HMRC Agent MFA Is Live: Lockout Prevention Checklist for Practices

Today — 19 August 2026 — HMRC activates multi-factor authentication on agent services accounts (ASA) and online services accounts (OSA) for agent IDs that opted in by 31 July. HMRC’s Tax Agent’s Handbook makes the operational point clear: once MFA is active, sign-in requires a one-time access code after the Government Gateway user ID and password.

Shared logins are the common failure mode. Every person who signs in needs MFA enrolled, or the firm risks lockouts on client work while MMTAR tranche-two applications and mid-August filings continue. This briefing is the ops checklist after activation — not another countdown.

HMRC’s recommended preparation steps

Check and update existing MFA settings — an option may already exist from MTD for VAT or another service, and access codes go to the contact details saved when that option was set up. Add a second method so a lost phone does not freeze the practice.

Give each staff member individual sign-in credentials. Set up at least two administrators so MFA resets can be managed internally without waiting on HMRC for routine access issues. Remove accounts for leavers. Prefer an authenticator app as the primary method, with text or voice as a documented backup where appropriate.

Day-of and post-activation habits that prevent lockouts

Use the “Remember me” option only on trusted devices — it reduces code prompts for seven days on the same device and browser, but a different Gateway ID, device, or browser still demands a fresh code.

If third-party software automates the sign-in journey, contact the vendor now. HMRC has notified developers; MFA can break brittle automation even when MTD submissions through software continue as normal.

Firms that did not opt in still treat today as a live rehearsal. Remaining accounts activate automatically between 28 September and 15 October 2026, and HMRC will not give a firm-specific date inside that window.

Action checklist

Enrol authenticator apps for every opted-in user and store a written backup method per person.

Confirm two administrators can reset MFA options for fee-earners.

Test ASA and OSA sign-in on a quiet matter before peak filing hours.

Diary autumn automatic activation prep for any IDs still outside today’s cohort.

How FinnAccountings helps while access changes

When partners spend activation day on MFA, clean ledgers keep client deadlines moving. FinnAccountings helps Ireland and UK practices prepare bookkeeping and tax packs with Chartered Accountant insight before you or your ICAEW/ACCA or Chartered Accountant (Ireland) adviser files. We prepare review-ready drafts — we do not manage HMRC agent MFA or Government Gateway credentials.

Start a free trial →

Related reading

Read this morning’s activation-day briefing for who flips today versus autumn.

HMRC agent MFA activates 19 August →

Firms waiting for autumn automatic activation should keep the September–October window briefing.

HMRC agent MFA autumn activation window →

Keep MMTAR tranche-two applications moving beside MFA troubleshooting.

MMTAR: 4,000+ applications as tranche two opens →