Tax Season Is a Surveillance Chokepoint
To file crypto taxes you have to reconstruct your entire financial life in one place. Every exchange, every wallet, every chain, every DeFi position, stitched into a single timeline. A cloud tax tool that does this for you also holds that timeline: a more complete map of your money than any single exchange ever had.
Our privacy trust rating for this category: 🟢 Rotki-first. The only way to file accurately without handing a stranger your whole cross-chain history is to keep the reconstruction on your own machine. That points to one tool by default, and to a set of habits for the rest.
Our Picks at a Glance
- Privacy pick: Rotki, open source and local-first, your data never leaves your computer
- Best mainstream cloud: Koinly, 100+ countries, read-only keys, clean reports
- Most integrated (US): CoinTracker, Coinbase partner, exports to TurboTax and H&R Block
- Full-service for messy cases: TokenTax, real CPAs who will file for you, at a price
What the IRS Now Sees: Form 1099-DA
The reporting math changed. Brokers had to start reporting gross proceeds for digital-asset sales made on or after January 1, 2025 on the new Form 1099-DA, so the first of these forms landed with taxpayers in early 2026.[1] Cost-basis reporting for covered assets phases in next: brokers must report basis for covered digital assets acquired after 2025, meaning 2026 transactions reported in early 2027.[2]
Two things matter for you. First, the IRS gets a copy of what your exchange saw, so guessing or omitting is a bad plan. Second, anything you bought or moved before 2026, or held in self-custody, is generally noncovered, so the basis is on you to prove.[3] That is exactly the pile of history a tax tool reconstructs, and exactly the pile you do not want sitting in someone else's cloud any longer than necessary.
Background reading: how tax season became a crypto surveillance funnel, blockchain analysis firms and who buys the data, and MiCA, the Travel Rule, and EU crypto reporting in 2026.
Quick Comparison Table
| Tool | Starting Paid Price | Countries | Integrations | Where Your Data Lives | Open Source |
|---|---|---|---|---|---|
| Rotki | Free tier; Basic ~€25/mo | Configurable per jurisdiction | On-chain wallets + exchanges | Your machine, encrypted locally | Yes |
| Koinly | $49/tax year | 100+ | 350+ exchanges, 100+ wallets | Koinly cloud | No |
| CoinTracker | $59/tax year | US-first, others supported | 500+ wallets/exchanges | CoinTracker cloud | No |
| TokenTax | $65/tax year | US-focused, reports for any country | 83+ (heavy CSV reliance) | TokenTax cloud + CPA staff | No |
Prices are per tax year for the cloud tools (you pay once per year you file), not monthly subscriptions. Rotki premium is a recurring subscription; its free tier is fully functional locally.
Detailed Breakdown
Rotki: The Privacy Pick
Why it wins on privacy: Rotki is open source and runs locally on your own computer. Your data is encrypted and can only be decrypted with your password, and the developers state it is never visible to them.[4] That is the opposite model from every cloud tool here: nothing about your portfolio is sitting on someone else's server waiting to be breached, subpoenaed, or sold. It aggregates on-chain wallets and centralized exchanges into one local ledger, decodes DeFi history into readable events, and produces cost-basis and P&L outputs you can hand to an accountant.[5]
Pricing
- Free: Full local functionality, capped at 1,000 recent events in history view, no ETH staking tracking, limited dashboard timeframes[4]
- Basic: Around €25/month (VAT included) per rotki's October 2025 pricing announcement, lifting the caps and unlocking staking tracking, cross-device sync, and extra analytics[5]
- Advanced / Custom: Higher tiers for power users and businesses[7]
Where it hurts
- You do the work. There is no CPA to call and no one-click TurboTax handoff. You export the report and file yourself.
- Setup is heavier than a cloud tool. You install and run the app, and you manage your own encrypted database.
- Premium is priced per month, not per tax year, so a casual once-a-year filer pays for months they do not use unless they stay on the free tier.
Outbound link to the vendor. Read our full Rotki review first.
