Online banking in Canada: how to sign up, what you can do and how to stay safe
Quick summary
Online banking lets you use your accounts from a computer or phone. To sign up, you usually register with your bank, enter your debit card number, create a username and password, and accept the terms. Never share your password or PIN, even with family. Sharing it can cost you your protection against fraud. Next step: learn how to pay bills online.
Checked November 11, 2026. Main source: Financial Consumer Agency of Canada: Online banking (modified October 17, 2025, read November 11, 2026). See all 3 sources.
Key facts
- To sign up you usually need
- Your debit card number, a username and password, and to accept the terms
- Source: FCAC, modified October 17, 2025
- TD password rule
- 8 to 32 characters, with at least one letter and one number
- Source: TD page
- Sharing your password
- May make you responsible for unauthorized transactions
- Source: FCAC, modified October 17, 2025
- Public Wi-Fi
- The FCAC says not to bank on it
- Source: FCAC, modified October 17, 2025
What you can do with online banking
The FCAC says online banking lets you use your accounts over the internet, from a computer or a mobile device. It also says online transactions generally cost less than a teller or an ATM, and you can see transactions as they are processed without waiting for a monthly statement.
- See your accounts and your monthly statements.
- Transfer money between your own accounts.
- Pay bills, including future-dated ones, and schedule regular payments or transfers.
- Open a new account or apply for a loan, at some institutions.
- Block your debit and credit cards online, if your bank offers it.
Source: Financial Consumer Agency of Canada: Online banking (modified October 17, 2025, read November 11, 2026).
How to sign up, step by step
The FCAC says that before you use online banking you typically register with your bank, enter your debit card number, create a username and password, and read and accept the terms. Here is how two banks describe it.
| TD EasyWeb | CIBC | |
|---|---|---|
| What you need | A personal TD account. You must be 18 or older and a Canadian resident | A valid CIBC debit or credit card |
| Steps | Select Register. Enter your account details, legal name, date of birth and email. Agree to the terms and answer the security questions. Set a password. A success message confirms it | Select Register for CIBC Online Banking, then follow the screens. The page does not describe each screen |
| Username | Optional. If you choose one, it is 8 to 25 characters with at least one letter | Page does not say |
| Password | 8 to 32 characters, with at least one letter and one number | Page does not say |
| Extra code | Page does not say | A 6 digit code sent by text, email or voice call for sensitive transactions |
Sources: Financial Consumer Agency of Canada: Online banking (modified October 17, 2025, read November 11, 2026); TD: How to register for EasyWeb with a personal TD account (no date shown, last confirmed November 11, 2026); CIBC: Register for mobile and online banking (no date shown, last confirmed November 11, 2026).
How logging in works
On a computer, the FCAC says you go to your bank's own website, enter your username or account number, your password and answers to your security questions, then finish 2 step verification if it is set up on your account. 2 step verification means a second proof that it is you, such as a code sent to your phone. Turn it on if your bank offers it.
On a phone you can use your bank's app or its website in your browser. The FCAC says to download apps and updates only from a trusted source. It also says an app may allow only some transactions, such as transfers and bill payments, while the mobile website generally shows more of your accounts and services.
Source: Financial Consumer Agency of Canada: Online banking (modified October 17, 2025, read November 11, 2026).
Safety rules from the FCAC
- Pick a strong password with upper and lower case letters, numbers and symbols such as # or @. Use a different one for each account.
- Never share your PIN, password or security answers, not even with family.
- Do not bank on public Wi-Fi or a public computer. If you must use a public computer, clear its history and cache afterward.
- Do not let a device remember your password or account number.
- Do not send personal information by email or text, and do not click links in suspicious emails or texts.
- Log in often and look for transactions you do not recognize.
Source: Financial Consumer Agency of Canada: Online banking (modified October 17, 2025, read November 11, 2026).
Why sharing your password can cost you
The FCAC says most banks have policies that protect you from unauthorized transactions, which are transactions you did not make or approve. It also says that sharing your online banking information, even with a spouse, partner, family member or friend, may cost you that protection. An easy to guess password, or not protecting your passwords and PINs from malware, may also make you responsible.
The FCAC suggests you ask your bank about its online banking commitments and its unauthorized transaction policy. Each bank's policy is different, so read yours.
Source: Financial Consumer Agency of Canada: Online banking (modified October 17, 2025, read November 11, 2026).
If something goes wrong
- Call your bank as soon as you see an error or a payment you do not recognize.
- If your bank offers it, block your debit and credit cards online.
- If you lose a phone you use for banking, tell your bank or card provider right away. Also call your mobile provider so they can block the phone.
- Read your account agreement and your bank's online banking agreement for other steps.
- If you were scammed, follow our steps and report it.
Source: Financial Consumer Agency of Canada: Online banking (modified October 17, 2025, read November 11, 2026).
How often to change your password
TD's page says to change your password about every 90 days to keep your account secure. The FCAC page did not give a time. Use the rule your bank gives you, and change it right away if you think someone else has it.
Sources: TD: How to register for EasyWeb with a personal TD account (no date shown, last confirmed November 11, 2026); Financial Consumer Agency of Canada: Online banking (modified October 17, 2025, read November 11, 2026).
Check what you learned
2 quick questions. Nothing is saved or sent.
1. Should you bank on public Wi-Fi, per the FCAC?
2. What may happen if you share your online banking password, even with family?
Questions people ask
How do I set up online banking?
The FCAC says you usually register with your bank, enter your debit card number, create a username and password, and accept the terms. Use your own bank's website or app, and ask a branch if you are unsure.
What do I need to register for online banking?
TD says a personal TD account, and that you are 18 or older and a Canadian resident. CIBC says a valid CIBC debit or credit card. The FCAC says your debit card number.
Is it safe to bank on public Wi-Fi?
The FCAC says not to use public Wi-Fi or public computers for banking.
Can I share my online banking password with my spouse?
The FCAC says sharing your online banking information, even with a spouse or family member, may cause you to lose protection from unauthorized transactions. Our joint account guide covers a safer way to share money.
What is 2 step verification?
A second check after your password, such as a code sent to your phone. The FCAC says to complete it at login if it is set up on your account. CIBC sends a 6 digit code for sensitive transactions.
What should I do if I lose my phone?
The FCAC says to tell your bank or card provider right away, and to contact your mobile provider so they can block the phone.
How often should I change my banking password?
TD's page says about every 90 days. The FCAC did not give a time. Change it right away if you suspect someone has it.