Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to the guide
THE FINANCEBASE List yours

Guide

How to Protect Tax Documents Before Sending Them by Email

By TheFinanceBase Team 10 min read

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use the recipient’s approved secure portal or encrypted message whenever one is available. Ordinary email is not encrypted, according to the IRS. If email is unavoidable, send an encrypted, password-protected copy of the documents, keep identifying information out of the subject and message, and give the password through a separate channel—preferably by phone. Never email an original tax return or answer an IRS notice by email unless the notice or an assigned IRS employee’s specific process tells you to.

Why ordinary email is a poor choice for tax records

A tax return, W-2, 1099, passport copy, driver’s license, or bank record can contain a Social Security number, taxpayer identification number, address, date of birth, wage information, account numbers, and signatures. Standard email does not provide end-to-end protection for that information. A message may pass through several mail systems, remain in sent and received folders, and be copied into backups or archives.

As an Amazon Associate I earn from qualifying purchases.

Encrypting an attachment improves protection for the file itself, but it does not encrypt the subject line or ordinary message body. It also does not automatically remove metadata inside the document. Treat the email as two separate things: the file, which you can encrypt, and the surrounding message, which must contain as little identifying information as possible.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The safest order of preference is:

  • The preparer’s or organization’s secure portal or managed file-transfer system.
  • A reply sent inside an encrypted message system that you opened through the IRS’s secure webpage, when the IRS process specifically supports it.
  • An encrypted, password-protected attachment sent through ordinary email, with the password delivered separately.
  • An unencrypted attachment only when the recipient explicitly accepts the risk and no safer approved method is available. This is the least desirable option.

Start with the recipient’s approved channel

Ask what the recipient actually supports

Before scanning or attaching anything, ask the tax preparer, employer, lender, or agency which portal or transfer method it wants you to use. A secure channel is useful only if the recipient monitors it and can authenticate you. Ask whether access requires an account, a one-time code, or a separate identity check; whether links expire; and whether the recipient can revoke access after downloading.

#1 Best Overall
Kinevolve Mouse Pad for Excel/Word/PowerPoint/Windows Shortcuts – Small Excel Cheat Sheet Desk Pad – 11.8"x9.8" Portable Computer Mousepad – Gaming, Office, Waterproof, Non-Slip, Stitched Edges
  • Compact & Portable Design: This Small Excel, Word, PowerPoint, & Windows Cheat Sheet Mouse Pad measures 11.8" x 9.8", offering a portable mouse pad. Its compact size fits in bags or laptop cases, suitable for professionals, students, or travelers.
  • Multi-Software Shortcut Guide: Featuring essential shortcut keys for Excel, Word, PowerPoint, & Windows, this small mouse pad provides a quick reference for frequently used shortcuts, offering a reference designed to support workflow efficiency
  • Smooth & Precise Surface: The finely-textured surface ensures precise mouse control, allowing for smooth and accurate movement during work or gaming sessions.
  • Durable & Non-Slip Design: This Multi-Software Shortcut Mouse Pad features stitched edges to reduce fraying. The non-slip rubber base helps keep it securely in place, and the water-resistant fabric allows for easier maintenance.
  • Clear Print Quality: Displays high-resolution printing intended to remain legible through regular use and cleaning

Do not rely on an address or link contained in an unexpected message. Verify the person and destination through a phone number or other contact information already on file, such as a prior statement, engagement letter, or the organization’s independently obtained website or telephone directory. Read the address character by character before uploading a file.

Do not assume every cloud link is equivalent

A consumer file-sharing link may encrypt data in transit while the provider can still access stored files. Other services may offer end-to-end encryption, recipient authentication, expiry controls, or download logs. Those features differ by service and plan. Use a cloud transfer method only when the recipient has approved it and you understand who controls access, how the recipient proves identity, whether the link expires, and whether you can revoke it.

IRS rules are stricter than a normal document exchange

Do not email an original return or an IRS notice response

The IRS says not to email an original tax return and not to answer an IRS notice by email. File a return through the normal filing procedure, and follow the mailing address, upload instructions, fax number, or other response method printed on the notice. An ordinary email address is not a substitute for those instructions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Understand the narrow assigned-employee process

The IRS describes a temporary flexibility through October 31, 2026 for a taxpayer or authorized representative working with a specific IRS employee on an ongoing case. The employee must first contact the taxpayer by phone, verify identity, obtain consent, and confirm the email address. This is not permission to initiate a new IRS conversation by sending documents to an address found online.

When the employee sends an encrypted message that you open through the IRS secure webpage, replying within that message encrypts the reply and its attachments. That workflow is different from opening your regular email application and composing a new message. Because the stated date is near and IRS procedures can change, check the current IRS “Sending and receiving emails securely” guidance before relying on this exception.

