How to choose a bookkeeper you can trust with your bank login — the checks that matter

Handing someone your bank login is one of the most sensitive decisions you'll make about your business finances. Yet many owners choose bookkeepers based on referrals or price alone, never thinking through what actually matters when someone needs trusted access to your money. The real question isn't whether they seem nice—it's whether they've worked in an environment that forces them to respect sensitive data.

Trust, in this context, isn't emotional. It's structural. It comes from years of working inside systems where breaches cost money, where there are witnesses, where practices are audited. A bookkeeper who has worked in firms, in banks, or for large clients will have internalized habits around access that a solo operator picking up work on the side simply may not have developed.

Experience in settings where access is regulated

Ask directly: where have they worked? If they've spent years in a bookkeeping or accounting firm, they've been exposed to client confidentiality as a non-negotiable standard. Firms have processes—separation of duties, password protocols, activity logs. They know why those things exist. Someone who has only ever worked solo or helped a friend with their books may be completely honest and competent, but they haven't been tested in a context where mishandling data creates liability for someone else.

The same applies to candidates who have worked in banking, payroll processing, or SARS-facing roles. These environments are structured around compliance. People who have spent time there understand that casual access is not neutral; it's a risk that needs to be managed. Ask them to describe their previous setup: Did they use shared passwords or individual logins? Was there a handover process when someone left? What happened if data went missing? Their answers will tell you whether they've ever worked somewhere that took this seriously.

This doesn't mean you should only hire from big firms. It means you should weight experience in regulated or structured environments heavily. A freelancer with five years inside a firm is a better bet than someone with ten years of self-directed work, all else equal.

Verification, insurance and what you can actually see

Before you hand over credentials, ask to see their indemnity insurance. Bookkeepers working with client data should carry professional indemnity cover. Not all do, especially if they're operating informally. Those who do have been vetted by an insurer; the insurer has checked their track record and practices. This is a third-party signal that someone has met a basic standard. Ask for the policy number and the insurer's name. It takes 30 seconds to verify they're telling the truth.

Check whether they hold any relevant credentials. A bookkeeping qualification from a recognized body isn't essential, but it shows they've learned standards, not just picked up tricks. If they're registered with a professional body—ask what body and verify the registration yourself on that body's website. Don't take their word for it.

Require references from other business owners who use them for bookkeeping. Not general references; ask for three people currently using them for monthly reconciliations and bank access. Contact at least two. Ask those references directly: have there been any instances where credentials were misused, data was breached, or access was left open after the relationship ended? You're listening for whether the bookkeeper proactively shut down access on the last day and whether they've ever made a careless mistake that exposed anything. A reference who says "I never even thought about it" is a yellow flag; security should be visible and deliberate.

Ask the candidate how they would handle deactivation on your last day. The best answer is: they use a separate login created just for them (not sharing yours), and you change the password the moment the relationship ends. If they ask to use your own login or are vague about how access would be terminated, move on.

The goal is not to find someone perfect. It's to find someone whose experience, insurance, and track record show they've operated in an environment where handling client data carefully was built in, not an afterthought. On Strove, you can review verified bookkeepers' credentials and ratings before you even ask about access—use that to narrow the field before the deeper conversation starts.