How to Get Tax Clients to Use Your Secure Portal

You paid for a secure client portal. So why are people still emailing W-2s, texting photos of IDs and asking whether you got their documents?

Because the portal isn’t the workflow yet. It’s just another option.

The fix is less about technology and more about making the secure way the easiest way.

Give clients one clear starting point

Send one link, one simple set of instructions and a short checklist of what the client needs to upload. Don’t ask them to hunt through three emails for the portal address.

Make the first message sound human: “Please upload your documents through our secure portal. Once you’ve finished, send us a message there so we know your file is ready for review.”

If an account is locked, give the client a clear support contact and another approved secure option—not permission to send an unprotected email attachment.

One simple improvement is to send a short “what happens next” message as soon as someone receives portal access. Tell them what to upload, whether phone photos are acceptable, how to mark their submission complete and when the office will review it. Clients tend to improvise when those details are missing.

If your portal supports it, customize the checklist by situation. A wage earner and a rental owner shouldn’t receive identical document requests. Keep the request short enough that someone can finish it on a phone.

Test the portal like a client

Before the season, open a test account on your phone. Can you accept the invitation? Set up authentication? Upload a PDF and a photo? Recover an account safely?

If you struggle to do it, a first-time client will too. Write the two-minute version of the instructions and test them with someone who doesn’t already know your systems.

Staff accounts that access taxpayer data need appropriate security safeguards, including MFA. Use individual logins, access permissions and a consistent offboarding procedure. Your portal vendor doesn’t replace your firm’s responsibility for protecting information.

Try the same workflow with a team member who didn’t configure the portal. Have them pretend to be a new client, then a returning client who’s forgotten their password. Ask where they got stuck. If account recovery takes several phone calls, fix it before February. The more difficult the secure channel feels, the more often clients will take the easy but unsafe route.

Make uploads part of the return workflow

Every incoming file needs an owner. Decide who checks for new uploads, who marks a file complete and who asks for missing documents.

Use status-based reminders instead of sending “Just following up” every three days. Be specific: “We’re missing your second W-2 and mortgage interest statement.” Keep sensitive details out of message subject lines.

And make “ready for preparation” a real status. A half-complete file shouldn’t sit on a preparer’s desk pretending to be in progress.

What if someone emails documents anyway?

Respond kindly and redirect: “For your protection, please use the secure upload link next time. We’ll make sure your documents are handled through the approved process.” Follow your firm’s retention, deletion and incident-handling procedures rather than assuming an emailed attachment is harmless.

The goal isn’t to scold clients. It’s to build a routine they can follow without thinking about it.

Pick one person each day to check uploads and flag incomplete files. When a client uploads the missing W-2, the file should move forward without relying on the preparer to notice it between appointments. The client should receive a clear confirmation once the firm has reviewed the upload—not an automatic promise that the return is already complete.

Your best portal metric isn’t the number of invitations sent. It’s how many clients submit a complete, usable file without unnecessary back-and-forth.

The takeaway: A secure portal works only when the process around it works. Use the Client Organizer Template to standardize the information clients submit; if you’re evaluating portals and other systems, the Tax Practice Toolkit 2026 compares the software categories a firm needs.

Official source: IRS — Written Information Security Plans are essential.

For general education for tax professionals; reviewed October 23, 2026. Confirm current forms and guidance before relying on tax-law details.