Data Security: TurboTax Website vs Desktop Software - Which is More Secure for E-filing?

12 So does that mean desktop is safer? I've always used the online version because it seemed more convenient, but now I'm worried. Also, do they encrypt the data during transmission either way?

8 Desktop software generally presents a smaller window of vulnerability since your data isn't persistently stored on their servers. However, both options can be secure if implemented properly. Yes, reputable tax software providers use encryption during data transmission regardless of whether you're using desktop or online versions. They typically use TLS/SSL encryption (the same technology used for secure online banking). The security difference isn't so much about the transmission itself but about where your data resides most of the time.

7 How exactly does this work? Does it just tell you about security or does it help with actual tax preparation too? I've never heard of this before.

19 Sounds interesting but I'm skeptical. How would they know the internal security protocols of TurboTax or other companies? Those details aren't usually public information.

15 The tool analyzes privacy policies and security documentation from major tax providers, giving you a breakdown of what happens with your data. It's not just about security - it can also scan your tax documents for inconsistencies or potential audit triggers. As for how they know about internal protocols, they don't have insider information, but they compile all publicly available security documentation, past breach information, and privacy policies. They then translate the legal jargon into clear explanations about what happens with your data.

22 Wait, how does calling the IRS help with understanding TurboTax's security policies? Wouldn't you need to contact TurboTax directly for that? I don't see how the IRS would have insight into a private company's data practices.

16 This sounds like BS honestly. The IRS doesn't give advice about which tax software to use or their security protocols. They're not even supposed to recommend specific products. And they definitely don't have insider knowledge about how TurboTax handles data.

3 You're right that the IRS doesn't provide info about TurboTax's internal security. What I actually called about was understanding the e-filing transmission standards that the IRS requires from authorized e-file providers, which gave me insight into the minimum security requirements for any company offering e-filing. I found out the IRS has specific data security guidelines that all authorized e-file providers must follow, regardless of whether they're web-based or desktop software. This helped me understand the baseline security I could expect during the actual transmission process.

10 So would you personally recommend desktop or online? And does it matter which brand? I'm trying to decide for this year.

5 I personally use desktop software and only connect it to the internet during the actual filing process. This gives me maximum control over my data. As for brands, it matters less than their specific security practices. Look for companies that clearly explain their data retention policies, have good track records without major breaches, and offer two-factor authentication. Also check if they have SOC 2 compliance, which means they've been independently audited for security practices.

14 TurboTax had a credential stuffing attack in 2015 where some accounts were accessed, but it wasn't a full system breach. And in 2019, TaxSlayer had a similar issue. The biggest tax-related breach was actually the IRS's "Get Transcript" tool where about 100,000 taxpayers had their information stolen.

I'm glad this discussion is helping people think more critically about their tax software choices! As someone new to this community, I've been following along and learning a lot. From what I've gathered reading through everyone's experiences, it seems like the desktop vs. online decision really comes down to your personal risk tolerance and technical comfort level. The cybersecurity expert's point about professional security teams managing online platforms vs. individual computer security is particularly interesting - I hadn't considered that my own computer might actually be the weak link. I'm curious about something though - for those who've switched from online to desktop (or vice versa), was the transition difficult? I'm thinking about making a change but wondering about things like importing previous year data or learning a new interface. Any insights would be appreciated! Also, has anyone looked into whether there are any IRS resources that explain the security requirements for authorized e-file providers? It might be helpful to understand the baseline standards all these companies have to meet.

Great questions! I actually made the switch from TurboTax online to desktop software two years ago after a security scare (not with TurboTax specifically, but it got me thinking). The transition was easier than I expected. Most desktop software can import your previous year's return from online versions - you usually just need to download a copy of your prior year return and the software walks you through importing it. The interfaces are pretty similar these days too. Regarding IRS resources on security requirements, I found some helpful info on their "Authorized e-file Provider" page on irs.gov. They outline the baseline security standards all providers must meet, including encryption requirements and data protection protocols. It's pretty technical but gives you a sense of the minimum standards everyone has to follow. One thing I discovered after switching - make sure to turn off any automatic cloud backup features if you want true local-only storage. Some desktop versions enable this by default, which kind of defeats the purpose of going desktop for privacy reasons!

Great questions! I made the switch from TurboTax online to desktop software about two years ago after a friend's identity was stolen (not necessarily from tax software, but it made me more security-conscious). The transition was actually easier than I expected. Most desktop versions can import your previous year's data even if it was filed online - you just need your AGI from last year's return. The interface took maybe a week to get comfortable with, but it's not drastically different. Regarding IRS resources on security requirements, yes! The IRS has Publication 1345 which outlines security requirements for Authorized e-file Providers. It covers encryption standards, data protection requirements, and system security measures. You can find it on the IRS website under "Tax Professionals" section. It's pretty technical but gives you a good baseline of what every legitimate tax software company should be doing at minimum. One thing I didn't expect - desktop software actually feels faster to me now since I'm not dealing with web page loading times or potential internet connectivity issues during filing.

Great question about the transition between online and desktop! I actually made the switch from TurboTax online to desktop software two years ago after a friend's identity was stolen (not necessarily tax-related, but it made me more security-conscious). The transition was easier than I expected. Most desktop versions can import your previous year's return from the online version - you usually just need to download a PDF copy of your prior return from your online account first. The interfaces are pretty similar these days, so the learning curve wasn't steep. As for IRS resources on security requirements, if you search for "IRS Publication 1345" and "Authorized e-file Provider Security Requirements," you'll find their official standards. It's pretty technical, but it gives you a baseline of what all legitimate tax software must comply with. The IRS also maintains a list of all authorized e-file providers on their website. One tip: if you do switch to desktop, buy the software early in tax season when it often goes on sale, rather than waiting until the last minute when prices are higher and you're rushed to learn the new system.

Great questions! I switched from TurboTax online to desktop software two years ago after a security scare, and the transition was actually smoother than I expected. Most desktop software can import your previous year's return from the online version - you usually just need to download your prior year PDF and the software will extract the relevant information. The interfaces are pretty similar these days, so the learning curve wasn't steep. As for IRS resources on security requirements, they do have Publication 1345 which outlines the security standards for Authorized e-file Providers. It covers things like encryption requirements, data protection standards, and system security protocols that all tax software companies must meet. You can find it on the IRS website under "Tax Professionals" section. One thing I discovered during my switch - some desktop versions offer a "privacy mode" where they don't save any data locally after e-filing, which gives you the convenience of desktop software without leaving traces on your computer. Might be worth looking into if you're concerned about both cloud storage and local data persistence.

Great questions! I switched from TurboTax online to desktop software two years ago and can share my experience. The transition was actually smoother than I expected. Most desktop versions can import your previous year's data even if it was filed online - you just need to locate your PDF copy of last year's return or download it from your online account before switching. The interface took maybe an hour to get comfortable with, but it's not dramatically different from the online versions. Regarding IRS resources on security requirements, you can find information about their e-file provider standards on the IRS website under "Authorized e-file Providers" - they outline the minimum security protocols all providers must follow. It's pretty technical reading, but it gives you a baseline of what to expect from any legitimate tax software. One thing I didn't anticipate was that desktop software actually feels faster since you're not waiting for web pages to load between each section. That was an unexpected bonus beyond the security considerations. @f65887279186 To answer your question about the security landscape evolving - I think we'll see more emphasis on zero-knowledge architectures where even the service provider can't access your unencrypted data. Some companies are already moving in this direction.