Koinly: Best Mainstream Cloud
Why consider it: If you are not going to run local software, Koinly is the least-bad cloud option for most people. It generates localized tax reports for over 100 countries with the right cost-basis rules applied per jurisdiction, connects through read-only API keys, and never asks for private keys or seed phrases.[8] The catch is unavoidable: to do that, Koinly holds your full cross-chain history on its servers.
Pricing (per tax year)
- Free: Portfolio tracking only, no downloadable tax report[8]
- Newbie: ~$49, up to 100 transactions[9]
- Hodler: ~$99, up to 1,000 transactions[9]
- Trader: from $199, 3,000+ transactions[9]
- Pro: from $299, 10,000+ transactions[9]
Key facts
- Supports 350+ centralized exchanges, 100+ wallets, and dozens of blockchains, with CSV import where APIs are missing[8]
- US output includes Form 8949, Schedule D, and TurboTax-compatible files; UK, Germany, France, and others get local formats[10]
- Read-only API access only, no seed phrases[8]
Where it hurts
- It is closed-source cloud. You are trusting Koinly's security and its retention policy with the most complete view of your finances anyone holds.
- Priced per tax year, so a year with many trades can bump you two tiers up whether or not you want the extras.
Outbound link to the vendor. Read our full Koinly review first.
CoinTracker: Most Integrated for US Filers
Why consider it: CoinTracker is the convenience play for US users. It is an official Coinbase partner, exports straight to TurboTax and H&R Block, and connects to more than 500 wallets and exchanges plus a wide set of DeFi protocols.[11] That deep integration is also the privacy cost: Coinbase, Intuit Ventures, and Kraken Ventures are all listed as investors, and the tool sits at the center of the mainstream US filing pipeline.[12]
Pricing (per tax year)
- Free: $0, portfolio tracking, up to 25 transactions, no tax report[12]
- Base: $59, up to 100 transactions[12]
- Prime: $199, up to 1,000 transactions, adds tax-loss harvesting[12]
- Ultra: $599, up to 10,000 transactions[12]
- Full Service: $3,499, up to 300,000 transactions[12]
Where it hurts
- Closed-source cloud, tightly wired into Coinbase and TurboTax. If your threat model includes "as few companies as possible correlating my identity to my chain history," this is the wrong end of the spectrum.
- Tax-loss harvesting, the feature most people actually want, is locked behind the $199 Prime tier.[12]
- Transaction count picks your tier for you, so a busy DeFi year can force an expensive plan.
Outbound link to the vendor. Read our full CoinTracker review first.
TokenTax: Full-Service for Complex Cases
Why consider it: TokenTax is a software platform and an accounting firm in one. Its in-house team of tax professionals will reconcile a tangled history and file your return for you, which is genuinely useful if you have years of DeFi, thousands of transactions, or missing cost basis you cannot untangle alone.[13] The privacy trade is the largest here: not only is your data in their cloud, actual humans on staff read through it.
Pricing (per tax year)
- Basic: $65, up to 500 transactions[13]
- Premium: $199, up to 5,000 transactions, adds DeFi, NFT, and full CeFi exchange support[13]
- Pro: $799, up to 20,000 transactions[13]
- VIP: $3,499, up to 30,000 transactions, includes consultations with a CPA[13]
- Enterprise: custom pricing, unlimited[13]
Where it hurts
- Fewer native integrations than the others (TokenTax advertises 83+ and leans on CSV import for the rest), so more manual work if you use fringe platforms.[13]
- The high tiers are expensive, and the value is the human service, not the software itself.
- Heavily US-oriented (Form 8949, FBAR), though its reports can be adapted to other countries.[13]
Outbound link to the vendor. Read our full TokenTax review first.
Minimize the Leak: Safeguards for Any Tool
You still have to file. The goal is to comply while leaking the least. Whatever tool you pick, these habits shrink your exposure.
Rotki first
Reconstruct your history locally in Rotki, even if you plan to file elsewhere. Doing the reconciliation on your own machine means the raw data lives with you, and you hand off only the finished numbers.
