MassTaxConnect security

Answers to frequently asked questions about MassTaxConnect’s security, including how DOR keeps your information safe.

Table of Contents

How does DOR keep my information safe?

DOR keeps your information safe and your privacy secure by using multiple security layers within this system. Information transferred to and from your computer is over a Secure Socket Layer. MassTaxConnect will also log you out automatically after 30 minutes of inactivity.

In addition to MassTaxConnect's built-in security, DOR recommends the following to help keep your information safe:

  • Don't provide your username or password to anyone.
  • Always log out of MassTaxConnect when you're finished using the application.
  • Choose your own username and password when you register.
  • Passwords cannot be the same as your username and must include both digits and letters.
  • Change your password regularly to increase the security of your account.
  • When filing returns, making payments, or updating profile information, always log in directly to MassTaxConnect using your username and password.
  • MassTaxConnect doesn't provide links with your transaction or personal information to any external web site.
  • Never respond to an email that asks for transaction or personal profile information.
  • Email from DOR will indicate that there is new information to view in your MassTaxConnect account.
  • Email from DOR will not ask for you to send any personal information.

My pop-up blocker reports pop-ups. Do I have to turn it off?

There are some links within MassTaxConnect, including credit card payments, that will launch or pop-up a new window of information that:

  • May be blocked by your computer from displaying on your screen and
  • May also prevent your ability to print documents.

It is recommended that you either disable your computer’s pop-up blocker features or change your computer’s pop-up blocker settings to allow pop-ups while using MassTaxConnect.

  • You may refer to your browser’s (i.e., Internet Explorer, Safari, or Firefox) Internet Options or Preference settings to locate your pop-up blocker settings.
  • You may also locate pop-up blocker features in additional toolbars that may be installed on your browser, such as Google and Yahoo. Some Internet users have more than one pop-up blocker feature installed that may need modification.

Is a taxpayer able to see who has access to their account?

Yes. To see who has access to an account:

  • Log in to MassTaxConnect.
  • Select Manage My Profile in the upper right of the screen. 
  • Select the More… tab. 
  • Select the Manage Additional Logons hyperlink. 

All active usernames will be listed and available as hyperlinks for additional actions. You can also manage all usernames by selecting the Manage button to manage the additional usernames.

Is it okay to share my username and or password with my coworkers?

No. You should not share your username or password with anyone. Usernames and passwords are unique to the individual user. Your username and password determine your access roles and rights.

  • Sharing passwords may open access to the original registrant’s personal information.
  • Never share your username and password with anyone.

As a third party tax professional, should I sign up my client for a username and password if asked?

No. You may certainly assist your client with the registration process by telephone or in person, but we strongly recommend that the business or taxpayer:

  • Choose their username and password and
  • Take responsibility for adding that confidential information to MassTaxConnect.

There are many security risks when impersonating a user, including: 

  • A username and password determine the access roles and rights.
  • Sharing passwords opens access to the original person’s personal information.

When a business or taxpayer registers for online access, an email address is required. Shared email addresses are not allowed.

I’m leaving my company. Should I cancel my Master or Tax Administrator (MA or TA) access rights?

Yes. If you are leaving your company, it is your responsibility to cancel your online access. To cancel access:

 

  • Select the Manage My Profile hyperlink in the top right section of the Home panel. 
  • Select the More… tab. 
  • Select the Delete My Profile hyperlink in the Access section.

Should I have my tax representative set up my username and password for me?

No. We recommend that a username and password only be set up by the business or taxpayer. Your username and password determine your access roles and rights, and rights you may assign to a third party.

If you grant access to your account to a third party to work on your behalf, that third party would use his/her unique username and password to access your account.

  • Sharing passwords may open access to the original registrant's personal information.
  • Never share your username and password with anyone.

 

Page updated: January 17, 2021

Help Us Improve Mass.gov  with your feedback

Please do not include personal or contact information.
Feedback