Created with
⚡ Quick answer
Don't hand over your EmaraTax master login or approve a UAE Pass request that gives a firm full control of your FTA profile — that exposes your VAT, corporate tax, penalties and everything else, all under your name. Instead, use one of two official routes: (1) add them as an authorised user with a defined access level you control, so their submission is recorded under their user; or (2) appoint an FTA-registered tax agent, who is linked to your account officially via their tax-agent ID and can legally represent you before the FTA. The tax-agent route gives you the most accountability.
This situation comes up constantly, especially for small free-zone companies filing their first corporate tax return. You pay a firm, they prepare a draft audit report and the return, and then at the final step — submission — they ask for your login or for you to approve a UAE Pass request so they can file "as you." It feels routine, they may even say "we do this all the time," but a quiet alarm goes off: am I about to give a stranger the keys to my entire tax profile?
That instinct is right. Filing your return does not require you to surrender control of your account. Here's how to let them do the job safely.
Why it matters
What your EmaraTax login actually unlocks
Your EmaraTax master access — whether by password or UAE Pass — isn't a "corporate-tax-only" key. It opens your entire FTA profile:
- VAT, corporate tax and excise registrations and returns
- Penalties, payments and bank details
- The ability to add or remove other users
- Your registration data, contact details and correspondence
And critically: once someone is logged in as you, everything they do looks like you did it. There's no separate record showing a third party acted. If something is filed incorrectly — or worse — it's your name on it, with no trail pointing anywhere else.
Handing over your login isn't "giving them filing access." It's giving them your whole tax identity, with your name on every action.
The safe way
Two proper routes — pick one
Route 1 · Authorised user
Add them as a user with defined rights
As the account owner, you can add the firm as an authorised user on your taxable-person account and set their access level (for example, write access to prepare and submit a return). You keep ownership and control, you can remove them afterwards, and their submission is recorded under their user — not yours.
Route 2 · Best — FTA tax agent
Appoint an FTA-registered tax agent
Link an FTA-registered tax agent to your account officially, using their tax-agent ID/TRN, with FTA approval. They file, pay and handle FTA correspondence under their own FTA registration — the most accountable option, and they can formally represent you if the FTA ever asks questions.
Both routes let the firm do exactly what you hired them for — without you ever sharing a password or surrendering your UAE Pass.
✗ The route to avoid
Sharing your password, or approving a UAE Pass login so a third party operates your account "as you," with no separate record of who acted. If a firm insists on this instead of being added as a user or linked as a tax agent, treat it as a signal to slow down and ask questions.
The tell
Why won't they just be added officially?
Here's the revealing part. If a firm could be linked as an FTA-registered tax agent, they generally would — it's cleaner for everyone. When a firm asks for your login instead, it usually means one thing: they're not an FTA-registered tax agent. That isn't automatically sinister — plenty of competent bookkeepers aren't registered agents, and you can still add them as an authorised user — but it does mean:
- There's less formal accountability — no tax-agent registration standing behind the work.
- They can't formally represent you before the FTA if there's a query or audit.
- You should ask the direct question and decide with eyes open.
✅ The one question to ask
"Are you an FTA-registered tax agent? If yes, please share your tax-agent ID so I can link you officially. If not, I'll add you as an authorised user with the right access — I won't share my login or UAE Pass." A reputable firm will be completely comfortable with this.
Protect yourself
Good habits whichever route you choose
- Never share your password or core UAE Pass approval for blanket access Use the authorised-user or tax-agent routes instead.
- Check the request source If approving any UAE Pass prompt, confirm it's genuinely from the FTA portal before approving.
- Set the minimum access needed Give write access to file — not control over bank details or user management unless truly required.
- Have a written engagement A proper engagement letter (not just a quote and invoices) sets out scope and responsibility.
- Remove access when the job's done Review your authorised users periodically and remove anyone who no longer needs access.
Don't share
Your login / UAE Pass
Add as user
With defined write access
Or tax agent
Linked officially via FTA
The simplest fix of all: work with an FTA-registered tax agent from the start
When your accountant is an FTA-registered tax agent, this problem never arises. They're linked to your account properly, they file and pay under their own registration, and you never have to choose between getting your return filed and protecting your account.
File your corporate tax return — without handing over your login
Fastlane is an FTA-registered tax agent. We prepare your financials, compute your tax and file on EmaraTax linked to your account the proper way — under our own FTA registration, with your account and credentials staying yours.
FAQ
Frequently asked questions
Should I share my EmaraTax login with my accountant?
No. Don't hand over your master login or approve a UAE Pass request giving full control. Add the firm as an authorised user with a defined access level, or appoint an FTA-registered tax agent linked officially to your account.
What's the difference between an authorised user and a tax agent?
An authorised user is added by you with a permission level you control, and their action is recorded under their user. An FTA-registered tax agent is formally approved by the FTA, linked via their tax-agent ID, and can legally represent you before the Authority — the most accountable route.
Is it a red flag if a firm asks for my login instead?
Often it means they're not an FTA-registered tax agent. That's not necessarily dishonest, but there's less accountability and they can't represent you before the FTA. Ask directly whether they're registered, and prefer the official access routes.
Can I add someone to file without giving up control of my account?
Yes. As the account owner you can add an authorised user with write access to prepare and submit returns, while keeping ownership and the ability to remove them later — without sharing your password.
Does using a tax agent mean I never log in myself?
Largely, yes. When you appoint an FTA-registered tax agent, they file, pay and handle FTA correspondence through their own portal access linked to your account, so you don't need to hand over your own login.
This article is for general information only and does not constitute tax, legal, or security advice. EmaraTax access options and FTA procedures can change; confirm the current process on the FTA portal. Always protect your login and UAE Pass credentials. For FTA-registered tax-agent support, contact Fastlane Consultancy.