Share logins securely and meet HMRC's MFA requirement
HMRC is activating multi-factor authentication (MFA) on all agent accounts by October 2026. Proton Pass keeps your shared logins compliant and your team working without disruption.
For a limited time: get 50% off your first year of Pass Professional.*
*Offer valid until September 30, 2026, on Pass Professional annual plans. Discount is calculated on our standard monthly subscription price.
What is HMRC MFA for agent accounts
Agent accounts have increasingly been targeted by attackers. To add an extra layer of protection, HMRC is rolling out multi-factor authentication (MFA) across the Agent Services Account (ASA) and Online Services Accounts (OSA), the accounts firms use for Self Assessment, Corporation Tax, and PAYE.
is the automatic activation window
Any account not already set up gets MFA switched on automatically, on HMRC's schedule, not yours.
are both covered
MFA applies to both the newer Agent Services Account and the Online Services Accounts most firms use day to day.
are still compliant
Shared logins and authenticator codes still meet HMRC's MFA requirement. You don't need to switch to individual accounts.
Why use a password manager to share accounts
Control and oversight
Situation: Logins shared informally lack control and oversight. If a client flags an unauthorized change, or a data incident happens, there's no way to see which staff member did what.
Solution: Pass gives every team member their own identity behind the one shared login, with a complete audit trail of who accessed what and when.
Fast, secure offboarding
Situation: When someone leaves, you can't revoke just their access. Everyone has the same password, so changing it means re-sending the new one to every remaining employee.
Solution: Rotate the password in a single action, and it syncs automatically to everyone else with access, with no manual reset for the rest of the team.
Credentials that stay protected
Situation: Everyone signs in with the same MFA token from one shared QR code, and that code ends up passed around in messages or saved as screenshots, resulting in security gaps.
Solution: Pass stores and shares the login and its MFA codes securely, so nothing needs to circulate informally between team members.
Organization-wide credential security, simplified
No matter your industry or company size, Proton Pass delivers powerful password management without complexity or high costs. It helps teams secure logins, enforce policies, and maintain visibility across accounts, while making daily work faster and simpler.
Secure sharing made easy for everyone
With an intuitive interface, secure sharing, built-in 2FA, and autofill across all devices, Proton Pass makes it easy for your team to adopt secure sharing from day one.
Full control and visibility
Proton Pass gives your team full visibility and control: manage users and groups, access detailed audit logs, monitor weak and compromised credentials — all from a central admin dashboard.
Simple access control, minimal overhead
Rotate shared credentials in a single action, and they sync for the whole team automatically. SCIM and SSO mean granting and revoking access takes minutes, not an afternoon.
Built for trust and compliance
Open source and end-to-end encrypted, Proton Pass meets GDPR requirements, is ISO 27001 certified and SOC 2 Type II audited, with all data stored under Swiss jurisdiction.
Join 100,000+ organizations that trust Proton
Elemnta, Australia
Financial Services
“One thing that I am really happy with what Proton Pass offers is the logs that you can actually see who has used it, who has items filled.”
GILAI, Switzerland
IT Services
"For both my colleagues at GILAI and some of the offices we work with, the principal feature that we use is sharing passwords and vaults between teams."
Morning, France
Real Estate Services
"It's around 80 people, and they share one vault. All their accounts are shared, because different managers switch between offices."
Novalytica AG, Switzerland
Consulting
“We create vaults for each customer or for each project, and to share the credentials with each other."
From the team behind Proton Mail
With Proton Pass, your organization’s credentials benefit from the same battle-tested end-to-end encryption that has protected Proton Mail for over a decade.
Talk to our team
Get a consultation on how Pass helps to keep your firm compliant, and get 50% off your first year.
Frequently asked questions about business password managers
- How does Proton Pass for Business keep my company’s data secure?
- Is Proton Pass secure enough for regulated industries?
- Can I securely share passwords with my team?
- Is it actually compliant for our whole team to share one login?
- What if we have multiple offices or several Government Gateway IDs?
- Can Proton Pass for Business integrate with our existing identity provider?
- What are the conditions of this special offer?