Written by Lorrie Contreras | Last updated: February 2026
Tax preparation requires sharing some of your most sensitive personal information: Social Security numbers, bank accounts, income details. How that information is transmitted matters.
Why Email Is Risky for Tax Documents
Standard email is not encrypted end-to-end. When you email a W-2 or tax document:
- The document may pass through multiple servers
- It can be intercepted if any server is compromised
- It sits in your Sent folder and the recipient's Inbox indefinitely
- If either email account is hacked, the documents are exposed
The IRS specifically warns against emailing sensitive tax information in Publication 4557 (Safeguarding Taxpayer Data).
How Secure Portals Work
A secure client portal:
- Encrypts documents during upload and storage
- Requires authentication to access
- Limits access to authorized users
- Provides audit trails showing who accessed what
- Can expire access to documents after a period
What You Can Do to Stay Safe
- Use only the secure document-delivery method your preparer confirms by phone
- Enable multi-factor authentication when available
- Use strong, unique passwords for any document service you are instructed to use
- Never email Social Security numbers or complete tax returns
- Report any suspicious activity immediately
IRS Guidance on Data Protection
The IRS requires all tax professionals to have a written information security plan. IRS Publication 4557 outlines the framework. We follow these guidelines as part of our commitment to protecting your information.
Learn more about our security practices or contact us with questions.