15Tally Security
A one-time code is asked at the login screen, before Tally opens — and the code goes to YOU, the owner, never to the person asking for it. You also get a message every single time somebody signs in: who, which PC, what time. And a kill switch: one tap from your phone locks one person out, or everybody, immediately. A password can be copied, written on a slip and carried home. A code that lands on your phone cannot.
Installed and handed over personally · codes go to the owner's phone · Rs 6,500 a year
HDM Tally OTP Login
The code goes to the owner — never to the person signing in
Sign-in · COUNTER-PC
Rahul
Password accepted · code required
3 wrong codes slow it down · 6 lock the account and tell you
Owner's phone
10:41Rahul is trying to open Tally.
481027
How it works, shown as a mockup · tap to switch light / dark
By the numbers
Every number below is observable in the live console — no quarterly guesswork, no black box.
Capabilities
Nobody opens your Tally without a code on your phone.
The code is asked at the sign-in itself — before Tally opens, before the desktop appears. It is asked on the shop PC, and it is asked when somebody connects to your rented cloud Tally from any other PC, from home, from anywhere. There is no screen to skip and no way in around it.
Your accountant presses "send code". Your WhatsApp shows: "Rahul is trying to open Tally. Code: 481027". You read it out to him — or you don't. Nobody opens your books at 11pm, or on the day he was told not to come in, unless you personally hand over the six digits.
Your own phone carries an authenticator app holding one entry per staff member, so you can generate anybody's code yourself with no internet at all. Each person also gets 10 one-time backup codes, printed at setup and kept in your safe. The code check itself runs on your machine, not on our server.
Who signed in, which PC, and the exact time — in Indian time, on your phone. A sign-in outside your working hours is flagged. And a wrong code raises its own separate alert, because somebody entering a wrong code already has your password and is only missing the phone.
One tap: lock one person out, or lock everybody out, right now. The account stays locked until you unlock it — a locked person can hold the password, the PC and the office key and still not get in. Use it the hour somebody walks out, not the week after.
Three wrong codes and the login slows to a crawl. Six and the account locks itself and tells you. Nobody sits overnight trying six-digit numbers, and you find out the first time they try.
Part of the setup is giving each staff member their own Tally and Windows login instead of everyone sharing one. That is what makes every alert carry a real name rather than "Admin", and what makes the kill switch able to remove one person without disturbing anybody else.
An owner-only account that can never be locked out, plus printed recovery codes. We deliberately lock you out and get you back in while you watch, on handover day, so a lost phone is an inconvenience and never a shut shop.
The tool's own folders are closed to ordinary Windows users as part of the install, and code logging is switched off, so a code cannot be read back out of a file on the machine by the person it was meant to keep out.
The complete toolkit
11 tools · one consoleFrom margin alerts to teaching the bot a new word — every tool your shop needs, in one clean place. Tap any tool to see it in action.
Before you read the price
This is an expensive product that pays for itself in one kind of business and not in another. Here is the honest test, in the same words we use to qualify a sale.
Said plainly: this stops the wrong person getting IN. It does not watch what the right person does once they are in. Most shops that have a problem here need both, and the two are sold separately on purpose so you can buy the one you actually need. If your worry is an altered bill rather than an unknown sign-in, buy HDM Tally Activity Alerts instead and keep the money.
Pricing
Rs 6,500 a year covers the whole thing — the code prompt, the WhatsApp delivery, the authenticator setup, the backup codes, the sign-in alerts, the kill switch, the install, the handover and us answering through the year. There is no setup fee and no per-person charge: add a joiner or remove a leaver as often as you like at no cost. Rs 6,500 is the whole amount payable to us, with nothing added on top — HDM is not registered under GST.
A single-use code at the login, every sign-in on your phone, and a kill switch you can use from anywhere.
Rs 6,500 a year, billed a year in advance. One shop — one Tally PC or one cloud server — with every staff login on it included. Nothing is added to this figure.
Prices in INR · same data, same Tally sync — one plan, everything included · tap to chat on WhatsApp.
Read this before you sign
Printed in the same size as everything we do include. If it is on this list it is not in the price, and finding that out now is the point.
This product ends the moment somebody is correctly signed in. Altered bills, cancelled bills, backdated entries and changed bank details are HDM Tally Activity Alerts, a separate product at Rs 4,900 a year.
We do not supply or pay for TallyPrime, your Tally licence, your Windows licence or your cloud server. This is the lock on the door; the building is still yours.
If you have forgotten your own TallyPrime company password, that is between you and Tally Solutions. We add a code in front of the sign-in; we cannot read what is behind it.
The code is asked at sign-in and when a locked screen is unlocked. Somebody who walks up to a machine a staff member left open and unlocked is not stopped by this — that is a screen-lock habit, and we set the timeout with you, but we will not pretend it is a guarantee.
