How to Give Website and Hosting Access Without Sharing Passwords

The short answer: Every major website platform, host and domain company lets you invite another person to your account with their own login, so you never have to hand over your password. In WordPress you add a user and pick a role. At Hostinger, GoDaddy, Cloudflare and Namecheap you invite a collaborator, delegate or member. On Wix and Squarespace you invite a contributor or collaborator. Give the least access that gets the job done, keep ownership yourself, and remove the access when the work is finished.

This guide walks through each platform step by step. It is part of our series on how to give your agency access without sharing passwords, which explains why separate logins are safer and what the common access levels mean.

Before you start

• Make sure you can log in to each account yourself, as the owner, and that two-step verification is turned on.
• Ask your agency or developer which accounts they actually need. A website redesign may need WordPress and hosting, but not your domain registrar.
• Get the email address your agency gives you for invitations. Some platforms require the invitee to have their own account on that platform first.
• Decide on the access level before you click invite. Start low; you can always raise it later.
• Keep a simple list of who has access to what.

How do I give someone access to my WordPress site?

Create a new user for them inside WordPress and choose a role. For a developer or agency rebuilding or maintaining the site, that usually means Administrator. For someone who only writes or edits pages and posts, Editor is enough. Administrators can change everything, including plugins, themes and other users, while Editors can only manage content.

1. Log in to your WordPress dashboard (usually yoursite.com/wp-admin).
2. Go to Users and click Add New User (on older versions the button may be labeled Add New).
3. Enter a username and the email address your developer gives you.
4. Leave the password for them to set. Check the box to send the new user a notification so they create their own password.
5. Choose the Role from the drop-down: Administrator, Editor, Author, Contributor or Subscriber.
6. Click Add New User to save.
7. When the work ends, go to Users > All Users, hover over their name and choose Delete. WordPress will ask who should own any content they created; assign it to yourself.

If your site uses a security plugin, consider requiring two-step verification for every Administrator account. Official help: WordPress Users Add New screen.

How do I share my Hostinger account?

Use Hostinger’s Account Sharing feature in hPanel. You pick which services to share and choose a role. Collaborator lets someone manage website files, subdomains and DNS for shared domains; Admin adds the ability to make purchases with your saved payment method. For most agency work, Collaborator is the right choice.

1. Log in to hPanel and click your profile icon.
2. Click Account Sharing (on some dashboard versions this sits under your profile menu or on the home page).
3. Click Give Access (some versions say Grant access).
4. Enter the email address your agency gives you, select the services to share and choose Collaborator or Admin.
5. Click Give Access. Your agency gets a confirmation email and must click the link. If they don’t have a Hostinger account, they’ll be asked to create one.
6. To remove someone later, open Account Sharing, find them in the list of users with access, click the three-dot menu next to their email and choose Remove access.

Sharing access never transfers ownership or billing, and neither role can change your payment methods, invite other users or delete your account. Agencies can also request access from their side for you to approve. Official help: How to share access to your account at Hostinger.

How do I give someone access to my GoDaddy account?

Invite them as a delegate. GoDaddy offers several access levels: Products, Domains, & Purchase; Products & Domains; Domains Only; and Accounts Connection Only. Products & Domains is usually the right fit, because it lets your agency work on your hosting and domains without spending money on your card.

1. Sign in to GoDaddy and open your Delegate Access page (GoDaddy’s help article below links straight to it; you may be asked to sign in again).
2. In the People who can access my account section, click Invite to Access.
3. Enter your agency’s name and the email address they give you.
4. Choose an access level.
5. Click Invite. GoDaddy emails the invitation and notifies you when it’s accepted. Your agency needs its own GoDaddy account.
6. To change the level or remove someone, return to the Delegate Access page and use the options next to their name.

At every level, delegates can’t manage your payment methods, invite others or see your login credentials. Invitations expire if they aren’t accepted within a few days, so give your agency a heads-up. Official help: Invite a delegate to access my GoDaddy account.

How do I add a collaborator to my Wix site?

Use Roles & Permissions in your site’s dashboard. Wix has ready-made roles such as Admin (Co-Owner), Website Manager and Website Designer. Website Manager can edit and publish the site but can’t manage billing, while Admin (Co-Owner) adds billing and the ability to invite people, so Website Manager or Website Designer covers most agency work.

1. Go to your site’s dashboard and open Roles & Permissions (where it appears in the menu can vary by dashboard version).
2. Click Invite Collaborators.
3. Enter the email address your agency gives you.
4. Check the box next to each role you want to assign.
5. Click Send Invites.
6. To remove someone, return to Roles & Permissions and remove them from the collaborator list.

