Identity and access management for accountancy firms

Stop your team hunting for Government Gateway codes.

My1Login signs your team in to shared Government Gateway and Agent Services accounts with one click, generates HMRC's one-time code and fills it in for them, and records who opened which client's account, and when. Nobody needs the phone the code was sent to.

  • One-time codes generated and filled in for you
  • Passwords hidden, so leavers keep nothing
  • A full audit trail of client access

Trusted by accountancy firms including

  • Azets
  • S&W
  • PKF
  • AAB
  • Johnston Carmichael
  • Kreston Reeves
The problem

Shared HMRC logins were built for one person. Your firm isn't one person.

Most firms share Government Gateway and Agent Services accounts across a team, an office or a whole practice. Add a one-time code that goes to a single phone, and every sign-in becomes a small hold-up and a security gap.

  • Codes on one person's phone

    The access code goes to whoever registered the account. Everyone else has to find them, wait for a text, or ask for it to be forwarded.

    What it leads to: phones passed round the office and codes pasted into chat.

  • Leavers who still know the password

    Anyone who has seen a shared password can use it after they leave, for client payroll and banking as well as HMRC services such as Section 455 reclaims online.

    What it leads to: resetting every shared password whenever someone moves on.

  • No record of who opened what

    When client logins live in a spreadsheet, there's no way to show which person opened which client's account, or when.

    What it leads to: awkward answers for clients, insurers and your professional body.

The fix

One click. Every code. Fully audited.

IT connects My1Login to your directory and adds your shared accounts once. From then on, your team opens a client's account and is already signed in.

  1. One-click access

    Open a client's Government Gateway account from a searchable list, by client, office or team. No passwords typed, and no error page from a saved sign-in link.

  2. The code, generated and filled in

    My1Login generates the one-time access code and enters it, so nobody has to find the phone it was sent to.

  3. A full audit trail

    Every sign-in is logged: who, which client's account and when, ready for a client, an insurer or a regulator.

S&W

Multi-office accountancy firm

For a growing multi-office firm, My1Login has made Government Gateway access far simpler, removing much of the hassle around codes and sign-ins while giving us the visibility and audit trail we need over client access. The support from the team at My1Login to help us structure our solution has been consistently excellent and we see them as valued partners in this rollout.
David Rogers, Director, S&W
Watch

PwC and My1Login on streamlining access to accountancy systems.

A co-presented session on making Government Gateway and other accountancy systems quicker to reach, while closing the security gaps that shared logins open.

Watch the video
What firms find next

Government Gateway is just the start.

Once My1Login is signing your team in to HMRC, the same one-click, hidden-password protection reaches every other system the firm and its clients depend on.

  • Every accounting app

    Xero, QuickBooks, Sage, Dext and your practice management system, all signed in the same way.

  • Client banking and payroll

    Share access to a client's bank or payroll portal with the people who look after them, without handing over the password.

  • Desktop tax software

    Windows desktop applications are covered too, including older software with no modern sign-in.

  • Phishing protection

    Your team can't type a password they've never seen into a fake HMRC or Xero page.

  • Access for the busy season

    Give temporary and contract team members access for January only, and it ends on the date you set.

  • Leavers, in one step

    Remove someone from your directory and their access to every system goes with them. They never knew the passwords.

  • The apps nobody mentioned

    My1Login spots sign-ins to apps IT didn't know about, so they come under the same rules.

  • Something to show clients

    Explain exactly how you protect their logins. It's a point of difference in a pitch.

  • Nothing to register for

    Zero Registration, Zero Login and Zero UI: nobody signs up, signs in to My1Login or learns a new screen, so the whole firm is covered from day one.

  • "Show password" blocked

    My1Login stops the "show password" button on other sites' sign-in pages, so a password people never see stays that way, and leavers can't take it with them.

  • Codes the whole team can use

    One account, one code, many people. My1Login generates the code and fills it in for everyone allowed to use the account, so it never depends on one person's phone. Many password managers can't share codes at all.

  • Code use, ready for review

    See which client portals and apps ask your team for one-time codes, and who signed in when, in one report for compliance reviews.

Built for growth

Growing through acquisition? Bring every new office onto the same access from day one.

Each practice you buy arrives with its own logins, spreadsheets and Government Gateway habits. Standardise them in weeks, not quarters.

See how for growing firms
  • £1,000+saved per person, per year, in sign-in and password reset time
  • <1 hourto set up a newly acquired office's first users
  • 100%of Government Gateway sign-ins through My1Login recorded in the audit trail
  • Since 2007protecting organisations worldwide
Start here

Government Gateway starter

The enterprise password manager with one-time codes generated and filled in: everything you need for one-click, audited access to shared HMRC accounts. Add single sign-on and user provisioning as you grow.

See accountancy pricing
From£4per user, per month, on an annual contractEnterprise password manager £2 + MFA and one-time codes £2

Questions accountancy firms ask first

Does it work with Agent Services Accounts and legacy agent accounts?

Yes. My1Login signs your team in through the Government Gateway sign-in page, generates the access code and enters it, so it works for the agent accounts HMRC is adding multi-factor authentication to, and complements HMRC's move to GOV.UK One Login.

Where does the one-time code come from?

You set the shared account up to use an authenticator app, and My1Login acts as that app. It generates the time-based code and enters it for whoever is signing in, so no single person's phone is needed.

Can we control which clients each person can open?

Yes. Share each account with a person, a team or an office, and choose whether they can only use it or can also see, change or share it.

What happens when someone leaves the firm?

Remove them from your directory and their access goes with it. Because the passwords were hidden from them, there's nothing for them to take away and no shared passwords to reset.

Can we give temporary team members access for the busy season?

Yes. Release an account only between set dates, on set days or during working hours, so access for January ends when January does.

Can My1Login see our clients' passwords?

No. With zero-knowledge encryption the keys are only available inside your firm's network, so nobody outside it can read your stored passwords, including My1Login.

Bring your busiest Government Gateway account to a 5-minute demo.

We'll share it with a team, hide its password and sign in with the one-time code generated and filled in for you. Then we'll show you the log of who used it.

  • 5 minutes, on your own apps
  • A specialist replies within one working day
  • No obligation
Book a 5-minute demoStart a 14-day free trialThe full product, on your own apps.
Book a 5-minute demoFree trial