Access & security

Security: how we access your books safely.

QBSpecialist accesses your books through QuickBooks Online's accountant user — access you invite and can remove yourself at any time. We never take over your primary admin, never store your passwords, and never ask for banking logins. A small practice keeping US business hours handles your file.

Call (850) 842-6767 Get your free review

Last reviewed October 2026 by a Certified QuickBooks ProAdvisor

Accountant-role access only
No primary-admin transfer
No stored passwords

What access you actually give us

Trusting someone with your books means trusting them with your access. Here is exactly what access we ask for, what we can and cannot do with it, and how you keep control of it from the first invite to the last.

You give us accountant-user access to your QuickBooks Online file — a role you invite and can remove yourself — never your primary-admin login, and never your bank or credit-card passwords.

Security starts with asking for less, not more. Rather than sharing a password or making us an owner, you invite us into the accountant user QuickBooks Online was built to offer outside firms: logged, and entirely under your control. That posture is not a policy we bolt on at the end — it is the same discipline our whole methodology runs on, where view-only access wherever the work allows, and your approval before any change, are the defaults, not the exceptions. If a task only needs to read your books, we do not ask to change them.

How the free review sees your file

The free review is view-only: we look at your books with you on a screen-share you control, or through a reports-only user if your QuickBooks Online plan has one. It never gives us edit access. If you approve paid work, your QuickBooks admin invites our accountant user and can remove it at any time. On QuickBooks Desktop, the review is a screen-share you control or a copy of the file.

See how review access is controlled. The free review starts with a written reply, then a screen share you control or a supported reports-only role.

Which of the two depends on your plan. Intuit lists reports-only users on QuickBooks Online Plus and Advanced, and says reports-only users are not available on Simple Start or Essentials (Intuit, "Learn about usage limits", checked October 2026). On those two plans, and on Desktop, the review is a screen-share you control: you drive, we look, and nothing in the file changes.

How QuickBooks Online accountant access works

The accountant-access model

Read this as text

A left-to-right lifecycle in four steps: you send an accountant invite from your own QuickBooks Online account; we work inside that accountant user, every change logged; the role never includes your primary-admin login or any stored banking password; and you remove the access from your own users screen at any time. You hold the key throughout — never the primary admin, never a banking password.

Access is a loop you control at both ends: you open it with an invite and close it from your own users screen, and the role in the middle never carries your primary-admin login or a stored banking password.

QuickBooks Online has a dedicated accountant user that a primary or company admin grants by invitation — Settings → Manage users → Accounting firms — and Intuit says an accountant invited that way doesn't count toward your plan's user limit (Intuit, checked October 2026). You remain the primary admin, and you can remove us from the same screen at any time.

The mechanics matter because they are what make the promise verifiable rather than a matter of trust. The invite is issued from your account, so the record of who has access lives on your side, not ours. Nothing about the accountant role changes who owns the company file — you stay the primary admin the entire time. And because the role is granted this way, taking it back is not a request you file with us; it is a setting you change yourself, and it takes effect the moment you save it.

What we can and cannot see and do

Inside the accountant role we can see and correct your bookkeeping — transactions, the chart of accounts, reconciliations, and reports — while your ownership of the account, and the decision to approve any change, stays with you.

The role exists so an outside specialist can do real bookkeeping without becoming the owner of your business's QuickBooks. In practice that means we can read the file to find what is wrong and, once you approve a written plan, make the corrections a QuickBooks cleanup or catch-up needs. What the role does not do is hand us the keys to the company: we do not become the primary admin, we do not manage your users or subscription, and nothing in your file is changed on our judgment alone. Be clear about one thing: Intuit's help describes no way to narrow what an invited accountant user can do, so the access is broad by design. The controls are therefore the ones you can check — a written plan you approve before any change, our change log, QuickBooks' own audit log, and removal at any time. The free review is the one stage that stays view-only.

How we handle your credentials: we store none

We store none of your credentials — there is no password for us to keep, because QuickBooks Online access runs through its own invite system rather than a shared login.

This is the part people worry about most, so it is worth being plain: we do not keep a file of your usernames and passwords anywhere, because the way we connect does not create one. Accountant access is tied to our own login accepting your invite, not to us holding yours. And we never ask for your online-banking credentials at all — not your bank website password, not a second login, nothing. A reconciliation is done from the bank feed and the statement PDFs already sitting inside QuickBooks; the raw keys to your bank account are neither needed nor wanted. If anyone claiming to work on your books ever asks you to hand over a banking password, that is a reason to stop.

Who works on your file

Your file is handled by one Certified QuickBooks ProAdvisor, the same person throughout — not an outsourced team or a pool — working U.S. business hours (Mon–Sat · 8am–6pm CT), so you always know who has touched the books.