Rank #2
Office Desk Accessories 2pcs Computer Monitor Memo Board Office Supplies | Computer Monitor Memo Board Computer Sticky Note Holder
  • [MULTIFUNCTIONAL]You'll get 2 pieces computer monitor memo boards that you can stick on the left and right edges of your monitor, and they're the perfect office desk organizers and accessories. Computer monitor side panels desktop organizer are suitable for home work or office,bringing convenience. Desktop memo is used to organize meeting memos, important messages, business cards, planning notes.Paste on the message board to keep track of important things and to-do items to prevent forgetting.
  • [🌟HIGHLY QUALITY] The material of computer screen side note holder is transparent acrylic. Durable, simple, stylish, light weight, easy to use, not easy to fall off or break. This cute office supplies for women desk can be used for a long time. This computer desk accessories is waterproof and dirt resistance, and look simple and stylish. The transparent acrylic sticky note holder as cubicle accessories is easy to notice the context of your sticky notes.
  • [📋Easy to use] Office must haves cool office gadgets for desk ready to tear, easy to install and remove, not easy to leave traces. You only need to peel off the protective film on the surface of the computer side board memo, wipe off the dust on the edge of the computer monitor, and then stick the desk essentials for women office on the right or left side of the tape, and you're done. A perfect gift for your colleagues, friends or classmates and family members or relatives
  • [🏢MULTI-SCENE USE] This desk supplies computer memo board can be applied to home and office, clear your office decor for women, suitable for most computer monitors, screens and cabinets, you can put it where you think, this cute office decor serve as a reminder. Stick on the computer side. It’s a good office gadgets can remind work improve office productivity. Pasted cabinets, dressers, refrigerators, walls, etc as cubicle accessories. To make life more orderly.
  • [💌NOTE] The adhesive force of the computer sticky note holder is very strong. It can not be directly pasted on the computer screen. It should pasted on the black edge of the screen. Narrow edge not recommended!!! If you are not satisfied with your purchase, or if the product is damaged or broken in transit, please let us know immediately. We will promptly solve your problem.

Be skeptical of unexpected IRS email

The IRS says it will not initiate contact by email or require taxpayers to communicate by email. Do not click a link, open an attachment, or provide personal information in an unexpected message claiming to be from the IRS. Report suspicious IRS email to [email protected], then contact the IRS through a known official route if you need to verify a case.

Prepare a safe copy before you send anything

1. Make an inventory of what is genuinely needed

Ask which pages and fields the recipient needs. A preparer may need a W-2 and a specific brokerage statement, not every document in your tax folder. Remove unrelated pages, duplicate scans, blank pages, and documents belonging to another household member unless they are required. Fewer pages create fewer opportunities for accidental disclosure.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Inspect the document for hidden information

Review every page at normal and high zoom. Look for visible Social Security numbers, signatures, account numbers, barcodes, comments, tracked changes, scan thumbnails, and attachments embedded in a PDF. Redact information only when the recipient has confirmed that it is unnecessary; placing a black rectangle over text without permanently removing the underlying text is not a reliable redaction.

File metadata can include an author name, company, creation time, software name, or editing history. Attachment encryption protects the file contents during transfer but may not hide all metadata. Use the application’s metadata-removal or document-inspection function when appropriate, while retaining an unmodified copy for your records.

3. Preserve an unencrypted original securely

Save the original return or scan in a secure location before creating a protected copy. Store it in an access-controlled device or account, not in a shared public folder. The IRS warns that it cannot recover a lost password, so keep the password in a reputable password manager or another secure record that you can retrieve without placing it in the email thread.

Rank #3
Taja To Do List Notepad, Undated Daily Planner for Work and Goal Setting
  • Stay Organized with Ease: Our To Do List Notepad provides multiple sections with plenty of space to jot down all of your important tasks.A versatile office supply perfect for daily task management, helping you keep track of everything that needs to be done and prioritize effectively.
  • Achieve Your Productivity Goals: Begin each day on a positive note, reminding you of your potential, strength, and the significance of staying focused on your goals. Our Daily Checklist Notepad is the ultimate tool to streamline your daily planning and elevate your productivity. With a clear and concise overview of your tasks, you can effortlessly prioritize what truly matters and make consistent strides towards achieving your goals.
  • Reliable and Stylish: Our to do list planner combines functionality with durability. With a transparent PP cover, the inner pages are well-protected from dirt and wear. Additionally, the back cover is crafted with thick paperboard, offering a stable surface for your writing needs. Each notepad includes 52 pages of high-quality, 100gsm paper, which is thick and non-bleeding, resulting in a smooth and enjoyable writing experience.
  • Versatile Use: This daily checklist notepad, suitable for teacher supplies and a wide range of applications, proves invaluable in various settings including work, school, and home. Whether you need to organize your daily tasks, plan a project, or create a grocery list, this notepad serves as the ideal tool. Its compact size ensures easy portability, allowing you to conveniently carry it with you throughout your day.
  • Perfect Present for Anyone: Our Daily To-Do List Notepad is the perfect present for those who value organization and productivity. With its stylish design and versatility, this office desk accessory is also a practical addition to school supplies. Suitable for students, professionals, and homemakers alike, it helps keep tasks and priorities in check effortlessly.

