The short answer: limited access is safer than full access, and you don't need to choose between the two
Your bookkeeper needs to see your bank transactions to record them accurately, but they do not need the password to your account or the ability to move money. Most banks and accounting software let you grant read-only access—your bookkeeper can download statements and categorize transactions, but cannot initiate transfers, change settings, or delete records. This separation protects you from fraud, keeps your cash decisions in your hands, and still gives your bookkeeper what they need to do their job.
The real question is not whether to grant access, but what kind. Full login credentials create unnecessary risk. Limited, monitored access creates a paper trail. No access at all means your bookkeeper works from statements you provide, which slows reconciliation and creates gaps where errors hide.
Key Takeaways
- Read-only bank access lets your bookkeeper see transactions and download statements without being able to move money or change account settings.
- Most banks offer permission levels that separate viewing from spending—use them instead of sharing your main login.
- If your bookkeeper needs to enter transactions into your accounting software, they should have software access, not bank access.
- Require your bookkeeper to sign a confidentiality agreement that covers bank data, even if they are a contractor.
- Reconciliation happens faster and more accurately when your bookkeeper can see the bank directly, but you retain control over cash.
What read-only access actually means
Read-only access is a permission level that lets someone view your account and download transaction history without being able to spend money, change passwords, or alter records. Most banks offer this through their online portal—you create a separate user account for your bookkeeper with restricted permissions. They log in with their own credentials, not yours.
The bookkeeper can see balances, download statements in bulk, and review cleared and pending transactions. They cannot initiate wire transfers, write checks, change contact information, or set up new payees. Some banks also let you set date ranges—your bookkeeper might see the last 90 days but not older records, or see current month only.
This is different from giving them your password. Sharing your main login means they have everything you have, including the ability to lock you out by changing the password. Read-only access means they have only what you decided to give them, and you keep the master key.
How to set up limited access at your bank
The process varies by bank, but the structure is the same. Log into your online banking, look for a section called "User Management," "Authorized Users," "Account Access," or "Permissions"—the label depends on your bank. You will create a new user profile, assign it to your bookkeeper's email address, and select which permissions to grant.
Common permission options include: view account balance, download statements, view transaction history, create reports, and initiate transfers. You want to turn on the first three and turn off the last two. Some banks let you restrict access by date range or by transaction type—if your bookkeeper only needs to see checking, not savings, you can lock them out of savings.
Your bookkeeper will receive an email invitation to activate the account. They set their own password. From that point forward, they log in independently, and your bank logs their activity separately from yours. If they leave, you revoke access from the same menu—it takes seconds and does not require a password change.
If your bank does not offer granular permissions, ask whether they offer a "view-only" or "read-only" account type. If they do not, consider whether the bank's limitations are worth staying, or whether a switch to a bank with better permission controls makes sense for your business.
When your bookkeeper should access accounting software instead
If your bookkeeper needs to enter transactions into QuickBooks, FreshBooks, Xero, or another accounting platform, they should have login access to that software—not to your bank. The accounting software is the middle layer. Your bookkeeper enters transactions there, and the software can connect to your bank to pull in transactions automatically (a feature called "bank feeds").
This setup is actually cleaner than direct bank access. Your bookkeeper works in the accounting software, which has its own audit trail and permission levels. The software can be set to prevent them from deleting transactions, changing prior months, or accessing reports they do not need. Your bank account stays locked down.
If you use accounting software with bank feeds enabled, your bookkeeper may not need to download statements manually at all. The software pulls transactions automatically, your bookkeeper categorizes them, and you review the reconciliation before approving it. Your bookkeeper never touches the bank login.
What to do if your bookkeeper needs to pay bills or process payroll
Some bookkeepers also handle bill payments or payroll processing. If yours does, they need a different kind of access: the ability to initiate specific transactions, but not to change settings or access other parts of the account.
Most banks offer "bill pay" or "payment" permissions separate from general account access. You can grant your bookkeeper the right to schedule bill payments without giving them the right to transfer money to external accounts, change the registered email, or view your savings account. For payroll, some banks offer a "payroll processor" role with even narrower permissions—they can only initiate payroll transfers on scheduled dates.
If your bookkeeper handles payments, require them to send you a summary of pending transactions before they process them. This creates a checkpoint. You review the list, approve it, and then they execute. It adds one day to the timeline but catches errors before money leaves.
Confidentiality agreements and liability
Even if your bookkeeper is a contractor or works for a firm, they should sign a confidentiality agreement that covers bank data. The agreement should state that they will not share account numbers, balances, transaction details, or any other bank information with anyone outside your business, and that they will not use the access for any purpose other than their bookkeeping duties.
The agreement does not need to be long. A single paragraph covering confidentiality, permitted use, and consequences of breach is enough. It creates a legal record and makes clear that you take the access seriously. If your bookkeeper works for a firm, ask the firm to sign on behalf of the bookkeeper, or ask whether they have a standard confidentiality clause you can reference.
Liability for fraud or theft depends on your bank's terms and your state's law, but most banks will not reimburse you if someone with authorized access steals money. This is why limiting access matters: the narrower the permissions, the less damage an unauthorized person can do, and the easier it is to prove you did not grant them the ability to do it.
Red flags: when not to grant access
Do not grant bank access to a bookkeeper you have not worked with before or whose background you have not checked. Ask for references from previous clients and contact them. Do not grant access to someone who resists signing a confidentiality agreement or who asks for your main login instead of requesting limited access through the bank.
If your bookkeeper asks for access to accounts other than the one they need for their work—your personal savings, a business line of credit, a business credit card—that is a sign to stop and ask why. They should only see what they need to do their job.
If you notice transactions you did not authorize, or if your bookkeeper cannot explain a transaction clearly, revoke access immediately and contact your bank. Do not wait to see if it happens again. Most banks will investigate unauthorized transactions if you report them within 30 to 60 days, but the window closes fast.
Frequently Asked Questions
Can I give my bookkeeper access without them knowing my password?
Yes. Create a separate user account through your bank's permission menu and send them an invitation link. They set their own password. You never share yours, and they never know it. This is the standard way to grant access and is more secure than sharing credentials.
What happens if my bookkeeper leaves—do I have to change my password?
No, if you used the bank's permission system. You simply revoke their access from the same menu where you granted it. Their login stops working immediately. If you made the mistake of sharing your main password, then yes, you should change it when they leave.
Can my bookkeeper see my personal bank account if they have access to my business account?
Only if you grant them access to it. When you create a user account, you choose which accounts they can see. You can give them access to your business checking only and lock them out of everything else. Check the permission settings to confirm.
Is it safer to just give my bookkeeper statements and not let them access the bank?
It is safer in one way—they cannot accidentally or intentionally move money. But it is riskier in another: reconciliation takes longer, errors hide longer, and you have no way to know if a transaction is missing from the statements they gave you. Read-only access is the middle ground.
What if my bookkeeper's computer gets hacked—can someone use their login to access my account?
If they have read-only access, a hacker can see your transactions and balances but cannot move money. If they have payment permissions, a hacker could initiate transfers. This is why limiting permissions matters. Also require your bookkeeper to use a strong, unique password and enable two-factor authentication on their bank login if the bank offers it.