Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to the guide
THE FINANCEBASE List yours

Guide

How to Protect Your Personal Information When Using IRS2Go (Now the IRS App)

By TheFinanceBase Team 11 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

IRS2Go was replaced by the IRS app in September 2026. If you used IRS2Go, your phone should receive the replacement through its normal app-store update process; you can also update manually from the official IRS.gov app page, Apple App Store, or Google Play. The safest way to protect tax information is to start from IRS.gov, use only the official listing, avoid signing in when a feature does not require it, complete account sign-in only through the app’s secure browser flow, and sign out when finished.

The IRS says the current app encrypts information sent to IRS systems, does not retain signed-in account information as permanent account data on the device, stores a session credential rather than your sign-in password in protected device storage, and requests permissions needed for supported features. Those are the IRS’s published descriptions, not the result of an independent security audit, so you should still treat your phone, links, messages, and credentials as security boundaries.

As an Amazon Associate I earn from qualifying purchases.

What changed from IRS2Go to the IRS app

The Internal Revenue Service announced the replacement on September 25, 2026. The new IRS app keeps familiar IRS2Go services and adds sign-in access to selected Individual Online Account information. Existing users do not need a separate download: the replacement is delivered by the usual update mechanism, although you can open your device’s app store and update manually if the change has not appeared.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Because the name changed, an old search result, advertisement, or message can point you toward an outdated or look-alike application. The reliable starting point is IRS.gov/app. From there, follow the store link for your device. Do not install a tax app from an advertisement, a text message, an email, or a pop-up claiming that your refund or account requires immediate action.

The launch announcement quoted IRS CEO Frank J. Bisignano: “The new IRS app puts more services at taxpayers’ fingertips.” That expansion makes it more important to distinguish the official app and its sign-in path from impersonation attempts.

Use the official download and update path

Check the source before installing

  1. Type IRS.gov into your browser yourself, then open the IRS app page at https://www.irs.gov/app.
  2. Use the Apple App Store or Google Play link presented on that IRS page. Check the publisher, app name, description, and update information in the store listing before tapping Install or Update.
  3. If IRS2Go is already on your phone, allow the normal store update or open the store directly and update it there. Do not delete the old app and replace it with a file or link supplied by a message.
  4. After installation, open the app from your phone’s app list rather than from a promotional banner or a message notification.

Warning signs of a fake app or message

  • A text, email, call-back number, or pop-up says you must provide a password, Social Security number, bank details, or payment immediately.
  • A link uses a misspelled domain, a URL shortener, an unfamiliar app-store listing, or a page that does not begin from IRS.gov.
  • An advertisement claims to be an urgent IRS refund, audit, or identity-verification notice.
  • The app asks you to bypass the official store, install a configuration profile, or enable unusual device access.

The IRS says it will not request sensitive personal or financial information through unsolicited text messages, emails, or pop-up messages. If you are unsure, do not click, reply, call a number in the message, or enter information. Close it, navigate to IRS.gov independently, and report suspected scams at IRS.gov/submitatip.

Know which features require a sign-in

Some services, including refund-status checks, can be used without signing in. Account features require the IRS secure sign-in process. Limiting sign-in to features that actually need it reduces the number of times credentials and account information are exposed to a session.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Task type What the IRS says to expect Safer practice
Refund status and other no-sign-in services Available without an account sign-in for supported functions. Use the feature without signing in unless the app clearly requires account access.
Individual Online Account features The app opens a secure browser window for IRS sign-in and then returns to the app. Enter credentials only in that expected secure flow launched from the official app.
Identity verification for expanded account access The current IRS app page identifies ID.me as the identity-verification provider. Check that the flow was opened by the official app; never use a verification link delivered by an unsolicited message.

How to sign in securely

  1. Open the IRS app from the official installation on your phone.
  2. Select the account feature that requires access. The app should hand off to a secure browser window for IRS sign-in.
  3. Check the address and page context before entering anything. If the page appeared from a text, email, advertisement, or unfamiliar app instead, stop and return to IRS.gov to begin again.
  4. Complete the sign-in and any identity-verification steps requested in that official flow. Do not share your username, password, one-time code, or account details with another person or in a reply to a message.
  5. When the task is complete, use the app’s sign-out control. The IRS says signing out ends the active session.

The app may retain a secure session credential while you are signed in, but the IRS says this is not your sign-in password and that it is held in protected device storage. Signing out removes the active session rather than leaving the account open for the next person who uses the phone.