No matter the role, Wix collaborators can’t delete or transfer your site or connect a domain they own, so your ownership stays protected. Each collaborator uses one of your site’s collaborator seats. Official help: Inviting people to contribute to your site.

How do I invite a contributor to my Squarespace site?

Invite them from the Permissions & Ownership panel and turn on only the permissions they need. Website editor lets someone add content to existing pages; Administrator can do almost everything the owner can except transfer ownership. Give Administrator only to someone rebuilding the whole site.

1. Log in and open the Permissions & Ownership panel (in the app: More, then Settings, then Permissions).
2. Click Invite Contributor.
3. Enter your agency’s name and the email address they give you.
4. Turn on the toggle for each permission they need.
5. Click Invite. They’ll get an email to log in or create a Squarespace account. Pending invites appear under Invites Sent.
6. To remove a contributor later, open the same panel, click their name and remove their access.

Only the owner and administrators can invite contributors, and your plan controls how many you can add (Basic allows one). Official help: Invite a contributor.

How do I give someone access to Cloudflare?

Invite them as a member of your Cloudflare account and choose a role and scope. If they only need to manage one website’s DNS, scope them to that domain with a role like Domain DNS. Domain Administrator covers all settings for a single domain, while account-wide Administrator covers everything in the account.

1. Log in to the Cloudflare dashboard (you need the Super Administrator role, which the account owner has).
2. Go to the Members page (the menu may be labeled Manage Account or Members, depending on your dashboard).
3. Select Invite.
4. Enter the email address your agency gives you.
5. Use the Scope fields to limit access to the right account or domain, then choose one or more Roles.
6. Select Continue to summary, review, then select Invite.
7. To remove someone later, return to Members and revoke their access.

DNS controls where your website and email point, so treat Cloudflare access with care. Official help: Manage members.

How do I share domain access at Namecheap?

Use Share Access on the domain’s Sharing & Transfer tab. You choose which settings the new manager can edit, so you can allow DNS changes without allowing anything else. Your agency needs its own Namecheap account.

1. Sign in to Namecheap and select Domain List from the left sidebar.
2. Click Manage next to the domain.
3. Open the Sharing & Transfer tab and find the Share Access section.
4. In the New Manager field, enter your agency’s Namecheap username or the email address they give you, then click Add.
5. Select only the settings they need to edit (often just DNS).
6. Enter your own account password to confirm, then click Done. Your agency gets an invitation link that stays active for 7 days.
7. To remove them later, return to Share Access, open the Edit drop-down next to their name and choose Remove.

Only the domain owner can share access, and expired domains can’t be shared until you renew them. Official help: How do I share access to my domain with other users?

Common mistakes

• Sharing the owner login. Anyone with your password can change your recovery email, lock you out and you’d have no record of who did what.
• Giving the top role by default. Admin or purchase access is rarely needed for design, SEO or content work.
• Letting the agency own the account. Your domain, hosting and website should be registered to you, with your agency invited in. If you ever part ways, you keep everything.
• Forgetting to remove access. Former freelancers often keep logins for years. Check your user lists at least once a year.
• Skipping two-step verification. Turn it on for your own owner logins first, since they are the keys to everything else.

Frequently asked questions

Which accounts does a web designer actually need?

Usually your website platform (WordPress, Wix or Squarespace) and your hosting. They only need your domain registrar or Cloudflare if they are moving the site or changing DNS, which is common at launch and rare afterward.

Is it safe to give my agency Administrator access in WordPress?

It is normal for a developer doing builds, plugin updates or security work, because those tasks need it. It is safe when the account is in their own name, protected by two-step verification, and removed when the engagement ends. Content-only help should get Editor.

What if I don’t know which company hosts my site or holds my domain?

Search your email for renewal receipts from companies like GoDaddy, Namecheap or Hostinger. If a past designer registered the domain in their own name, ask them to transfer it to an account you own before anything else.

Do I need to remove access when the project is done?

Yes, unless the same team is maintaining your site. If you’re on an ongoing plan like our website maintenance service, access stays in place for updates and backups. Otherwise, remove it the day the work wraps up.

At Ambition Business Solutions we use these exact steps with every client, so you always own your website, hosting and domain. If you’re planning a new site, see our website design services, or book a free strategy call and we’ll tell you exactly which access we need before any work starts.