This sits in front of them, it does not replace them. Who may see the Balance Sheet, who may alter a voucher — those stay Tally's own security settings and yours to set.
Some rented-Tally providers do not let anything be installed on their server. We test yours before you pay, and if they refuse we decline the sale rather than take the money and argue about it later.
How it runs
Roughly two weeks, and you know at every point what is happening and what we need from you.
We check where your Tally actually lives — your own PC or a rented cloud server — and we test that the lock can be installed there. If your provider blocks it, we say so and there is no sale.
You send the list of people who open Tally, and the WhatsApp number the codes should land on. Usually yours.
Every single account is registered BEFORE the lock is switched on. That order matters: switched on first, an unregistered account is refused, and a shop can lock itself out of its own books on day one.
The code prompt goes live, your phone is enrolled with one entry per staff member, and backup codes are printed for each person.
We lock you out on purpose and you get yourself back in using the recovery route, with us watching. Nobody leaves until that has worked.
A one-page sheet your staff can follow, the kill switch demonstrated on a real account, and a week of being on call while everybody gets used to it.
Straight answers
Including the last one, which almost nobody asks out loud — so we answer it without being asked.
In practice they wait once, at the start of a shift, not all day — the code is asked at sign-in, not at every screen. And you are not the only route: your own phone can generate anybody's code with no internet, each person holds 10 printed backup codes for the days you are on a flight or in a meeting, and you can hand out a code in advance. What you cannot do is have somebody sign in without you knowing about it, which is the entire point.
A password is a thing. It can be watched over a shoulder, written on a slip, saved in a browser, given to a colleague for one day and never taken back, and carried out of the door by somebody who left in 2024. A code that arrives on your phone for one sign-in and dies minutes later is not a thing anybody can keep. Rs 6,500 a year is about Rs 18 a day, and the question to ask is what one unexplained sign-in to your books costs.
This is set up on day one, not left to the day it happens. There is an owner-only account that is never locked out, and a set of printed recovery codes you keep somewhere that is not your phone. On handover day we deliberately lock you out and get you back in while you watch, so you have done it once before you ever need to do it for real.
Then your staff still sign in. We want you to know how this is built, because it decides what happens on your worst day: the code checking runs on YOUR machine, not on ours. Our side is only the convenience of pushing the code to your WhatsApp. If our server, this website and our phone all went dark at the same moment, your own authenticator app and your printed backup codes would keep working exactly as they do today, because neither of them ever touches us. The lock is yours, not rented.
FAQ
No. It sits at the sign-in, in front of everything. It does not open your company, it does not read a voucher, it does not create, alter or delete a master or an entry, and it does not copy your books anywhere. Remove it and your data is exactly as it was — because it was never touched.
No. It runs once, at the sign-in screen, and then it is finished for the session. After you are in, Tally runs exactly as fast as it does today — nothing of ours is running beside it.
Sign-ins still work. The code check happens on the machine itself. Only the WhatsApp delivery of the code needs a connection — and for exactly that reason every person has 10 printed backup codes, and your own phone can produce a code offline.
That is the case it was chosen for: the code is asked on the remote sign-in, so it protects your books from any PC in any city. The one thing to check is your provider — some hosted-Tally companies do not allow anything to be installed on their server. We test yours before you pay, and we decline the sale if they will not permit it.
One tap on the kill switch and they are out, that minute, wherever they are. Then we remove the account at your next check-in. You do not have to change a password that four other people also know, and you do not have to wonder whether they wrote it down.
No. Each code is good for one sign-in, inside a short window, and then it is dead. A code seen over a shoulder yesterday opens nothing today.
You get a numbered invoice carrying our name and address and your own business details. Rs 6,500 a year is the whole amount payable — nothing is added to it. One thing we would rather you hear from us than discover at your filing: HDM is not registered under GST, so there is no tax on our bill and no input credit on it for you to claim. If that ever changes, we will tell you in writing before the first bill that carries it.
The same Rs 6,500, for the lock, the alerts, the kill switch and us answering when something needs changing. Adding or removing a staff member is included — we do not charge you for a joiner or a leaver.
Our commitment
Once your licence is issued, the payment is non-refundable. What you get in return is stronger than a refund: any issue you raise is taken up personally and worked on until it is completely resolved — at no extra cost, for as long as your plan is active.
No refunds after purchase · every reported problem fixed end to end · direct support on WhatsApp
The platform
HDM Tally OTP Login is one of a growing family of focused automations, each set up for you personally.
Get started
A 30-minute walkthrough on your real process. You'll see exactly what it automates — and the hours it returns.
No credit card · 30-minute call · your real process