How Portal Genie Keeps Client Portal Access Secure

Client portals handle sensitive documents and financial information. The Portal Genie is built as a secure cloud platform for business use, with access controls designed for both your team and your clients.

Secure client access with email OTP

Clients do not use a standing Portal Genie password. Instead, they verify their identity through a secure one-time passcode (OTP) sent to their email address.

This process:

• Matches the client's email to their accounting software contact record
• Sends a time-limited OTP to that email inbox
• Grants portal access only after successful verification

Read the full flow in How Clients Access Your Portal.

Optional portal password (Pro)

On Pro, you can add extra password protection to your portal — an additional layer beyond the OTP process for businesses that want it.

Team user permissions

Your team accesses Portal Genie through user accounts with role-based permissions. Control what each team member can view, manage and configure.

See Managing Team Users and Permissions.

Multi-factor authentication for your team

Business users can enable multi-factor authentication (MFA) on their Portal Genie accounts for additional account security.

Client and contact relationship

Client access is tied to contact records in your connected accounting software. Only clients with a matching email address on their contact record can receive an OTP and access the portal.

Secure cloud platform

The Portal Genie is designed as a secure cloud platform for business use — handling documents, communication and payments with appropriate access controls.

Custom domains and security

Using your own portal domain (Pro) does not change the underlying security model — clients still verify through the OTP process.

See Using Your Own Client Portal Domain.

Questions about security? Contact us or Book a demo.