RBC Express Login: Step-by-Step Sign-in Guide for the Commercial Portal
The RBC Express Login is the sign-in gateway for Canadian commercial clients reaching the Royal Bank of Canada commercial banking portal. This RBC Express Login guide covers the five-step procedure, the six most common error codes, the browser and operating system support matrix, the Company Administrator unlock workflow and the security practices that keep RBC Express Login sessions safe. No login form lives on this page — this is a guide.
The RBC Express Login is distinct from retail RBC Online Banking sign-in. Personal customer credentials cannot authenticate the RBC Express Login and commercial credentials cannot authenticate retail sign-in. The RBC Express Login requires Client Card, Service Card, password and RBC Secure Key token. The RBC Express Login arrives pre-configured in the welcome package from your RBC Relationship Manager.
Back to RBC Express Home Phone 1-800-769-2555
Who Needs an RBC Express Login
The RBC Express Login is commercial-only. Personal customers use the separate retail RBC Online Banking sign-in.
Commercial Clients Only
The RBC Express Login gateway authenticates Canadian businesses with active RBC treasury services agreements: small business, mid-market corporate, large corporate, not-for-profit, public sector and regulated financial institution clients. Every designated user at a commercial client receives their own RBC Express Login credentials via the welcome package and activates through the first-time flow.
Not for Personal Customers
The RBC Express Login does not accept retail RBC Client Card numbers. A personal banking Client Card cannot authenticate to the RBC Express Login engine — attempts return error E-101. Personal customers reach their accounts via rbcroyalbank.com. If you are unsure whether you need the retail sign-in or the RBC Express Login, phone the RBC Express Service Centre at 1-800-769-2555.
RBC Express Login Pre-Requisites
Four items ship in the welcome package. All four are required for the RBC Express Login to succeed.
Client Card Number
16 digits. Identifies your organisation to the RBC Express Login engine. Shared across every delegated user in your organisation — each user has the same Client Card number but a different Service Card. Keep the Client Card secure; do not paste it into email, unmanaged cloud notes or shared spreadsheets.
Service Card Number
4 digits. Identifies you individually within the Client Card hierarchy. Every delegated user has a unique Service Card provisioned by the Company Administrator through user management. The RBC Express Login engine binds Service Card to role-scoped permissions at authentication time.
Password + RBC Secure Key
Password is 8 to 32 characters with complexity requirements. RBC Secure Key is a hardware token or mobile app providing a 6-digit time-limited code (30-second rotation). Both are required for every RBC Express Login attempt. The Secure Key binding is per-user and per-device — re-binding requires Company Administrator action or a phone call to 1-800-769-2555.
The Five-Step RBC Express Login Procedure
Every authenticated RBC Express Login session follows the same five-step flow. Two minutes from start to dashboard.
- Open the RBC Express Login page. Launch a supported browser — Chrome, Edge, Firefox or Safari (current or previous major version) — and navigate to rbcexpress.at. Click the RBC Express Login button. The surface renders over TLS 1.3; older TLS versions are rejected.
- Enter your Client Card number. Type the 16-digit Client Card number as issued in the welcome package. The RBC Express Login surface masks the entry for shoulder-surfing protection and does not auto-complete from browser history on shared workstations.
- Enter your Service Card number. Type your 4-digit Service Card number. The RBC Express Login engine pairs Service Card to Client Card and loads your role-scoped permissions for evaluation on every subsequent action in the session.
- Enter your password. Type your 8- to 32-character password. On a shared workstation or kiosk select the RBC Express Login option "do not remember this device" so session cookies are purged on sign-out. Passwords rotate every 90 days by default.
- Approve the RBC Secure Key challenge. Enter the 6-digit code from your RBC Secure Key hardware token, or approve the push notification from your RBC Secure Key mobile app. The code rotates every 30 seconds. On success the RBC Express Login completes and your role-appropriate dashboard renders.
