Every UK employer that pays staff through PAYE is automatically enrolled for PAYE Online the moment it registers as an employer, and HMRC posts the activation code within 10 days [1]. The account must then be activated within 28 days of the date on that letter, or the whole enrolment has to be repeated [2]. Those two deadlines catch out a surprising number of new employers, and they sit at the start of a set of online services that most businesses will use every month for as long as they run a payroll.
HMRC's online services for employers are not a single website. They are a layered system: a Government Gateway sign-in, a business tax account that gathers every tax the business is registered for, and the PAYE Online service that handles payroll specifically. Understanding how those pieces fit together turns a confusing set of logins into a predictable monthly routine.
This guide explains what each service does, how an employer sets them up in the right order, and what can actually be done inside PAYE Online once access is live. It is written for the owner-manager filing their own payroll, the office administrator picking it up for the first time, and the accountant who needs to explain the process to a client.
Key takeaways
- Registering as an employer with HMRC automatically enrols the business for PAYE Online, and the activation code arrives by post within 10 days [1].
- The account must be activated within 28 days of the date on the letter, otherwise enrolment has to be done again [3].
- A business tax account can hold over 40 different taxes in one place, with PAYE sitting alongside VAT, Corporation Tax and the Construction Industry Scheme [4].
- PAYE Online lets an employer view liabilities and payments, read tax code and student loan notices, appeal penalties, and file expenses and benefits returns [5].
- Real Time Information reports (the FPS and EPS) are sent from payroll software, not typed into PAYE Online, so the online account and recognised software work together rather than as alternatives [6].
What "HMRC employer online" actually means
The phrase covers three connected services, and separating them removes most of the early confusion.
The Government Gateway is the front door. It is the sign-in system used across the majority of HMRC business and tax services, and it issues each user a Government Gateway user ID that is normally 12 digits long [7]. One set of credentials can unlock several tax services rather than forcing a separate login for each one.
The business tax account is the dashboard that sits behind that sign-in. It lets a business that manages one or more taxes online view its position and handle everything from one place, and it can hold checks for over 40 taxes for individuals, sole traders, partnerships and limited companies [4]. An employer signs in to the business tax account and then adds the specific services it needs [8].
PAYE Online for employers is the payroll-specific service inside that account. It is the part that shows what the business owes, holds notices about employees, and receives expenses and benefits returns [5]. For payroll purposes, this is the service that matters day to day.
The distinction between these three matters because problems usually sit at one specific layer. A forgotten user ID is a Government Gateway issue. A missing PAYE service on the dashboard is a business tax account issue. A tax code notice that has not appeared is a PAYE Online issue. Knowing which layer is failing points straight at the fix.
Registering as an employer and getting online access
Registration and online access happen together, which is the single most useful fact for anyone setting this up.
When registration is required
A business normally needs to register as an employer with HMRC when it starts employing staff, or when it uses subcontractors for construction work [9]. Registration is required even where the business only employs one person, including the sole director of a limited company drawing a salary [9]. This last point catches many contractor companies that assume a single-director payroll falls outside PAYE.
Timing is tightly bounded at both ends. An employer must register before the first payday in order to receive its employer PAYE reference number, which arrives by letter, and it cannot register more than two months before it starts paying people [9]. That two-month ceiling is a common trip hazard for businesses that try to get everything in place far in advance.
Automatic enrolment for PAYE Online
The convenience is built in. When a business registers as an employer using HMRC's online tax registration service, it is automatically enrolled for the online service at the same time [9]. There is no separate PAYE Online sign-up to complete for most limited companies, which can register online directly [9].
The Government Gateway user ID is issued immediately on completing the online registration, and it is also sent to the registered email address [10]. The activation code, by contrast, comes separately and by post, which is where the two key deadlines begin.
The activation deadlines
Two dates decide whether the account goes live cleanly, and both are easy to miss because one of them depends on the post.
| Step | Timing | What happens if missed |
|---|---|---|
| Activation code arrives | Within 10 days of registering, by post [[1]](https://www.gov.uk/paye-online) | The code cannot be requested faster; it has to be posted |
| Account activated | Within 28 days of the date on the letter [[2]](https://www.tax.service.gov.uk/information/help?helpcategory=help&helpid=activationPin) | Enrolment has to be done again from scratch [[2]](https://www.tax.service.gov.uk/information/help?helpcategory=help&helpid=activationPin) |
The activation code is a 12-character security code used to switch on the online service [2]. To use it, the employer signs in to the online account and enters the code when prompted, at which point the service is added to the HMRC online services account [3]. If the code is lost within the 28-day window, the employer can sign in and ask for a new one [1].
Getting these first steps right is the foundation for everything that follows, and it is worth pairing them with recognised payroll software from the outset so that filing can begin as soon as the account is live. Moonworkers' HMRC-recognised payroll software for SMEs is built to submit against the same PAYE scheme the online account represents.
