A cloud server does not get broken into through its walls; it gets walked into through its logins. This page covers the three identity layers of the TSplus setup — the server login, the Tally user and the company vault — and the habits that keep each one honest.
The video creates users on the Tally cloud server as a setup step. This page is about doing that step like it matters — because on the internet, it is most of your security. Three separate locks stand between a stranger and your books, and each one fails in its own way if it is shared, weak or forgotten.
Every staff member gets their own TSplus/Windows user with their own strong password — 12 characters or more, and not the password of their email or personal accounts. The shared office login feels convenient for exactly one reason: it removes accountability. With a shared login, Tally and Windows can tell you someone changed a voucher at 9:40 pm, and never who. When that person leaves the company, you cannot lock them out without changing the password for everyone — so in practice, nobody ever does.
Inside Tally, create a user per person with a security level matched to their job. Tally's security levels let an owner allow data entry while blocking alteration and deletion for junior staff, reserve back-dated entries for seniors, and keep the administrator profile for the owner or head accountant alone.
The admin account used for daily work is how small mistakes become unauditable ones.
Tally offers TallyVault: a password that encrypts the company data itself, so even someone holding the data files cannot open the company without it. On a rented cloud server — hardware you do not own, administered by people you do not employ — this layer is genuinely valuable.
Its honest price: a forgotten TallyVault password cannot be recovered — that is the design, and Tally states it plainly. So set it once, and store it like a physical key: written, sealed, kept by the owner outside the server. A vault nobody can open is perfect security and a total loss at the same time.
Per-person logins are what make this drill take four minutes instead of a panicked weekend.
The video creates the server users and assigns the published Tally app — this page's three locks are the discipline to apply while you do it.
▶️ Watch Full VideoTechnically sessions can be shared; practically it destroys your audit trail and your leaver drill, and it may breach the licence terms you are trying to save money on. A shared login is the most expensive cheap decision in a cloud Tally setup.
The company data cannot be opened — TallyVault encryption has no back door or recovery service, by design. This is why the password must be stored sealed with the owner at the moment it is set, and why your off-server backups matter: a backup of an unopenable company is still unopenable.
No. Daily work under the admin or owner profile means every mistake and every change carries maximum rights and no separation of duties. Owners should enter through a normal user like everyone else and keep the admin login for administration only.