Keep your username private

Choose a username that doesn’t include sensitive personal information such as your driver’s license number or personal health number.

Do not share your username or password with anyone.

If you think your username or password has been compromised, change it as soon as possible in My Account under Account settings. Contact us right away so we can review your account and take steps to protect it, if needed.

Create strong passwords

A strong password makes it harder for someone else to access your account.

• Use a different password for each of your online accounts
• Make your password long and difficult to guess
• Avoid personal details, such as your name, birthday or pet’s name
• Consider using a passphrase made up of several words and characters
• Consider using a password manager to securely manage your passwords

Remember, no one from your pension plan will ever ask you for your password.

Use two-step verification safely

Two-step verification is required when you sign in to My Account. It provides an additional layer of security by verifying your identity when you sign in.

Only respond to a verification request when you are signing in to My Account. Never approve or respond to a verification request you didn’t initiate.

Keep your contact information up to date in My Account so you can securely access your account.

Watch for phishing

Phishing is a common tactic used by cybercriminals to steal your information. These scams can occur by email, telephone or text message.

Be cautious of:

• Requests for personal or financial information
• Messages that pressure you to act immediately
• Suspicious links or attachments
• Messages from people or organizations you don’t recognize

Take a moment before responding, clicking a link or sharing information. Before clicking a link, check the sender’s email address and hover over the link to see where it leads. If you're unsure about communication that appears to be from your pension plan, use the contact information on the plan website to contact us.

Protect yourself online

Be thoughtful about when and where you provide personal information.

• Avoid accessing sensitive accounts when using public Wi‑Fi.
• Use the security features available on your phone, tablet and other devices.
• Use multi-factor authentication when available. If your email provider doesn’t offer it, consider using one that does.
• Keep your devices and software up to date.
• Be careful what you share with AI. Avoid entering sensitive personal information or account credentials with AI tools.

Keep your documents safe

Your pension statements and other paper documents may contain personal and financial information. Store them securely and shred documents you no longer need before disposing of them.

You can also receive available documents electronically through My Account, providing a secure way to access your pension information.

Make sure you're registered and choose electronic delivery in your My Account settings.

Learn more about staying safe online

The Government of Canada has resources to help you protect your information and stay safe online.

• Get Cyber Safe offers guidance on account security, multi-factor authentication, passwords, devices, public Wi‑Fi and other security topics
• Why you should never give your personal information to AI explains why you should avoid sharing sensitive information, including financial information and account credentials, with AI tools
• Don’t get hooked: understanding phishing and how to stay safe covers current phishing tactics and ways to recognize and respond to them
• Fraud and scams provides information on common scams and how to report fraud