How to encrypt and password-protect the attachment

For one PDF

Adobe Acrobat Pro or Acrobat DC can encrypt PDFs; Acrobat Reader cannot create this protection. In Acrobat Pro or DC, open the copy you intend to send, use the PDF protection or password-encryption command, choose the option that requires a password to open the file, enter a strong unique password, and save the protected copy under a new filename. The exact menu wording varies by Acrobat version, so confirm that reopening the saved file in a separate window prompts for the password before attaching it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not use a password based on the taxpayer’s name, address, birth date, filing year, phone number, or the document filename. A practical minimum for the IRS-described process is 12 characters; a longer passphrase made from unrelated words and symbols is easier to use safely than a short predictable word.

For several files

If the recipient needs multiple files, put only those files into an encrypted archive rather than sending a series of unprotected attachments. CISA identifies office-application encryption and utilities such as WinZip and 7-Zip as examples that can encrypt files or archives. Choose an archive format and encryption setting that the recipient can open, then test the archive on your own device before sending it. Never assume that merely compressing files creates encryption; verify that a password is required to extract them.

Test the protected copy

  1. Close the protected file or archive completely.
  2. Open it as if you were the recipient.
  3. Confirm that a password is required before any page or filename is revealed.
  4. Check that the pages are readable and that no required page was omitted.
  5. Compare the protected copy with the original, then attach only the protected copy.

Write an email that reveals as little as possible

Use a generic subject line

Do not put a Social Security number, taxpayer identification number, full address, phone number, date of birth, or detailed tax matter in the subject. A subject such as “Requested documents” or “Documents for our appointment” is more discreet than “2025 tax return for Jane Doe, SSN 123-45-6789.” Remember that encrypting the PDF does not encrypt this line.

Keep the message body minimal

State only what the recipient needs to identify the request, for example: “Attached is the password-protected file requested for my tax preparation. I will provide the password by phone.” Do not repeat the taxpayer’s identifying details, describe the contents in detail, or paste account numbers into the message. If the recipient supplied a case or client number, use it only when you have verified that the address and process are genuine.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Gogoonike Adjustable Laptop Stand for Desk, Metal Laptop Riser Holder | Portable Desktop Book Stands, Foldable Ventilated Cooling Computer Notebook Stand Compatible with 10-15.6” Laptops, Tablets
  • 【Adjustable & Ergonomic】:This laptop stand can be adjusted to a comfortable height and angle according to your actual needs, letting you fix posture and reduce your neck fatigue, back pain and eye strain. Very comfortable for working in home, office and outdoor.
  • 【Sturdy & Protective】 :Made of sturdy metal, it can support up to 17.6 lbs (8kg) weight on top; With 2 rubber mats on the hook and anti-skid silicone pads on top & bottom, it can secure your laptop in place and maximum protect your device from scratches and sliding. Moreover, smooth edges will never hurt your hands.
  • 【Heat Dissipation】 :The top of the laptop stand is designed with multiple ventilation holes. The open design offers greater ventilation and more airflow to cool your laptop during operation other than it just lays flat on the table.
  • 【Portable & Foldable】:The foldable design allows you to easily slip it in your backpack. Ideal for people who travel for business a lot.
  • 【Broad Compatibility】:Our desktop book stand is compatible with all laptops from 10-15.6 inches, such as MacBook Air/ Pro, Google Pixelbook, Dell XPS, HP, ASUS, Lenovo ThinkPad, Acer, Chromebook and Microsoft Surface, etc.Be your ideal companion in Home, Office & Outdoor.

Confirm the address and attachment one last time

Check the complete recipient address, including the domain and any extra characters. Look at the attachment filename for accidental personal information, such as a Social Security number embedded in the name. Send from an account you control, avoid public computers, and sign out when finished.

Send the password through a separate channel

Give the password by phone or another channel that the recipient has already agreed to use. Do not put it in the same email, in the same reply thread, or in a second message to the same mailbox. If an attacker gains access to the mailbox, two messages in that mailbox provide little additional protection.