What the IRS says about information on your device

Account data and session credentials

According to the current IRS FAQ, tax-account information shown after sign-in is not stored as permanent account data on the device. The app can still hold a secure session credential during an active sign-in so that the service works; that credential is distinct from your password and is kept in protected device storage. This distinction means that “not stored as permanent account data” does not mean the phone has no temporary session material.

Rank #2
Sale
The Psychology of Money: Timeless lessons on wealth, greed, and happiness
  • Ideal for Gifting
  • Ideal for a bookworm
  • Compact for travelling

Information sent to IRS systems

The IRS says information transmitted between the app and IRS systems is encrypted and sent to the appropriate IRS systems to provide the service you requested. Encryption protects the transmission in transit, but it does not make a fake app, compromised phone, or voluntarily disclosed password safe. Keep your operating system updated, use the phone’s screen lock, and avoid entering tax information while connected to an untrusted device or a public computer.

Technical and usage information

The IRS says the app may collect limited technical information about data collection and app use. The published description does not establish a complete list of every field collected in every version. For the permissions and disclosures that apply to your installation, review the current store listing and the information linked from IRS.gov/app.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Review permissions without assuming every version is identical

Permissions can change as the app adds or removes supported features. The IRS says it requests permissions needed for those features, so the authoritative details for your device are the current app-store listing and the permission prompt shown during installation or use.

  1. Before installing or updating, open the app’s current store listing and read its permissions, privacy disclosures, and version notes.
  2. On your phone, open the operating system’s app-permission screen and compare the enabled permissions with features you actually use.
  3. Allow a permission only when it is needed for a supported function you intend to use. If a prompt appears unrelated to the feature you selected, cancel and verify the listing through IRS.gov.
  4. Recheck permissions after a major update. A permission that was unnecessary for an earlier version may support a new feature, while a permission you no longer need can be disabled in device settings.

Do not infer that a permission list from an old IRS2Go assessment describes the 2026 IRS app. The app has changed, and the current listing is the relevant reference for your edition and operating system.

Protect the phone that holds the app

Use basic device controls

  • Set a strong screen-lock passcode or passphrase and enable the phone’s biometric lock only as a convenience layered on top of that passcode.
  • Install operating-system and app updates from the device’s normal update mechanism.
  • Turn on the manufacturer’s device-finding and remote-lock features so a lost phone can be secured or erased.
  • Do not leave the phone unlocked while displaying account information, and do not let another person use an active signed-in session.
  • Avoid rooted or jailbroken devices for tax-account access because their security controls may have been altered.

Manage the session deliberately

Use no-sign-in features without signing in whenever practical. When account access is necessary, complete the task in one session, sign out, and close the browser window returned by the app. If you lose the phone while a session may be active, use your device’s remote-lock or erase function and change the affected account credentials from a separate trusted device.

Recognize and handle IRS impersonation attempts

Scammers often exploit a real tax deadline, refund, or account alert to make a fake link look plausible. The IRS guidance is straightforward: unsolicited texts, emails, and pop-ups are not a channel for requesting your sensitive tax or financial information.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If you receive a suspicious message

  1. Do not open attachments, click links, scan codes, or reply.
  2. Do not provide a Social Security number, taxpayer-identification number, bank or card number, password, identity-verification details, or one-time code.
  3. Take a screenshot only if you can do so safely, then delete or quarantine the message.
  4. Open a new browser window and navigate to IRS.gov yourself. Use the official app page or the relevant IRS contact instructions there.
  5. Report suspected tax scams through IRS.gov/submitatip.

If you already entered information

Stop using the suspicious page, close it, and begin damage control from a trusted device. Change the affected password through the official IRS sign-in route, end active sessions where that service allows it, and contact your financial institution if payment or bank information was disclosed. Preserve the message and any transaction records for reporting. Do not continue a conversation with the sender merely because it claims to be an IRS representative.

A practical privacy routine for each use

Use this short sequence whenever you open the app:

  1. Start at the source: open the installed app from your device, or reach the current listing through IRS.gov/app.
  2. Choose the minimum access: use refund status or another no-sign-in service without signing in when possible.
  3. Verify the handoff: for account features, confirm that the app opened the expected secure browser sign-in flow.
  4. Keep secrets private: type credentials and codes only into that official flow; never send them in a message or give them to someone who contacted you first.
  5. Check the device: use your own locked, updated phone and review any unexpected permission request.
  6. End access: sign out before handing over the phone, putting it away, or switching to another task.

