Never share your main password. Instead, give limited, revocable access:
- Client area (billing): Log in to your client area, go to Contacts/Sub-Accounts, add the person's email, and grant only the permissions they need (such as tickets or invoices). You can remove them anytime.
- cPanel (hosting): Create a separate FTP account for file access, or an additional email account, instead of sharing your master cPanel login. For developers, create a dedicated database user with only the needed privileges.
Always use unique passwords for each access point, enable two-factor authentication on your client area, and revoke access as soon as the work is done. If a contractor needs temporary cPanel access, change your cPanel password afterward. Need guidance? Open a ticket.