RBC Express Login Error Code Reference
Six error codes cover 95 percent of RBC Express Login support tickets. Match the code to the cause and take the resolution action.
| Error Code | Cause | Resolution | Phone Action |
|---|---|---|---|
| E-101 | Invalid credentials | Verify Client Card, Service Card, password | Call 1-800-769-2555 |
| E-204 | Secure Key out of sync | Re-sync token via prompt or app settings | Call 1-800-769-2555 |
| E-301 | Account lockout (5 failed attempts) | Company Administrator unlock | Call 1-800-769-2555 |
| E-402 | Expired password | Reset via forgot-password flow | Call 1-800-769-2555 |
| E-503 | Network or TLS handshake failure | Verify TLS 1.3 and retry | Call 1-800-769-2555 |
| E-604 | Browser unsupported | Upgrade to supported browser | Call 1-800-769-2555 |
Company Administrator Unlock Workflow
After five failed RBC Express Login attempts the account locks. Unlock is by your Company Administrator or the RBC Express Service Centre.
The Company Administrator opens user management, selects the locked user, verifies identity through internal process (often a verbal or email confirmation of the user requesting unlock), clicks Unlock and observes the audit log entry. The locked user can immediately retry the RBC Express Login. If the password was forgotten in addition to the lockout, the Company Administrator triggers a password reset that emails a one-time reset link to the user's registered email. The reset link expires in 15 minutes per OSFI B-13 technology and cyber risk guidance.
If the Company Administrator is unavailable, the locked user phones the RBC Express Service Centre at 1-800-769-2555 and answers identity verification questions. Service Centre unlock is logged with agent identity and phone-call reference number. The verification bar is intentionally high to defeat social-engineering attempts against the RBC Express Login unlock path.
Portal Mechanics
- RBC Express Login requires Client Card (16 digits) + Service Card (4 digits) + password + RBC Secure Key challenge.
- Five-step sign-in flow: open, Client Card, Service Card, password, Secure Key. Two minutes end-to-end.
- Six primary error codes: E-101 invalid credentials, E-204 Secure Key sync, E-301 lockout, E-402 expired password, E-503 network, E-604 browser.
- Account locks after five failed RBC Express Login attempts; unlock by Company Administrator or 1-800-769-2555.
- Supported browsers: current and previous major Chrome, Edge, Firefox, Safari on Windows 10/11, macOS 13+, ChromeOS, iPadOS 16+.
Browser and Operating System Support Matrix
Match the RBC Express Login supported stack before attempting to sign in — unsupported browsers return E-604.
Windows
Windows 10 and Windows 11. Chrome, Edge and Firefox — current or previous major version. TLS 1.3 enforced at the RBC Express Login handshake. Antivirus and endpoint protection compatible with modern browsers. Corporate group policy must allow session cookies for rbcexpress.at to persist the authenticated session.
macOS
macOS 13 Ventura and later. Safari, Chrome and Firefox — current or previous major version. The RBC Express Login passes Safari Intelligent Tracking Prevention requirements. Apple Silicon and Intel architectures both supported. macOS Keychain can store the password at the user's discretion, though shared-workstation policies should disable.
ChromeOS & iPadOS
ChromeOS stable channel on Chromebook hardware — Chrome browser current version. iPadOS 16 and later on iPad — Safari current version. The RBC Express Login surface adapts touch targets for iPad. Both platforms enforce TLS 1.3. iPadOS Safari supports the full RBC Express Login flow including Secure Key mobile app integration.
Security Tips for the RBC Express Login
The RBC Express Login defends against the most common commercial credential attacks when used as designed.
Never share RBC Express Login credentials — each user has their own Service Card for audit attribution. Never sign in from unverified public Wi-Fi — use a cellular tether or a trusted VPN. Never click RBC Express Login links in unexpected emails — type rbcexpress.at into the browser address bar. Never enter Secure Key codes into any surface other than the authenticated RBC Express Login page — phishing sites try to harvest codes for real-time man-in-the-middle attacks. Watch for the TLS 1.3 padlock and verify the domain is rbcexpress.at before completing any step of the RBC Express Login.
Rotate your password when prompted (every 90 days by default). Report any unexpected RBC Express Login notification — a sign-in alert when you did not attempt to sign in indicates someone has at minimum your Client Card and Service Card. Phone the RBC Express Service Centre at 1-800-769-2555 immediately for fraud investigation. Revoke RBC Secure Key tokens through user management when a team member leaves the organisation — best practice is before their final working day.