What older IRS2Go privacy material can—and cannot—tell you

A 2020 IRS2Go privacy impact assessment described the older app’s historical functions, including a voluntary option involving multi-factor-authentication codes and the handling of certain email and account information. It predates the 2026 IRS app and should not be treated as a current description of how the replacement app works.

The current IRS FAQ and app page are the appropriate sources for present behavior such as secure sign-in, encryption, session handling, and permissions. The reviewed official materials do not establish that the 2026 app has undergone an independent security audit. Therefore, the IRS’s statements should be read as the agency’s published explanation of its controls, not as a guarantee or third-party certification.

Common problems and the safest response

The app still shows the IRS2Go name

Open the Apple App Store or Google Play directly and check for an available update. If you arrived through an advertisement or a message, stop and begin at IRS.gov/app. Do not install a second app from an unfamiliar publisher just because its icon or name resembles the IRS app.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A sign-in page appears outside the app’s expected flow

Cancel the page without entering information. Reopen the official app and select the account feature again. A legitimate account sign-in should be launched by the app through its secure browser handoff; an unsolicited link is not an equivalent route.

A permission prompt seems unrelated

Decline it, leave the flow, and compare the request with the current store listing and the feature you selected. If the request cannot be explained by a supported feature, do not continue until you have verified the app through IRS.gov.

You cannot sign out or the phone is lost

Lock the phone immediately using your device’s security tools. From another trusted device, use the official IRS sign-in route to review available account-security controls and change credentials if needed. The IRS says its in-app sign-out ends the active session, so use that control whenever it is available.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Limits of the available privacy information

The IRS has published useful high-level statements about encryption, session credentials, account-data retention on the device, permissions, and limited technical information. Those statements do not provide a complete, independently verified technical specification for every app version, operating system, or network condition. Permission details can vary by version, and the current store listing is the practical place to check them.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

That uncertainty does not require you to avoid the app. It means you should combine the agency’s published controls with sound account hygiene: obtain the app from IRS.gov, minimize sign-ins, protect the phone, reject unsolicited requests, and sign out after use.

Best Value
Sale
I Will Teach You to Be Rich: No Guilt. No Excuses. Just a 6-Week Program That Works (Second Edition)
  • It can be a gift option
  • Comes with secure packaging
  • Helpful in various ways

Frequently Asked Questions

Can I keep using the old IRS2Go app after the September 2026 change?

The IRS says IRS2Go was replaced by the IRS app and that existing users receive the replacement through the normal update process. If your phone has not updated, check the official listing through IRS.gov/app rather than downloading a separate file or a similarly named app.

Does deleting the app erase my tax records with the IRS?

The IRS’s statement concerns account information displayed in the app: it says that information is not stored as permanent account data on the device. That does not describe how the IRS retains its own tax records. For records held by the agency, use the applicable IRS records and account procedures.

Is the IRS app guaranteed to be secure because it uses encryption?

No. The IRS says data sent between the app and its systems is encrypted, but the reviewed official material is not an independent security audit and does not establish a guarantee. Device security, fake apps, phishing, and credential handling remain important.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Where should I verify the app’s current permissions?

Check the app’s current Apple App Store or Google Play listing and the permission controls on your device, using IRS.gov/app as the starting point. Permission details can change with the app version.

Will the IRS ask for my password or bank details by text or email?

The IRS says it will not request sensitive personal or financial information through unsolicited text messages, emails, or pop-up messages. Do not respond; navigate to IRS.gov independently and report suspected scams at IRS.gov/submitatip.

Quick Recap

SaleBestseller No. 1
SaleBestseller No. 2
The Psychology of Money: Timeless lessons on wealth, greed, and happiness
The Psychology of Money: Timeless lessons on wealth, greed, and happiness
Ideal for Gifting; Ideal for a bookworm; Compact for travelling
$10.99
SaleBestseller No. 5
I Will Teach You to Be Rich: No Guilt. No Excuses. Just a 6-Week Program That Works (Second Edition)
I Will Teach You to Be Rich: No Guilt. No Excuses. Just a 6-Week Program That Works (Second Edition)
It can be a gift option; Comes with secure packaging; Helpful in various ways
$9.15

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a comment

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More guides

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.