IRCC account pages rather than a third-party "login" clone.
To check an application after you are in, use IRCC's check application status instructions. Status lives in the secure account, not in GCKey.
What two-factor method does GCKey use?
Short answer: After username and password, GCKey asks you to confirm it is you. The official options are an authenticator app on a phone or desktop, or an email address. When you set that up, GCKey gives you recovery codes. Save those codes offline. If you lose the phone and the codes, the help page says you have to create a new GCKey.
If you still have the original method, sign in, complete two-factor, then use Change your two-factor authentication and save the new codes. Old codes stop working. If you lost the method, use a saved recovery code on the Recover account path, then change the method. Those steps are under Change your GCKey two-factor authentication.
Any modern authenticator app that generates time-based codes works. The government does not require a branded IRCC app.
Why was my GCKey revoked, and can I get it back?
Short answer: No. If GCKey says your username and password have been revoked, you cannot recover that credential. You register again and, during that process, you may be able to recover the user profile or link existing applications. The two usual reasons are inactivity and a compromised password. The system requires you to use GCKey at least once every two years. That rule is on the official revoked GCKey section.
If you still want GCKey after a revocation, go to the IRCC sign-in page, choose GCKey, Sign Up, and create a new username and password. Do not reuse the old password. Then re-enrol in each service. You can also revoke GCKey yourself. That cannot be undone, and you lose access to every federal service that used that credential until you re-register.
What if you forgot the username or password?
Short answer: Recover from the Welcome to GCKey page of the service you are trying to use, not from a random search result. Forgot username emails the username to the recovery address you registered. Forgot password uses that email plus a recovery question, or the recovery questions and memorable person and date if you never added email. If you added no recovery email and you forgot both username and password, the help page says you create a new GCKey and register again.
Keep the recovery email unique to that GCKey. If the address is already on another GCKey, the system warns you and you either recover the old one, use a different email, or move the address (which removes it from the other GCKey).
How should a representative handle your GCKey?
Short answer: Do not give your GCKey password to a consultant. A licensed representative uses IRCC's representative process, not your personal credential. Sharing the password is how accounts get revoked and how files get moved without your knowledge. Go Far Global is a licensed firm. A Regulated Canadian Immigration Consultant (RCIC) can be appointed on the file without taking over GCKey.
If someone already has your password, change it, review the applications linked to the account, and consider whether you need a new GCKey. Then book a consultation if the file itself needs a review.
What questions do people ask about GCKey?
Short answer: The questions below cover what GCKey means, revoked messages, authenticator apps, and whether one GCKey covers every IRCC application.
What does "your GCKey username and password have been previously revoked" mean?
It means that credential is dead. Create a new GCKey and re-link the IRCC account. You cannot recover the old one.
Can I use the same GCKey for Express Entry and a work permit?
Yes, if both applications sit in the same IRCC secure account that you registered with that GCKey. Use the same sign-in path every time.
Does GCKey expire?
Yes, through inactivity. Use it at least once every two years. A revoked GCKey is not the same as a forgotten password.
Sources
Disclaimer
This article is for informational purposes only and does not constitute immigration or legal advice. Immigration laws and policies change frequently. Each case is unique and outcomes depend on individual circumstances. Consult a Regulated Canadian Immigration Consultant (RCIC) before making immigration decisions.
