Guides/Tax and Compliance

Form 8879 E-File Authorization: When the ERO Needs It, Signing Order and the Three-Year Retention Rule

When an ERO must get a signed Form 8879 or Form 8878, the signing sequence, identity checks under Publication 1345, PIN rules, and how long the form must be kept, with a retention date worked example.

CORAA TeamUpdated November 6, 20266 min read

Form 8879, IRS e-file Signature Authorization, is the signed record that lets an electronic return originator (ERO) transmit an individual return. The ERO keeps it for three years from the later of the return due date or the IRS received date, and does not send it to the IRS unless asked. The details that cause trouble are which method requires the form, who signs first, and what the three-year clock counts from.

When is Form 8879 required?

Form 8879 is the declaration and signature authorization for an individual income tax return e-filed through an ERO. The Internal Revenue Manual (IRM 3.42.5) identifies two situations:

  • Practitioner PIN method. IRM 3.42.5.7.1.3(4) says Form 8879 must be completed for each individual income tax return prepared using the Practitioner PIN method. There is no age limit on who can use that method, and no date of birth, prior-year AGI or prior-year PIN is needed.
  • Self-Select PIN, ERO enters the PIN. When the taxpayer authorizes the ERO to enter the taxpayer's Self-Select PIN, the ERO must get a signed Form 8879 (IRM 3.42.5.7.1.3(7)).

It is not needed when the taxpayer personally enters their own PIN as their electronic signature on the return (IRM 3.42.5.7.1.3(8)). A taxpayer's PIN can be any five digits except all zeros.

For extension requests, the parallel form is Form 8878. IRM 3.42.5.7.1.2(7) applies it to Form 4868 requests with an electronic funds withdrawal and to all Form 2350 requests. Taxpayers who use the Practitioner PIN method for an extension complete Form 8878, and the ERO keeps it for three years from the later of the return due date or the IRS received date, as with Form 8879.

In what order do the signatures happen?

IRM 3.42.5.7.1.2(6) sets the sequence: the taxpayer completes Part II and signs, and the ERO receives the signed Form 8879. Only then does the ERO sign Part III. The ERO must also confirm the taxpayer's identity under Publication 1345 before transmitting the return.

Practically, the transmit button in the tax software is the last step, not the first.

The IRM notes that taxpayers could electronically sign Forms 8878 and 8879 beginning with tax year 2014 and refers readers to Publication 1345 for the acceptable methods and identity verification requirements. A firm that collects signatures through a client portal should read those sections of Publication 1345 before relying on a portal signature.

How long must Form 8879 be kept?

Per IRM 3.42.5.7.1.2(6), the ERO retains Form 8879 for three years from the due date of the return or the IRS received date, whichever is later. IRM 3.42.5.7.1.3(12) applies the same three years to Forms 8879 and 8878, and says the ERO does not send them to the IRS unless requested. The forms must be available to the IRS for that period.

Worked example: retention dates

A firm e-files three returns for the 2025 tax year. For purposes of the example, the due date is April 15, 2026.

Return IRS received date Later of due date or received date Keep through
Client A March 20, 2026 April 15, 2026 April 15, 2029
Client B April 15, 2026 April 15, 2026 April 15, 2029
Client C October 12, 2026 October 12, 2026 October 12, 2029

Client A filed before the due date, so the due date starts the clock. Client C filed after the due date, so the received date starts it. A single firm-wide rule of "three years after April 15" would discard Client C's form six months early. A retention rule coded in the document system should compare the two dates and take the later.

What else may the ERO image and store?

IRM 3.42.5.7.1.3(13) allows an ERO to electronically image the paper records it must retain, including Form 8879 and Form 8878. It also lists Form 8453 and paper copies of Form W-2, Form W-2G and Form 1099-R among the records that may be imaged. A scanned, indexed copy satisfies the retention need if the firm can produce it on request, so the signed paper original does not have to be kept in a cabinet.

What goes in the signature file?

For each e-filed individual return, the file should hold:

  1. The signed Form 8879 (or Form 8878), with the taxpayer's signature on Part II and the ERO's signature on Part III.
  2. A record of the identity check performed under Publication 1345 before transmission.
  3. The acknowledgment from the IRS showing the received date, because the retention period can run from it.
  4. The retention end date computed from the later of the due date and the received date.
  5. A note of which PIN method was used, since that decides whether the form was required.

Common errors

  • Transmitting before the signed form is in hand. The signing order in the IRM is taxpayer, then ERO, then transmission.
  • Treating Form 8879 as a return attachment and mailing it to the IRS. It is not sent unless the IRS requests it.
  • Using one three-year date for every return in the season instead of the later of due date and received date.
  • Assuming a taxpayer who types their own PIN also needs a Form 8879. When the taxpayer personally enters the PIN, the form is not required.

How does this connect to the rest of the season?

Signature authorization sits between preparation review and transmission in the return workflow. See tax season workflow for CPA firms from intake to e-file for the intake and review steps before it, and the IRS e-file mandate and Form 8948 for when a return goes on paper instead. Records that contain taxpayer data also fall under the safeguards in IRS Publication 4557.

CORAA prepares ready-to-review audit files for US CPA firms; see /us.

Sources

Part of CORAA University · Tax and compliance for CPA firms: related guides, calculators and templates.

Share

AU-C references are to AICPA Professional Standards, paraphrased here; read the standard itself before relying on a requirement. This page is guidance, not professional advice. Report an error

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required

Keep reading