The short answer: a tax preparer website needs to be live well before filing season, show your credentials accurately, follow the IRS rules on advertising and logos, and give clients a secure way to send documents that is never plain email. Behind it, you need the written security plan federal law requires, and a site with SSL and basic security in place.
When a tax preparer website should go live
Launch your site in the fall, or by early December at the latest, because the IRS opens filing season in late January and clients start choosing a preparer before that. The IRS opened the 2026 filing season on January 26, 2026 and the 2025 season on January 27, 2025. A brand-new site can take weeks to be found and trusted by search engines, and you will not have time to fix pages once returns start coming in.
| When | What to finish | Why then |
|---|---|---|
| September to October | Domain, business email, site plan, secure upload method chosen | Leaves time for email setup and testing your document process. |
| October to November | Pages written and launched, Google Business Profile linked, Search Console set up | Gives search engines time to find and understand the site. |
| December | "What to bring" checklist, booking calendar open, reminders to last year's clients | Returning clients book early; new ones are comparing preparers. |
| Late January to April | Only small updates: hours, availability, deadline reminders | You will be preparing returns, not editing a website. |
The pages a tax preparer website needs
A tax office site needs about seven pages, each answering a question a nervous new client has before handing over their Social Security number.
Home page
Who you help (individuals, self-employed, small businesses), the languages you speak, your location or remote service, and a "Book an appointment" button.
One page per service
Individual returns, self-employed and gig income, small business returns, amended and prior-year returns, and bookkeeping or payroll if you offer them.
About and credentials
Who prepares the returns, their credentials described correctly, and how clients can verify them (more below).
What to bring
A checklist of documents for an appointment. It saves you calls and is the kind of practical answer search engines and AI assistants like to cite.
How fees work
Even without a price list, explain what affects your fee, such as the number of forms or a business schedule.
Secure document upload
One page that explains exactly how to send documents safely, with a link to your secure portal.
Privacy and contact
A privacy policy that matches what you actually do with data, plus a booking calendar or contact form.
For the checklist every business site follows, see what you need for a business website.
How to show your PTIN and credentials without breaking IRS rules
Show who you are and what you are qualified to do, in the IRS's own terms, and never use wording that suggests you work for the IRS. A few verified facts to build on:
- Every paid preparer needs a PTIN. The IRS says anyone who prepares or helps prepare federal tax returns for pay must have a valid Preparer Tax Identification Number, renewed for each year. Saying on your site that every preparer in your office holds a current PTIN is a simple, honest trust signal.
- Clients can look you up. The IRS Directory of Federal Tax Return Preparers with Credentials and Select Qualifications lists preparers with an active PTIN who are enrolled agents, CPAs, attorneys, enrolled retirement plan agents, enrolled actuaries or Annual Filing Season Program participants. If you are listed, tell clients so they can check.
- Use the approved wording. Circular 230 §10.30 says an enrolled agent may not use the word "certified" for the designation or imply an employment relationship with the IRS, and offers sample wording such as "enrolled to practice before the Internal Revenue Service."
- Keep copies of your marketing. The same section requires keeping a copy of direct mail and e-commerce communications, with a list of who received them, for at least 36 months. If you send email campaigns from your site, save them.
Can a tax preparer website use the IRS logo or e-file logo?
No for the IRS logo and seals; yes for the IRS e-file logo, but only if you are an Authorized IRS e-file Provider and you follow the IRS's rules. Publication 3112 says:
- Advertising must not carry the IRS or other Treasury seals.
- Accepted providers may call themselves an "Authorized IRS e-file Provider," and may use the e-file logo only to show they offer e-file, never to suggest any other relationship with the IRS.
- The logo must not be combined with the IRS eagle or the word "Federal," altered, or crowded by other text.
- Acceptance into IRS e-file does not mean the IRS endorses you.
- "IRS" must not appear in your doing-business-as name. For domain advice, see domain names for tax preparers.
The FTC Safeguards Rule and your written security plan
Tax preparation firms are covered by the FTC Safeguards Rule, so you must have a written information security program, and your website and email are part of it. The FTC's guide to the Safeguards Rule lists tax preparation firms among the businesses it covers, requires the program and risk assessment to be in writing, and requires notifying the FTC within 30 days of discovering a breach involving unencrypted information of at least 500 consumers. Firms with information on fewer than 5,000 consumers are exempt from some provisions, not the whole rule.