What an employer can do inside PAYE Online
Once access is active, PAYE Online becomes a monthly reference point rather than a filing tool. The distinction is important: most of what actually gets submitted to HMRC comes from payroll software, while the online account is where an employer reads, checks and manages the results.
Viewing liabilities and payments
The core function is financial visibility. Through PAYE Online an employer can check what it owes HMRC, pay the bill, and see its payment history [5]. It can also view the balance of what is owed at any point in the tax month [1]. This is the screen an employer uses to reconcile the amount its payroll software has calculated against the figure HMRC is expecting, before the monthly or quarterly payment falls due.
Reading notices about employees
The second function is the notice inbox, and it is arguably the most valuable feature for keeping payroll accurate. After signing in, an employer can view a range of notices that HMRC issues automatically.
| Notice | What it tells the employer |
|---|---|
| P6 | A revised tax code for an employee, with previous pay and tax details [[11]](https://www.theukrules.co.uk/rules/employment/employing/payroll/using-paye-online/) |
| P9 | The tax code an employee will start the new tax year on [[11]](https://www.theukrules.co.uk/rules/employment/employing/payroll/using-paye-online/) |
| SL1 and SL2 | The start or stop of a student loan deduction [[11]](https://www.theukrules.co.uk/rules/employment/employing/payroll/using-paye-online/) |
| Generic notifications | Alerts such as late-reporting or late-payment warnings [[5]](https://www.gov.uk/paye-online) |
Acting on a P6 or P9 promptly keeps an employee on the correct code and avoids the corrections that follow when a code is applied late. The student loan notices matter just as much, because applying an SL1 to the wrong plan type is one of the more common payroll errors. The mechanics of getting those deductions right are covered in Moonworkers' guide to student loan deductions.
Filing expenses and benefits returns
PAYE Online is also the route for year-end benefit reporting. An employer can send expenses and benefits returns through the service, including the P46(Car), the P11D and the P11D(b) [5]. These sit outside the regular RTI cycle and have their own deadlines, so the online account remains relevant beyond the monthly payroll run.
Managing penalties
Finally, the account is where penalties are handled. An employer can appeal a penalty directly through PAYE Online, and it can receive alerts from HMRC when it reports or pays late, or fails to send the expected number of reports in a month [5]. Those alerts are an early-warning system: a generic notification about a missing report is a chance to correct a filing gap before a penalty is confirmed.
How PAYE Online works alongside RTI and payroll software
A frequent misunderstanding is that PAYE Online is where payroll is filed. It is not. The actual payroll submissions travel through Real Time Information.
Real Time Information was introduced to improve the operation of Pay As You Earn by requiring employers to report payments and deductions on or before the date they pay employees, rather than once a year [6]. Those reports take two forms: the Full Payment Submission, sent on or before payday, and the Employer Payment Summary, used for adjustments and for months with no payments. Employers who file the FPS or EPS on time are not charged a late-filing penalty [12].
These submissions are generated and sent by HMRC-recognised payroll software, using the same Government Gateway credentials that unlock the online account. The online account then displays the consequences: the liability that results from the FPS, the notices that HMRC issues in response, and any penalty alerts. In practice the two work as a pair, with software doing the filing and the online account doing the checking.
This is where the choice of software matters. HMRC recognition is the baseline every serious payroll product meets, not a differentiator, so the more useful questions are how cleanly the software submits RTI, how it surfaces the notices HMRC returns, and how well it fits the way the business actually runs its payroll. For platforms and developers that want to embed UK payroll filing inside their own product, Moonworkers offers an HMRC-recognised payroll API that handles the FPS and EPS submissions programmatically, with the full endpoint set documented in the API reference.
Late-filing penalty bands
Because the online account is where late-filing alerts appear, it helps to know what those alerts can lead to. Filing penalties are charged on a monthly basis and scale with the size of the workforce.
| Number of employees | Monthly late-filing penalty |
|---|---|
| 1 to 9 | £100 [[5]](https://www.gov.uk/paye-online) |
| 10 to 49 | £200 [[5]](https://www.gov.uk/paye-online) |
| 50 to 249 | £300 [[5]](https://www.gov.uk/paye-online) |
| 250 or more | £400 [[5]](https://www.gov.uk/paye-online) |
The penalty regime is monthly, so a single missed FPS can be corrected before it compounds, provided the employer acts on the generic notification when it appears in the online account.
Setting up online access as an accountant or bureau
Employers do not always run their own payroll. Where an accountant or payroll bureau files on a client's behalf, the online setup follows a different path built around agent authorisation.