Call a known number rather than a number supplied in a suspicious email. If the recipient uses a verified client portal with an internal message function, ask whether that function is acceptable for the password; otherwise, a direct phone call is the clearest separation. Record which file the password belongs to, but do not write the password in the email subject or filename.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What each transfer method protects

Method Who controls access What is encrypted Revocation or expiry Main condition
Recipient’s secure portal The organization operating the portal Depends on the service; typically the upload connection and stored file, with additional controls varying by provider May include expiry, download logs, or revocation; verify the actual settings The recipient must support it and you must use the genuine portal
Reply inside an IRS encrypted message The IRS secure messaging system The reply and attachments in that encrypted workflow Controlled by the IRS system and case process Available only when the assigned-employee process directs you to use it
Password-protected email attachment Your mailbox and the recipient’s mailbox, plus anyone who receives the password The attachment contents; not the subject, ordinary body, or all metadata Usually no automatic revocation after delivery Password must travel through a separate channel
Unencrypted email attachment Mail systems and both mailboxes Not protected at the file level Usually no automatic revocation Use only if the recipient specifically accepts it and no safer approved route exists

This table describes general properties, not a guarantee for every product. Ask the recipient how its particular system handles storage, access, logging, and deletion.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Common situations and the safest response

Your preparer says, “Just email everything”

Ask for the firm’s secure upload link or encrypted-transfer procedure. If it has no secure option and email is unavoidable, send a password-protected copy, keep the message generic, and provide the password by phone. Confirm the firm’s retention and deletion practices before sending a large set of records.

Best Value
Hiacry 8 Pack Gel Pens, Quick-Drying Black Ink, 0.7mm Fine Point Fidget Pen
  • Twin-Ball Design : Hiacry gel pen features a double ball conical tip that reduces writing resistance and provides a stable and smooth writing experience. 0.7mm quick drying black ink ensures no jumping, leakage or seepage.
  • Quick-Dry Long Lasting Ink:0.7mm black ink can slide effortlessly, dry immediately, & is not easily dirty. It has a high-capacity reservoir (up to 1300 meters), which is very suitable for left-handed & right-handed users.
  • Sleek Design for Journaling & Planning: Engineered with a low center of gravity and precision tip for steady ink flow, these journaling pens excel at note-taking, sketching, planning, and more. They combine stylish pens with top-tier performance.
  • Rolling Ball Design:The pocket clip with roll ball design can be easily attached to notebook pockets and binders, in addition, the fidget on the pen clip is also a small toy for your daily thinking to relieve stress.
  • Comfortable Non-Slip Grip:The ergonomic pen barrel has a soft rubberized coating for a comfortable, non-slip grip, so you won't get fatigued even after long hours of writing.

You receive a request from a new address

Pause. Contact the preparer or organization using a number already in your records, not the contact details in the new message. Verify the exact address and ask whether the request was sent. Do not “test” the address by sending a low-risk document; verification must happen before any sensitive disclosure.

The recipient cannot open the protected file

Do not send the password in the same email as a troubleshooting reply. Confirm the recipient’s supported file format and encryption method by phone. Recreate a test archive or PDF using a compatible setting, then send a new protected copy with a new password through the separate channel. Keep the original protected file until the recipient confirms successful access.

You forgot the password

Most file-encryption tools cannot recover it. Retrieve it from your secure password record if one exists. Otherwise create a new protected copy with a new password and send that copy; never weaken the protection by emailing an unencrypted replacement merely because the first password was lost.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You sent an unencrypted document by mistake

Contact the recipient immediately and ask them not to open, download, or forward it, and to delete it from their mailbox and trash if possible. Send a protected replacement through the approved channel. If the document contains identity or financial information, ask the recipient about its incident-reporting process and consider whether you need to monitor accounts or obtain professional identity-theft guidance.

Keep a simple sending checklist

  • Recipient and exact destination verified through a known contact route.
  • Approved portal or encrypted message option checked first.
  • Only necessary pages and files included.
  • Original copy stored securely before making a protected copy.
  • Attachment encryption tested by closing and reopening the file.
  • Password is unique, strong, and at least 12 characters for the IRS-described process.
  • Subject and body contain no Social Security number, taxpayer ID, full address, phone number, or unnecessary tax details.
  • Password delivered by phone or another separately agreed channel.
  • Recipient confirms access before you delete your protected copy or any required record.

For tax professionals handling client records, IRS Publication 4557 (Rev. 5-2024) also discusses encrypted, password-protected documents and secure file transfer protocol as alternatives. Individuals should still follow their preparer’s approved workflow and the current IRS instructions for their specific case.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

More guides

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.