HMRC Agent MFA: Prepare for 19 August Switch-On

HMRC is finishing the rollout of multi-factor authentication (MFA) on agent accounts through 2026. Agents who requested the second voluntary activation date by midnight on 31 July 2026 will see MFA switched on for the specified agent IDs on 19 August 2026 — eleven days from today.

HMRC’s Tax Agent Handbook now confirms that thousands of agents already took the July and August early activation dates. Remaining accounts that were not opted in will automatically activate between 28 September and 15 October 2026. HMRC cannot give a specific date inside that autumn window, so practices that skipped voluntary opt-in should treat late September as the earliest likely switch-on.

What changes on activation day

When MFA is active, each user signs in with their Government Gateway user ID and password, then enters a one-time access code. Codes can come from an authenticator app (HMRC’s preferred primary method), a text message, or a voice call. Authenticator apps work offline and do not need mobile signal.

MFA protects web sign-in to Agent Services Accounts (ASA) and HMRC online services for agents. It does not replace API credentials used by compatible software to send Making Tax Digital for Income Tax or VAT submissions — but locked-out portal access still disrupts authorisations, client management, and any manual work you do in HMRC services.

The “Remember me” option can reduce how often you re-enter a code on the same device and browser for seven days. You will still be challenged if you change Government Gateway user ID, device, or browser.

Handbook checklist before 19 August or autumn

Check and update existing MFA settings now. Someone may already have enabled an MFA option for Making Tax Digital for VAT or another service — access codes will go to whatever contact details were saved then. Update outdated phone numbers and add a backup method.

Give each staff member their own sign-in credentials, keep at least two administrators so MFA resets stay in-house, and remove leavers promptly. Agree whether the practice standardises on authenticator apps, and brief anyone who uses third-party tools that automate the sign-in journey — software vendors were notified in advance, but you still need to confirm your stack.

If you opted in for 19 August, diary that morning for first logins and have a recovery path ready before clients call. If you are in the mandatory autumn cohort, complete the same checklist before 28 September — waiting for an unknown date inside the window is the risk HMRC is warning against.

Parallel August compliance — do not drop client work

MFA prep sits beside other August agent deadlines: the first MMTAR tax adviser registration window still closes 18 August 2026 for tranche one, and Self Assessment clients may still need reminders about payments and MTD catch-up after 7 August. Split ownership inside the firm so portal security work does not stall quarterly update catch-up for landlords and sole traders.

Document which agent IDs activate on 19 August versus which fall into September–October. Multi-office firms often hold several OSAs — map them once so nobody assumes every ID switched on the same day.

How FinnAccountings supports review-ready client packs

While practices harden portal access, organised client bookkeeping still has to move. FinnAccountings helps Ireland and UK accountants and business owners prepare bookkeeping and tax packs with Chartered Accountant insight before qualified sign-off. Start a free trial for review-ready drafts — we prepare packs; we do not manage your HMRC agent MFA settings or file client returns on your behalf.

Start a free trial →

Related reading

See our earlier MFA opt-in deadline briefing and the tax adviser registration countdown. Use the free tax calculator only for high-level Income Tax and National Insurance planning.

Open free tax calculator (Ireland & UK) →