How to manage your HMRC Agent Services Account

Log in to your HMRC Agent Services Account (ASA) at least once a month to keep your client list accurate, process new authorisations using digital handshake codes, and ensure your firm's contact details are current. Proactive management of this portal is the only way to ensure you have the legal authority to view client data and file returns on their behalf through your software.

Why managing your ASA is essential

Unlike the older "Online Services for Agents" portal, the Agent Services Account is designed for modern, digital-first tax administration (like Making Tax Digital). It serves as the central hub for your relationship with HMRC. If this account is neglected, you risk losing access to client records, missing authorisation deadlines, or having HMRC correspondence sent to the wrong address.

Authorising new clients via the 'Digital Handshake'

The most frequent task you will perform in your ASA is authorising new clients. HMRC has moved away from paper forms (64-8) for most services, replacing them with a digital process:

1. Generate the link: Within your ASA, select the service you need authorisation for (e.g., VAT or Income Tax) and enter the client's details. HMRC will generate a unique URL.
2. Send to the client: Copy this link and email it to your client.
3. The Handshake: Your client must click the link, log in with their own Government Gateway credentials, and confirm they want to appoint you as their agent.
4. Expiry: These links expire after 30 days. If the client doesn't "handshake" in time, you'll need to generate a new one.

Maintaining your client list

It is best practice to review your client list quarterly. Keeping your list "clean" is not just about organisation; it is a key part of your GDPR and Anti-Money Laundering (AML) responsibilities.

• Remove inactive clients: If a client leaves your practice, remove them from your ASA immediately. This revokes your access to their sensitive data and informs HMRC that you are no longer responsible for their filings.
• Check authorisation status: Ensure that all current clients are correctly linked for the specific tax regimes you are managing. A client might be authorised for VAT but not for Corporation Tax.

Keeping agent details up to date

If your business moves office, changes its email address, or updates its phone number, you must update these details in the ASA settings. HMRC uses this information to contact you regarding client queries. Note: Updating your details in the ASA does not always update them for every other HMRC department, so ensure your business's own tax records are updated separately if necessary.

Tip: Always use Two-Factor Authentication (2FA) for your ASA login. As an agent, your account is a high-value target for hackers because it provides a gateway to multiple businesses' financial data.

Best practices for efficiency

Action	Frequency	Benefit
Review Client List	Quarterly	GDPR compliance and data accuracy.
Update Firm Details	As needed	Ensures HMRC notices reach you promptly.
Monitor Authorisation Links	Weekly	Prevents links expiring and delaying onboarding.