Read-only API keys
Connect exchanges with read-only keys, never trade or withdrawal permissions. Reputable tools ask for nothing more. Delete or rotate those keys the moment your report is done.
Prefer CSV import
Where a tool offers CSV upload instead of a live API link, use it. You control exactly which rows you share, and there is no standing connection into your exchange account.
Alias email
Sign up with an alias or masked email, not the one tied to your exchange accounts and real identity. It breaks one more correlation between your name and your chain history.
Never share seed phrases
No legitimate tax tool needs your seed phrase or private keys. Public addresses and read-only keys are enough. Anything asking for more is a scam, full stop.
Delete after filing
Once your return is filed and accepted, request account and data deletion from any cloud tool. Keep your own CSV exports and the final report as your records instead.
Who Should Pick What
Choose Rotki if:
- Privacy is the whole point and you will do your own filing
- You are comfortable running local software
- You have complex DeFi history you want kept off the cloud
Choose Koinly if:
- You want a cloud tool but the least-bad one on privacy
- You file outside the US and need local report formats
- You value clean reports across many exchanges
Choose CoinTracker if:
- You are a US filer who lives in Coinbase and TurboTax
- Convenience outranks minimizing your data footprint
- You want the widest integration coverage
Choose TokenTax if:
- Your situation is a mess and you want humans to fix it
- You need a CPA to actually file the return
- Budget is less of a concern than getting it right
Frequently Asked Questions
Which crypto tax tool is best for privacy?
Rotki. It is open source and runs on your own machine, so your transaction history never leaves your computer in readable form. The trade-off is more setup work and you do your own filing. Koinly, CoinTracker, and TokenTax are all cloud services that hold a copy of your entire cross-chain history on their servers.
Do I have to report crypto now that Form 1099-DA exists?
Yes, if you are a US taxpayer. Brokers began reporting gross proceeds on Form 1099-DA for transactions on or after January 1, 2025, and cost-basis reporting for covered assets phases in for 2026 transactions.[1][2] The IRS now receives a copy of what exchanges saw, so unreported gains are easy for them to spot.
Can a tax tool connect without my private keys?
Yes. Every reputable tool uses read-only exchange API keys and public wallet addresses.[8] None of them need your seed phrase or private keys, and you should never enter those anywhere. A tool that asks for a seed phrase is a scam.
Is a cloud tax tool riskier than my exchange?
In one way, yes. A single exchange only sees the trades you did there. A cloud aggregator pulls every exchange, wallet, and chain into one profile, so it holds a more complete picture of your finances than any single venue does. That is the whole privacy problem in a sentence.
Should I delete my data after filing?
If you use a cloud tool, request account and data deletion once your return is filed and accepted, and keep your own CSV exports and the finished tax report as your records. Rotki sidesteps this because the data was local the whole time.
The Bottom Line
Comply, but leak less
Default to Rotki. Reconstruct your history locally and file the numbers yourself. It is the only option here that does not hand a company your full financial map.
If you need cloud convenience, Koinly is the pick for most filers, especially outside the US. CoinTracker is the US convenience play if you already live in Coinbase and TurboTax. TokenTax is worth the money only when your situation genuinely needs a human CPA.
Whatever you use, run the safeguards above: read-only keys, CSV where possible, alias email, and a deletion request the day your return clears.
Related Reading
Sources
- IRS: Frequently asked questions about broker reporting (Form 1099-DA)
- IRS: Instructions for Form 1099-DA (2026)
- IRS: Final regulations for broker reporting on digital assets
- rotki: Premium Subscription (products page)
- CryptoAdventure: Rotki Review 2026
- rotki docs: historical events and free-tier limits
- SoftwareSuggest: rotki pricing and features 2026
- KuCoin: Koinly Review 2026 (integrations, read-only keys)
- Koinly: Tax Plans and Pricing
- Milk Road: Koinly Review 2026 (report formats)
- Milk Road: CoinTracker Review 2026 (integrations, investors)
- Comparedge: CoinTracker Pricing 2026
- Milk Road: TokenTax Review 2026 (pricing, filing, integrations)