Abstract: A storage server is provided and configured to: receive a time-based access code from a computing device of a customer having an account with a resource provider, the time-based access code to be valid during a future time window and including a secret value provided by the resource provider; store the time-based access code; generate a URL linked to the stored time-based access code; send the URL to the customer to send to the third party to send to the storage server; receive the URL from the third party; and send the time-based access code to the third party only if the URL is received during the time window, whereupon the third party attempts to log into the resource provider and gains access to the account of the customer if the resource provider verifies the secret value and the time at which the login by the third party is attempted.