How to Protect Your Companies House Authentication Code

Key Takeaways

1. The Companies House authentication code is a unique digital key that controls access to your company’s official filings.
2. Protecting your Companies House authentication code is essential to prevent unauthorised filings, fraud, or loss of company control.
3. If your code is compromised, your business faces real risks—financial loss, regulatory breaches, and director liability.
4. Only directors or authorised, trusted professionals should access your authentication code under strict controls.
5. Improperly sharing your code breaches director duties under UK law and makes tracking unauthorised changes difficult.
6. If your code is lost or compromised, act immediately by requesting a new code and notifying Companies House.
7. Secure document management and ongoing monitoring of filings are critical to prevent Companies House fraud.
8. Failing to safeguard your authentication code could trigger disputes, regulatory problems, and reputational damage.
9. Our platform at Go-Legal AI offers clear step-by-step guides and secure document tools designed for UK businesses—including practical tools to protect your authentication code.
10. Go-Legal AI is rated Excellent on Trustpilot with over 170 five-star reviews from satisfied users.

How to Keep Your Companies House Authentication Code Secure

Business owners often overlook how crucial it is to keep the Companies House authentication code confidential. When access falls into the wrong hands, unauthorised individuals can make filings or alter company details—leading to fraud, financial loss, or even the company’s dissolution. Knowing how to protect your Companies House authentication code isn’t just best practice; it’s a fundamental legal responsibility for every UK company director.

In this guide, you’ll learn what the authentication code is, why it truly matters, real risks of mishandling it, and clear, actionable steps to keep it safe. You’ll also be ready to respond if the code is ever lost or compromised, and discover how our tools help you manage security confidently.

What Is the Companies House Authentication Code and Why Is It Important?

The Companies House authentication code is a unique, six-character alphanumeric password given to every UK limited company and LLP by Companies House. Delivered by post to the registered office, it works as a secure online signature—authorising filings such as annual accounts, director updates, or confirmation statements via Companies House WebFiling. Only those with the code can lawfully approve and submit these changes.

The authentication code is, in effect, the digital key to your company’s legal identity. If misused, anyone with the code can submit false records, alter company officers or shareholders, file incorrect accounts, or even dissolve the company without directors’ knowledge. Loss of control, long-term reputational harm, and unwelcome regulatory scrutiny all follow if the code is mishandled.

What Are the Legal Risks If Your Companies House Authentication Code Is Exposed?

Company directors in England & Wales have a clear legal duty to maintain proper company records and protect all property, including digital access credentials, under the Companies Act 2006. An exposed code increases the risk of unauthorised filings, with serious consequences for the company and personal risk for directors.

Risks include:

• Fraudulent changes to directors, shareholders, or registered details.
• Unauthorised transfers or dilution of shareholdings.
• Risk of unwanted dissolution or restructuring of the business.
• Damaged reputation affecting relationships with banks, suppliers, and customers.
• Regulatory investigations by Companies House or law enforcement.
• Potential personal liability for breach of statutory director duties (sections 171–177, Companies Act 2006).

Who Should Have Access to Your Authentication Code? Director Duties Explained

In line with UK legal standards, only a small, trusted group should access your authentication code:

• Directors
• Company secretary (if the company has one)
• Authorised professionals, like regulated accountants or specialist legal advisers

Directors have an ongoing legal duty to safeguard sensitive company information and proactively prevent fraud or mismanagement. Giving access to unauthorised individuals, or failing to monitor code handling, can breach director duties and expose your company to unnecessary risks.

If you need to share access securely, our platform enables temporary, logged access—so you remain in full control.

Steps to Protect Your Companies House Authentication Code: A Practical Checklist

Implement these best practices to secure your authentication code and remain compliant:

1. Restrict access to directors and essential professionals only.
2. Store the code in an encrypted, access-controlled password manager.
3. Keep a formal, centralised log of who knows the code and dates it was accessed or shared.
4. Update the code immediately if someone leaves your organisation or you suspect any risk of exposure.
5. Check your Companies House filings monthly to spot unauthorised changes.
6. Renew your authentication code yearly or whenever staff or access needs change.
7. Record all access requests and approvals in writing or via central records.
8. Train your team to recognise the importance of this code and proper security protocols.