The PAYE for Agents online service lets an agent manage most of a client's responsibilities online for PAYE, the Construction Industry Scheme, Employment Related Securities, and employer liabilities and payments [13]. Before an agent can act, the client has to authorise them. Using the online agent authorisation, the agent signs in to the HMRC online services for agents account, selects the option to request an authorisation, chooses the relevant tax service and enters the client's details [14]. HMRC then posts an authorisation code to the client, which the agent enters to complete the link [14].
For a bureau managing many client schemes, this authorisation model is the foundation of a multi-client workflow: one agent account, many authorised employers, each with its own PAYE reference. The scaling challenge is less about the authorisation itself and more about running dozens or hundreds of schemes from a single dashboard without switching between logins. That is the problem Moonworkers' multi-client payroll dashboard is designed to solve, keeping every authorised employer under one integration rather than one browser tab each.
Common online access problems and how to fix them
Most day-to-day difficulties trace back to one of the three layers described earlier, and naming the layer usually names the fix.
A lost Government Gateway user ID is the most common issue. Because the ID is issued at registration and emailed to the registered address, the first place to look is that original email [10]. HMRC's sign-in service also offers a recovery route for a forgotten user ID or password [7].
A PAYE service that is missing from the business tax account is a different problem. This happens when a business has a Government Gateway account for another tax but has never added PAYE. The fix is to sign in to the business tax account and add the PAYE for Employers service, then enter the employer PAYE reference and Accounts Office reference when prompted [8].
An expired activation window is the least forgiving. If the 28-day deadline passes, the service cannot simply be reactivated: the employer has to enrol for PAYE Online again [2]. The practical lesson is to treat the posted activation letter as time-critical the day it arrives.
For businesses issuing only occasional payslips, for example a one-off payment to a single worker, the full online enrolment can feel disproportionate. In those cases an instant payslip generator produces a compliant payslip without standing up a full ongoing scheme, though any regular employment still requires proper PAYE registration.
Keeping the account healthy through the year
The online account rewards a light monthly habit. Signing in to check the liability against the payroll software figure, clearing the notice inbox of any new P6, P9 or SL1, and reading any generic notifications takes a few minutes and prevents the two failures that cost employers most: an employee on the wrong tax code, and a missed submission that turns into a penalty.
Year-end adds two further touch points. The P60 has to reach every employee still on payroll on 5 April, and the deadline for that is 31 May following the end of the tax year, with the online account showing the year's totals that the P60 summarises. Employers can work through the sequence with Moonworkers' P60 end-of-year checklist. Where benefits are provided, the P11D and P11D(b) go through the same PAYE Online service that handles the rest of the year [5].
Conclusion
HMRC's online services for employers are best understood as three layers rather than one website: a Government Gateway sign-in, a business tax account that gathers every registered tax, and the PAYE Online service that handles payroll. Registration switches on all three at once, and the only genuinely unforgiving part is the 28-day activation window that follows the posted code.
Once live, the account is a monthly reference point, not a filing tool. The filing itself flows through Real Time Information from recognised payroll software, while the online account shows the liability, holds the notices and raises the alerts. As more of UK payroll moves towards submissions made programmatically from inside HR platforms, accounting tools and bureau systems, that division of labour becomes clearer still: the compliance plumbing runs through an engine and an API, and the online account remains the place an employer looks to confirm that everything landed as it should.
Frequently asked questions
How long does it take to get PAYE Online access after registering as an employer?
The Government Gateway user ID is issued immediately on completing the online registration and is also emailed to the registered address [10]. The activation code, however, arrives separately by post within 10 days [1]. The account is only fully usable once that code has been entered, so realistic setup takes up to a couple of weeks from registration.
What happens if the 28-day activation deadline is missed?
If the account is not activated within 28 days of the date on the activation letter, the enrolment lapses and the employer has to enrol for PAYE Online again [2]. There is no quick reactivation. The safest approach is to enter the code as soon as the letter arrives, and if it is lost within the window, to sign in and request a replacement [1].
Can payroll be filed directly inside PAYE Online?
No. The regular payroll submissions, the Full Payment Submission and the Employer Payment Summary, are sent through Real Time Information from payroll software, not typed into PAYE Online [6]. PAYE Online is where an employer views the resulting liability, reads notices and manages penalties [5]. Expenses and benefits returns such as the P11D can be submitted through the online service directly [5].
How does an accountant get online access to a client's PAYE?
An accountant or bureau uses the PAYE for Agents online service, which requires client authorisation first [13]. Through the online agent authorisation, the agent requests authorisation for the PAYE service and HMRC posts an authorisation code to the client, which the agent then enters to complete the link [14]. Once authorised, the agent can manage the client's PAYE, CIS and employer liabilities online.
Image prompt (Imagen): Wide landscape photograph of a small business owner working at a tidy desk in a naturally lit UK office, a laptop open showing a generic government tax dashboard, a paper letter and a mug beside it, soft morning light through a window, shallow depth of field, realistic documentary style, no text overlays, no logos.
