When people hire a bookkeeper, the first awkward question is usually "So... do I just give you my password?"
No. Please don't. Sharing your login means the bookkeeper can do anything you can do, everything they do looks like you did it, and your bank may treat it as a breach of its terms if something goes wrong. It also makes it very hard to cut off access later without changing passwords on everything you own.
The good news: every major accounting, banking and payroll tool lets you give someone their own access, with limits. This guide goes system by system. It assumes no technical background.
The three rules
- Everyone gets their own login. No shared usernames, ever. It's the only way to know who did what.
- Give the least access that does the job. Your bookkeeper needs to see bank activity; they probably don't need to send wires.
- Know how to take it back. Keep a list of every system you gave access to. When the engagement ends, remove access the same day.
These rules are the heart of internal controls for small business.
Step 1: Make a list of what the bookkeeper needs
Typical access for monthly bookkeeping:
| System | Typical access needed | Can they move money? |
|---|---|---|
| QuickBooks Online (or Xero) | Accountant user | Not by itself |
| Bank accounts | View activity and download statements | No |
| Credit cards | View activity and statements | No |
| Payroll provider | View reports, or run payroll if they do payroll | Only if they run payroll |
| Bill pay tool | Enter bills, not release payment | No, unless you decide otherwise |
| Payment processors (Stripe, Shopify, PayPal) | View reports | No |
| Shared document folder | Upload and view | No |
Write yours down. Keep it in a safe place: you'll use it again when access needs to change.
Step 2: QuickBooks Online, invite them as an accountant
Intuit's help pages describe this process [1]:
- Sign in as the primary admin or a company admin.
- Go to Settings (gear icon), then Manage users.
- Open the Accountants tab (some versions call it Accounting firms).
- Click Invite and enter your bookkeeper's email address or their firm's user ID.
- They'll get an email and accept. Their status changes from Invited to Active.
Why this way: Intuit's help notes that accountant users invited this way don't count toward your plan's user limit [1], and the bookkeeper uses their own QuickBooks Online Accountant login. You can remove them from the same screen at any time.
For other staff (an office manager, a part-time AP clerk), add them as regular users under Manage users with a role that limits what they can see and do. Admin roles can do almost anything, so give them sparingly. Higher QuickBooks plans offer more detailed roles.
Using Xero? Xero also lets you invite users with different roles from its user settings. The same rules apply: own login, least access.
Step 3: Your bank, view-only if possible
Banks differ a lot, so check what yours offers. Options, from best to simplest:
- A separate user with view-only rights. Many business online banking platforms let the admin add users with permissions such as view balances, view transactions and download statements, without payment rights. Look for "user management" or "manage users" in your business banking settings, or call your bank.
- Accountant or third-party access. Some banks have a specific option for accountants.
- Statements and bank feeds only. Connect the bank feed to QuickBooks yourself (so transactions flow in), and share monthly PDF statements through a secure folder. The bookkeeper never logs into your bank at all.
What you should never do: give them your own bank login, or your one-time security codes.
Should the bookkeeper be able to pay bills? Only if you've set up approvals so they can't pay something without another person's sign-off. Our guide to setting up a bill approval workflow covers how.
Step 4: Payroll, reports access or a payroll role
Most payroll providers let you add an accountant user with access to reports. If your bookkeeper runs payroll for you, give them a payroll admin role, but keep bank detail changes and new employees on an approval step where your provider supports it. Changed direct-deposit details are a common fraud target.
Step 5: Apps and payment processors
- Stripe, Shopify, PayPal, Amazon: add team members with reports-only or limited roles, so they can download payout and fee reports.
- Expense and card tools: add them as a bookkeeper or accountant role if offered.
- Bill pay tools: a role that can enter and code bills but not release payment.
Our guide to the small business accounting tech stack maps which tools usually connect to what.
Step 6: Share documents securely
Don't email bank statements and payroll reports as attachments back and forth for years. Set up one shared folder (your bookkeeper's client portal, or a shared drive folder) with:
- Bank and card statements, by month
- Payroll reports
- Loan statements
- Contracts and leases your books depend on
At year end, this same folder makes your CPA's life easier. See what your CPA needs from you.
Step 7: Turn on security for everyone
- Multi-factor authentication on every account (your own and every user's).
- Unique email per user, not a shared "accounting@" login for three people.
- Alerts from your bank for new payees, changed details and large payments.
Step 8: Remove access when it ends
When you change bookkeepers, or a staff member leaves, go down your list from Step 1 on their last day:
- QuickBooks: Settings, Manage users, remove the accountant or user.
- Bank: delete their user.
- Payroll, bill pay and apps: remove or deactivate.
- Shared folders: remove their access.
Switching bookkeepers mid-year? Our guide to switching bookkeepers mid-year covers the handover so nothing falls through the gap.
Questions to ask any bookkeeper about access
- Which systems do you need, and what level of access in each?
- Will you ever move money? If so, what approval do you need from us first?
- Who on your team will see our data?
- How do you store our documents, and what happens to them if we part ways?
- Do you use multi-factor authentication on your own accounts?
More questions worth asking: questions to ask an outsourced accountant.
How ABFI handles access
ABFI works through accountant user invitations, view-only bank access or bank feeds, and a secure document folder. We don't ask for your personal logins. Any payment work runs through the approval rules you set. See our privacy policy for how client data is handled, and how to outsource accounting if you're weighing it up.
Keep reading
- Internal controls for small business
- How to set up a bill approval workflow
- Switching bookkeepers mid-year
Sources
- Intuit, "Invite accountant users to your QuickBooks Online company", quickbooks.intuit.com/learn-support/en-us/manage-subscription-and-users/invite-or-remove-an-accountant/00/262158. Checked November 6, 2026.
- Intuit, QuickBooks Online Help, search "User roles and access rights", quickbooks.intuit.com/learn-support. Checked November 6, 2026.
Questions owners ask
Should I give my bookkeeper my QuickBooks password?
No. Invite them as an accountant user so they have their own login, their actions are recorded under their name, and you can remove them at any time.
Does adding my accountant use up a QuickBooks user seat?
Intuit's help says accountants invited through the Accountants tab don't count toward your plan's user limit.
Can my bookkeeper have read-only bank access?
Often, yes. Many business banking platforms let you add users who can view and download statements without payment rights. Check your bank's user settings or call them.
What if my bank doesn't offer separate users?
Connect the bank feed to QuickBooks yourself and share monthly statements through a secure folder. The bookkeeper never needs your bank login.
How do I remove a former bookkeeper's access?
Go through every system on your access list on their last day: QuickBooks, bank, payroll, apps and shared folders.
Want a bookkeeper who never asks for your password?
ABFI works with its own accountant logins, view-only access and your approval rules. Start with a complimentary Business Accounting Diagnostic.