E-filing your taxes online is fast and convenient, but it also means putting sensitive personal and financial data out into the digital world. Hackers and scammers are always looking for ways to steal taxpayer information, so keeping your information secure matters. At TaxAct®, security is a top priority for us. We work hard to protect your data with industry-standard safeguards, but it’s also important to do your part by practicing smart online safety habits.
Here are 10 practical steps you can take to help protect your personal information, especially during tax season.
1. Keep your software updated.
It’s a good idea to install updates for your computer’s operating system, browser, and apps as soon as they become available. Why? Updates often include security patches that fix weaknesses hackers could exploit. To make life easier, try enabling automatic updates and scheduling regular antivirus scans.
2. Use strong, unique passwords.
TaxAct requires password complexity to help with sign-in security. A strong password mixes uppercase and lowercase letters, numbers, and symbols. The longer the better! Consider also using a password manager to generate and safely store unique logins for each account.
3. Avoid auto logins.
Convenience can backfire. When possible, opt to skip browser and app “remember me” features that automatically fill in usernames and passwords. If your device is ever lost, stolen, or hacked, those auto logins are like leaving the front door to your house wide open.
4. Turn on multifactor authentication (MFA).
TaxAct uses MFA for an extra layer of sign-in security. When you log in, you’ll need to enter a one-time code sent to your phone or generated through an authenticator app. That way, even if someone guesses your password, they can’t access your account without that code.
5. Use and update your security software.
Security software isn’t much help if it’s sitting idle. Make sure your antivirus and firewall are always enabled and set to update automatically — this helps close the gaps that hackers try to exploit. It’s also a smart move to regularly back up and encrypt sensitive files (like tax records, school transcripts, and college applications), so they stay protected even if your computer is compromised. And don’t forget about shared devices! Every family member should have comprehensive antivirus protection on their laptops, tablets, and phones.
6. Watch out for suspicious links and downloads.
Never click links, open files, or download attachments from unknown sources. Scammers often disguise malicious files to look legitimate. Always remember: If that free software offer feels too good to be true, it probably is!
7. Double-check website security before sharing info.
Before entering personal information online, always make sure the website is legitimate and secure. Do not proceed if you receive warnings from your browser indicating that a connection is not secure or that a website certificate has expired.
8. Type in URLs directly.
Instead of clicking links in emails or texts, especially from unknown sources, type the site’s address directly into your browser. This helps you avoid phishing attempts designed to trick you into handing over sensitive data.
9. Secure your Wi-Fi network.
Lock down your home Wi-Fi with a strong password and WPA3 encryption if available. It’s also a good idea to avoid using unsecured public Wi-Fi to file taxes or access your financial accounts. If you need to connect on a public network, use a virtual private network (VPN) for an extra layer of protection.
10. Stay alert for signs of identity theft.
Identity thieves sometimes use stolen Social Security numbers (SSNs) to file fake tax returns. Warning signs someone may have filed a tax return using your SSN include:
The IRS notifies you that multiple tax returns were filed under your SSN.
You get a notice about income from an employer you don’t recognize.
You’re told you owe taxes for a return you didn’t file.
Unfortunately, new scams pop up every year (like this text message scam from early 2025), so it’s important to stay vigilant. Always treat unsolicited requests for personal information with a healthy dose of skepticism for your own protection.
If you suspect tax-related identity theft, report it right away at IdentityTheft.gov and follow the steps outlined on the IRS’s Report a tax scam or fraud page. These resources walk you through how to file Form 14039 (Identity Theft Affidavit), what to do if your return is rejected because of a duplicate SSN, and how to handle other types of tax scams or fraud.
How TaxAct protects your information
Security doesn’t stop with you. At TaxAct, we use the following sign-in features to be sure it’s really you accessing your account:
Password complexity requirements
Multifactor authentication
Trusted device verification
Plus, you can count on the following important safeguards during the filing process with us:
TaxAct encrypts your data whenever it’s sent to us or the IRS using industry-standard Secure Sockets Layer (SSL) protocol.
The IRS will notify you if a tax return has already been filed using your Social Security number. This notice could be the result of something simple, like a typo, or it might indicate potential identity theft.
TaxAct is also enrolled in VikingCloud’s Trusted Commerce® remote compliance program to validate compliance with the Payment Card Industry (PCI) Data Security Standard (DSS). This helps ensure the safety of your payment information.
When you see the lock icon in your browser while using TaxAct, you can be confident your information is encrypted and securely transmitted.
FAQs about online security and taxes
The bottom line
Cybersecurity threats, unfortunately, aren’t going away, but you can outsmart scammers and identity thieves by taking proactive steps to keep your personal information secure. By combining smart personal habits with TaxAct’s strong security measures, you’ll be better equipped to keep your sensitive tax information safe this filing season.
This article is for informational purposes only and not legal or financial advice.
All TaxAct offers, products and services are subject to applicable terms and conditions.
All trademarks not owned by TaxAct, Inc. that appear on this website are the property of their respective owners, who are not affiliated with, connected to, or sponsored by or of TaxAct, Inc.
