How can a landlord connect QuickBooks or Xero to rental software safely?
Connect it from an admin account you control, read the permission screen before you click Allow, connect only the company file that holds the rental, and check the connected apps list every quarter. A modern connection uses a permission token, so the rental software never sees your accounting password, and you can switch it off from the accounting side without asking the software company. Intuit's help pages explain how to disconnect an app, and the same habit applies to Xero.
What happens when you connect two tools
When rental software asks to connect to QuickBooks Online or Xero, it sends you to the accounting company's own sign-in page. You sign in there, not inside the rental software, and the accounting company shows a list of what the app wants to do. If you agree, it hands the app a token. The token is a long code that works like a key card: it opens only the doors listed on the screen, it can be cancelled by you, and it is not your password.
This is why the first rule is simple. If a tool ever asks you to type your accounting username and password into its own form, stop. A sign-in on the accounting company's page, followed by a permission screen, is the normal and safer pattern.
Read the permission screen before you allow it
The screen lists what the app can do with your books. Read it as you would read a contract line. The questions to ask are short.
- Can it only read your accounts and transactions, or can it also create and edit entries?
- Does it name one company file, or every file this login can reach?
- Does it say what happens to the data when you disconnect?
- Does it connect to payments or only to bookkeeping? Money movement should never ride along with a bookkeeping connection.
If the app asks for more than the job needs, pick a narrower option or say no. A rental app that only needs to post rent and expenses does not need to see payroll for an unrelated business that happens to share your login.
Who should make the connection
Use an admin account that you own, not a helper's login. Intuit's help page on disconnecting apps says the user who connected an app is the one who can disconnect it directly, and that only admins can manage apps for a company. If a bookkeeper connects the app under their own login and then leaves, you can end up unable to switch it off without a support call.
Keep one company file per rental business where you can. Landlords who run one LLC per property often keep a separate file for each, which also limits what any single connection can see. Connect the software to the file for the property it manages, not to a file that holds your other businesses.
Checks after you connect
- Post one test entry, such as a single rent payment, and confirm it lands in the right account in the right file.
- Check that duplicate imports are off. A bank feed and a connected rent system can both post the same deposit, and then your income is counted twice.
- Write the connection in a small note: which app, which file, which admin, and the date.
- Put a quarterly reminder on your calendar to open the connected apps list and remove anything you do not recognize.
The accounting company also keeps an audit log of who changed what. After a new connection, look at it once to see how connected apps are labeled, so you can spot changes made by software and not by a person.
How to disconnect, and what that does not do
In QuickBooks Online, Intuit's article says to open the app in your connected apps, use the Action menu, choose Disconnect and confirm. Intuit also notes that disconnecting does not cancel the app's paid subscription, which you handle with the app provider. Xero has a similar connected apps page under its settings. Disconnecting stops new data from flowing. It does not delete entries the app already posted, so review those before you close the books for the period.
DoorKeeping connects to QuickBooks Online this way: you sign in on Intuit's page, grant the connection, and anything it sends to your books waits for your accept. It does not connect to Xero. Helpers get roles, and anything that moves money or sends a legal notice waits for your one-tap approval. DoorKeeping never holds your money, and the connection to your books does not change that.
Menu names change often. Use the accounting company's current help page for the exact steps on your screen.
Sources
- Intuit, Disconnect an app in QuickBooks Online, read Oct 30, 2026
- CISA, More than a Password (multifactor authentication), read Oct 30, 2026
- FTC, Cybersecurity for Small Business, read Oct 30, 2026
Questions
- Does connecting an app give it my QuickBooks password?
- A normal connection does not. You sign in on the accounting company's own page and the app receives a permission token that you can cancel.
- Can I connect one rental app to several company files?
- Yes, but connect each file on purpose. Limiting a connection to the file for one property limits what it can see.
- What if my bookkeeper made the connection?
- Ask them to hand it to an admin account you own, or reconnect it yourself, so you can disconnect it later without help.
- Does disconnecting delete the entries the app posted?
- No. It stops new data. Review and correct the entries already in your books.