With our platform, you can automate code access logs and receive instant alerts about any suspicious filings—helping you protect your company with ease.

Key Security Measures for Companies House Authentication Code Protection

Use our auto-logged access controls and policy templates to ensure your code is only ever in the right hands.

What Should You Do If Your Companies House Authentication Code Is Stolen or Compromised?

When you suspect your code is stolen or compromised, quick action minimises risk:

1. Notify all directors and key decision-makers.
2. Immediately request a new authentication code from Companies House via the WebFiling portal or form CHGCODE.
3. Review records of all recent filings for unauthorised activity.
4. If irregularities are found, alert Companies House for urgent investigation and correction.
5. Consider police involvement if you believe fraud has occurred.
6. Perform an internal review of how the breach happened, and tighten your policies and access controls.
7. Document every action and all correspondence for your records.

Our platform provides instant alerts and step-by-step guidance for recovery and investigation—so you regain control without costly delays or uncertainty.

Best Practices for Sharing Your Companies House Authentication Code Safely (If You Must)

If you need to share the code with third parties (such as an accountant):

• Only share temporarily and with express written board consent.
• Change the code as soon as the job is complete or the need ends.
• Keep a detailed log of when, why, and with whom the code was shared.
• Never share by plain email, chat apps, or other insecure means.
• Regularly check all code access events and revoke access if not required.

How to Request a New Companies House Authentication Code in the UK: Step-by-Step

If your code is lost, exposed, or forgotten, order a new one quickly:

1. Visit the Companies House WebFiling login page.
2. Click “Request an authentication code.”
3. Enter your company number and registered office details.
4. The new code is posted to the registered address (typically within 5 working days).
5. On receipt, immediately update your internal access records and permissions.
6. If the code was stolen, also contact Companies House with urgent details of the potential breach.

How Go-Legal AI Simplifies Companies House Authentication Code Security

Our tools at Go-Legal AI are tailored for busy directors—helping you keep company filings secure and compliant, without extra hassle:

• Pre-built templates and policy packs for proper code management, aligned to UK best practices.
• AI-powered access log reviews to ensure only the correct people have the code, and every action is properly recorded.
• Automated email and dashboard alerts if Companies House filings change, enabling you to act before problems snowball.
• Digital workflows for incident recovery, communication logs, and expert guidance at every step.
• A central dashboard for all authentication code activities and permissions, streamlining compliance and making director duties much simpler to evidence.

By using our digital solutions, you’ll stay ahead of evolving security threats while saving time and avoiding common director pitfalls.

Frequently Asked Questions

What should I do if someone makes unauthorised filings on my company’s behalf?

Act quickly: notify Companies House and ask for an investigation or amendment. Change your authentication code, review internal access logs, and use our compliance tools to prevent repeat issues.

Can I see who has used my Companies House authentication code before?

Companies House does not keep public logs of code usage. You should keep your own internal records of who knows the code and when it’s used. Our platform automates this process for easy audit trails.

How often should I change my Companies House authentication code?

Best practice is annual code renewal, or any time someone with access leaves or changes roles. Regular updates keep your code security high and director duties satisfied.

If my accountant needs access, is it safe to give them my authentication code?

It can be, if you grant only limited, logged access, have board approval, and change the code immediately afterwards. Use a secure tool rather than email for sharing—our portal ensures proper documentation.

What is the fastest way to reset a stolen or lost Companies House authentication code?

Use the official Companies House WebFiling service straight away. Request the new code to be sent to your registered office and alert Companies House if you suspect active fraud.

Protect Your Companies House Authentication Code with Confidence

The security of your Companies House authentication code is crucial to ensuring that your business remains protected, directors meet their legal duties, and your company records stay accurate and safe. Simple mistakes—like storing your code in an insecure location, or failing to monitor changes—can lead to fraud, reputational harm, and costly disputes.

Manual tracking and informal sharing create real vulnerabilities. By choosing secure, automated workflows, robust audit trails, and expert-vetted solutions, you build better protection and peace of mind.

To take control of your Companies House authentication code and safeguard your company’s future, start using our integrated tools and guides—so every filing is secure, every access is documented, and every director has confidence in compliance.

Ready to strengthen your security and protect your business? Start your free trial and experience just how simple compliance can be.