Skip to main content
  1. Blog
  2. Feature Spotlight

Zero-Friction Access: The Client Code and PIN Login Model

Why Accupe replaces email-and-password portal logins with a firm-issued Client Code and PIN, and what that means for adoption, lockouts and mobile use.

Feature Spotlight 1 May 2025 10 min read

The most common reason clients contact their accountants about the portal is not tax advice, it is trouble getting in. Login friction quietly decides whether a portal gets used at all. Accupe answers it by removing the thing clients fail at: there is no email-and-password account on the client portal in the first place. Clients sign in with a Client Code and a PIN that your firm issues.

Industry experience consistently shows that the single biggest predictor of portal adoption failure is friction at the login step. A client who attempts to log in twice and fails will not attempt a third time. They will revert to email, post, or worse, physical document drop-offs. Removing the self-managed password is the single highest-leverage UX decision a modern firm can make.

A Login Page With Exactly Two Fields

Clients sign in at your firm's branded portal address, accupe.com/p/ followed by your firm's slug, then /login. The page asks for exactly two things: the Client Code, a short reference such as CLI-465 that Accupe generates automatically for every client, and a PIN of 4 to 10 digits entered as a masked number. There is no email field, no "forgot password" link, and no sign-up option.

That absence is the point. Nothing on the page invites the client to register, invent a password, or guess which email address they used two years ago. The helper text simply tells them that their firm sends the code and PIN by email and to contact the firm if they need them resent. The failure modes of a conventional login never get the chance to occur.

Nothing to Invent, Nothing to Forget

The credentials come from you, not from the client. When you send portal access from a client's profile, you either type a PIN of 4 to 10 digits or let Accupe generate a random six-digit one, and the client receives a branded email carrying their Client Code, their temporary PIN, and a button linking straight to your login page. First sign-in takes seconds because there is no account creation step at all.

Once inside, the client is prompted to choose a PIN of their own with a banner on their Workspace Home. The prompt is persistent but not blocking, so nothing stops them using the portal in the meantime. A short numeric PIN the client chose themselves is far easier to retain than a complex password used twice a month, which is exactly the usage pattern most accounting clients have.

Security Without Password Reuse

A firm-issued code and PIN sidesteps the worst habit of conventional logins: reuse. The client cannot recycle the password they use for their personal email or their online banking, because they never set a password here. A credential leaked in some unrelated breach cannot be stuffed into your portal, since there is no email-and-password combination to stuff.

The credentials are also scoped tightly. Each portal slug only recognises its own firm's client codes, so a client cannot accidentally sign in to the wrong firm's portal, and a failed attempt reveals nothing about which part was wrong. If you ever suspect a PIN has been shared too widely, resending portal access replaces it immediately.

Lockouts End at Your Desk, Not a Helpdesk

There is no self-service reset email, because there is no password to reset. A locked-out client simply asks your firm, and your team resends portal access from the client's profile, which issues a fresh PIN on the spot and emails it in your branding. What used to be a helpdesk ticket, an identity-verification dance, and a follow-up call becomes a single action on a screen your team already uses.

Signed-in clients can also raise the flag themselves: a reset request from their Workspace Home notifies your firm's admins and managers with a link straight to that client's profile. Either way, the firm stays in control of who can get in, and the client is never left waiting on an automated email that landed in a spam folder.

Mobile-First by Design

Most clients open the portal on a phone. A traditional username-and-password flow on mobile is brutal: tiny keyboards, autofill failures, the dreaded "password not strong enough" rejection. A short code and a numeric PIN are about the easiest credentials a phone keyboard can offer, and the login page capitalises the code automatically as the client types.

Because nothing is emailed to authenticate a session, signing in never depends on reaching an inbox in the moment. A director on a site with poor signal, or a business running a shared office mailbox that three people dip into, can still get straight in. And Accupe's portal is fully responsive, so documents, messages, and task status all work natively from the phone once they are in.

An Access Trail the Firm Controls

Because every login credential is issued by the firm, the access story is explicit rather than accidental. Portal access exists only where someone at your firm deliberately granted it from the client's profile, and the profile records when access was last set, a line that persists so you can always see when credentials were last issued. There are no orphaned self-registered accounts and no forgotten sign-ups drifting around from years past.

The temporary PIN itself is shown to your team exactly once, in a copyable chip, and cannot be viewed again afterwards. Sending access is also rate-limited to 30 sends per hour per user, a small guardrail that keeps bulk provisioning deliberate. Access to client data is something your firm hands out knowingly and can reissue or replace at will.

Adoption Follows the Easiest Channel

When the portal is easy to access, clients actually use it. Two short credentials that arrive in a branded email mean the first login succeeds on the first try, and every later login only asks the client to remember a number they chose themselves. Firms feel this as fewer chases: documents uploaded on time, engagement letters signed promptly, and questions answered inside the portal instead of leaking back to email.

High portal adoption is also the gateway to other automation wins. Once a client is comfortable signing in with their code and PIN, they are comfortable uploading documents in-portal, replying to secure messages in-portal, and checking task status in-portal. The frictionless login is the wedge that unlocks every downstream improvement.

The Branding Compound

The access flow is also a branding flow. The portal access email that carries the code and PIN is sent in your firm's branding, the login page lives at your own portal address, and once a slug is set Accupe even generates a QR code in your brand colour that clients can scan to reach the portal from print materials or a business card. The client's route in is unmistakably yours from the first touch.

Few firms appreciate that their login flow is, quietly, one of their most visible brand surfaces. Every reminder for an outstanding document and every notification that lands in the client's inbox reinforces the same identity, and the sign-in page they arrive at carries it through. Accupe makes that surface work for you instead of against you.

The Cumulative Effect

Each of these benefits, security, branding, mobile experience, lockout handling, is incremental. But cumulatively they produce a step-change in how clients experience your firm. The portal becomes something they actively want to use rather than something they tolerate.

And the more they use it, the more your firm benefits: faster document turnaround, cleaner records, lower communication overhead, and higher per-client profitability. The Client Code and PIN model is not just a login mechanism. It is an adoption strategy.

Ready to transform your firm?

See Accupe in action. No credit card required.

Accupe · SaaS database