One person on a file means clear accountability — you are not one ticket in a queue of thousands, and the person who made a change can tell you why — the same Certified QuickBooks ProAdvisor from review to hand-back. Every written question gets a written reply within one business day, and the written change log you receive traces back to the specialist who did the work rather than an anonymous back office. The same posture holds no matter which state you run your business from; how we work does not change from one place we serve to the next, because the work lives inside your QuickBooks file rather than at any one desk.

What we never do

The boundary, drawn

Read this as text

Two lanes. Inside the invited accountant role we can see and correct the bookkeeping — transactions, reconciliations, and reports — and any change happens only with your written approval, with least privilege as the default. Off the table, always: your primary-admin login and your banking passwords are never requested and never stored — there is no password for us to keep.

The boundary is structural, not a promise: inside the invited role we can see and correct the bookkeeping — and change it only with your written approval — while your primary-admin login and banking passwords sit permanently off the table, never requested and never stored.

We never ask for your primary-admin login, never store your passwords, never request online-banking credentials, and never change your file without your written approval.

It is easy to say what we do; a security posture is clearer when it also states what is off the table. We will not ask you to transfer ownership of your QuickBooks account, because the accountant role makes that unnecessary. We will not keep your credentials, because our access does not depend on holding them. We will not touch your online-banking logins, because reconciliation does not need them. And we will not make a single correction you have not seen and approved first — the approval step is a security control as much as a quality one, since it means nothing moves in your file without your sign-off on the record.

Where your data goes

Your data stays inside QuickBooks and the limited records an engagement produces — findings, a change log, and the reports we snapshot — and how those are handled is set out in our privacy notice.

The bookkeeping itself happens in your QuickBooks Online file, not in some separate system we copy it into. What we generate alongside it is the paper trail of the work: the written findings from your review, the change log listing every correction, and the before-and-after report snapshots that prove the numbers still tie. Those exist so the work is auditable by you, your CPA, or a lender — and what we collect, why, and how it is handled is documented in our privacy policy. If access, credentials, and the data trail all point the same way, it is by design: you can see it, you can check it, and you can end it at any time.

The controls you can check

A security claim is only worth what you can verify. These are the controls you hold yourself — the access you grant, the least-privilege default, and the one specialist you can actually reach.

Who’s responsible for your file
A Certified QuickBooks ProAdvisor handles your file from the review through the corrections to the hand-back — the same person throughout, never a rotating pool.
About QBSpecialist
Accountant-user access only
You invite us as QuickBooks Online's accountant user and stay the primary admin — no primary-admin transfer, ever.
Logged, and removable by you
Every change we make is recorded in QuickBooks' own audit log, and you can remove our access from your own users screen at any moment.
See how we work
U.S. business hours
A small practice reachable Mon–Sat, 8am–6pm CT, with a written reply within one business day.

Questions about access and security

How do you access my QuickBooks Online file?

Through QuickBooks Online's accountant user, which a primary or company admin grants by invitation from Settings, Manage users, Accounting firms. You stay the primary admin, and you can remove us from the same screen at any time. We never ask you to hand over your primary login.

Do you take over as the primary admin on my account?

No. We work as an invited accountant user, not as the primary admin. Ownership of the account stays with you the entire time, so there is no transfer to reverse and nothing you have to reclaim when the engagement ends.

Do you store my passwords or banking logins?

No. We store none of your credentials. QuickBooks Online access runs through its own invite system, so there is no password for us to keep, and we never ask for your online-banking username or password — the bank feed and statement PDFs already inside QuickBooks are all a reconciliation needs.

Can I revoke your access whenever I want?

Yes, at any time and without asking us. Because access is granted through the accountant invite you control, a primary or company admin removes us from Settings, Manage users, Accounting firms, with Delete in the Action column — Intuit says the accountant can no longer access the file from that moment. When the work is done, we remind you to do exactly that.

Who works on my file?

One Certified QuickBooks ProAdvisor, the same person from the free review to the hand-back — not an outsourced team or a pool — working U.S. business hours (Mon–Sat, 8am–6pm CT). One person on your file means clear accountability for what was changed and why.

How does the free review see my file without edit access?

What do you never do with my QuickBooks access?

We never request your primary-admin login, never store your passwords, never ask for online-banking credentials, and never change your file without your written approval. Every change we make is written in the change log and recorded in QuickBooks' own audit log, and access ends the moment you remove it.

Security: how we access your books safely.

Check our access yourself, any time

Who’s responsible for your file

Accountant-user access only

Logged, and removable by you

U.S. business hours