Getting started

Go to the sign-up page and enter your email address and a password. Use at least 8 characters. A phrase of three random words is strong and easy to remember. VATflow checks the password against lists of passwords exposed in known breaches and will ask for a different one if it has been seen before.

You will see a short security check from Cloudflare on the form. It runs on its own and rarely needs anything from you.

VATflow sends a verification link to the address you gave. Open it to confirm the address. Until you do, you can sign in but you cannot connect to HMRC or submit a return.

• Check your spam or junk folder if the email has not arrived after a few minutes.
• The link expires after a short time. Sign in and ask for a new one if it has.

Every action that reaches HMRC, such as connecting a company or submitting a return, needs a second factor. VATflow uses a time-based one-time code from an authenticator app on your phone: Google Authenticator, Microsoft Authenticator, 1Password, Authy or any app that supports the standard.

1. Open Settings and find Two-factor authentication.
2. Choose Authenticator app. VATflow shows a QR code.
3. Scan the code with your app, or type the key it shows.
4. Enter the 6-digit code from your app to confirm.

You will be asked for a code the first time you reach HMRC in each sign-in, not on every page. If you do not have an app yet, VATflow prompts you to set one up when you first try to connect a company.

After you confirm your authenticator, VATflow shows a set of recovery codes. Each code signs you in once if you lose your phone. They are shown only once.

• Save them somewhere safe, such as a password manager, and not in the same place as your phone.
• Using a recovery code removes your authenticator so you can set up a new one.
• You can generate a new set from Settings at any time. The old set stops working straight away.

You can also add email codes as a fallback in Settings. See MFA and account security for what happens if you lose your device.

1. Add your company and connect to HMRC.
2. Decide how you will keep your digital records.
3. Open a VAT period from VAT Returns and prepare your first return.