The IRS and its Security Summit partners say the same: federal law requires tax and accounting professionals to have a written information security plan, or WISP. The IRS offers a free template in Publication 5708. Your website touches this plan in three places: how clients send documents, how your contact form handles information, and how the site itself is protected. For questions about your own obligations, talk to an attorney or a security professional.
Never take tax documents by plain email
Do not ask clients to email tax documents as ordinary attachments, and do not let your website suggest it. The IRS guide Publication 4557, Safeguarding Taxpayer Data, tells tax pros to encrypt sensitive data sent by email, to send only password-protected, encrypted files if they must use email, and to prefer secure file transfer over email.
- Give clients a secure upload link. Many professional tax software packages include a client portal; otherwise use an encrypted file-sharing service. Put the link on your "Secure upload" page and in your email signature.
- Keep sensitive data out of your contact form. Add a line above the form: "Please do not include Social Security numbers or tax documents here."
- Say it in your reminders. Every appointment reminder can repeat, in one sentence, how to send documents safely.
Writing "we will never ask you to email your W-2 or Social Security card" on your site does double duty: it protects clients from scammers pretending to be you, and it shows you take their data seriously.
SSL for a tax website: when OV or EV is worth it
Every tax website needs SSL (the "https" and padlock), and the hosting plans in our storefront already include a standard certificate, so you do not have to buy one separately to be secure. Pub 4557 itself tells people to look for "https" before entering sensitive data.
What a separate certificate adds is identity, not stronger encryption. A standard DV certificate only proves you control the domain. OV and EV certificates go further: the certificate authority verifies that your business is a real, registered organization before issuing it, and your verified business name appears in the certificate details. For a profession where impersonation scams are common, that can be worth it.
| Type | What is verified | Price |
|---|---|---|
| DV (included with hosting) | You control the domain | Included with hosting plans |
| OV SSL, 1 site | Domain plus your organization | $99.99 a year |
| EV SSL, 1 site | Domain plus a more extensive check of your organization | $149.99 a year |
An SSL certificate protects data in transit. It does not replace your WISP, your secure portal or good passwords. For the site itself, Website Security Standard ($5.99 a month) adds a firewall, malware scanning and cleanups, and Website Backup starts at $2.99 a month. See all options on our prices page.
Business email and booking for tax season
Use business email at your own domain for every client message, and let clients book their own appointments so January phone tag disappears. Professional Email Pro ($5.99 a month per inbox) adds undo send, read receipts and a business auto-reply for the busiest weeks. Professional Email Ultra ($11.99 a month per inbox) adds appointment booking. If you build the site yourself, Website Builder Business Plus ($14.99 a month) includes Online Appointments. Moving off a free address? Here is how to switch from Gmail without losing clients.
Set up your Google Business Profile in the fall too, with your hours for tax season. Our guide to Google Business Profile covers categories, reviews and linking it to your site.
What a tax preparer website costs
There are three realistic ways to get a tax office online, and all of them need a domain and business email. Prices are current storefront prices before taxes; products renew automatically until cancelled.
| Path | What you pay | Best for |
|---|---|---|
| Build it yourself | .com domain $24.99 a year, WordPress Basic $12.99 a month or Website Builder Business Plus $14.99 a month, Professional Email from $4.99 a month per inbox; optional OV SSL $99.99 a year | Preparers with time in the off-season who are comfortable with a builder or WordPress. |
| Have Force Domains build it | A written quote with a fixed price before we start, plus domain, hosting and email, paid separately | Offices that want a fast, bilingual site ready before filing season without losing billable hours. |
| Start with domain and email | .com domain $24.99 a year and Professional Email from $4.99 a month per inbox | New preparers who need a professional address now and a full site before next season. |
When we build it, you get pages designed for phones, copy organized for Google and AI assistants, a contact form and tap-to-call, your domain, email and hosting connected, SPF, DKIM and DMARC set up so your emails are less likely to be spoofed, and Google Search Console and analytics in place, in English, Spanish or both. You own the domain, files, hosting and email. Help with Google Business Profile or monthly care can be included in your written quote. Request a quote, or compare costs in detail in what a small business website costs.