How to Safely Give Developer Access: The Essential Security Guide for Clients

—

by

Elian
in

How to Safely Give Developer Access: The Essential Security Guide for Clients

Need to give a technician or developer access to your website or server? Never share your admin or owner password! This guide explains exactly how to grant the right access, keep your accounts safe, and maintain full control at all times. Security is not optional—it’s essential for your business, your data, and your peace of mind.

Share your access safely

Why Is This So Important?

  • Protect your data, business, and privacy.
  • If you share your main password, you lose control—someone could lock you out or make irreversible changes.
  • With separate accounts, you can track changes and revoke access instantly if needed.
  • This is standard practice for all reputable developers and agencies (cPanel Docs, Plesk Docs).

Security First: Never Share Your Main/Admin Password

  • Do NOT share your owner or main admin password with anyone—including developers or technicians.
  • If a developer needs access, always create a new user or provide limited, revocable credentials.
  • Only grant the minimum access required. If more is needed, let your developer request it specifically.
  • You can always revoke access at any time—your security is priceless.

How to Give Access Safely: Platform-by-Platform

PlatformHow to Give AccessOfficial Resource
FTP/SFTP
  • Log in to your hosting control panel (e.g., cPanel, Plesk, DirectAdmin).
  • Create a new FTP/SFTP user just for the developer.
  • Set the home directory to only the folder needed (not your whole server).
  • Send credentials securely. Delete/disable when finished.
 cPanel FTP Guide
Plesk FTP Guide
WordPress
  • Log in as main admin.
  • Go to Users > Add New.
  • Assign the “Administrator” role only if necessary.
  • Send new login details securely. Delete/downgrade when done.
 WordPress: Add a New User
PrestaShop
  • Log in as SuperAdmin.
  • Go to Advanced Parameters > Team > Add New Employee.
  • Assign only the permissions needed.
  • Delete/downgrade when finished.
 PrestaShop: Add Employee/User
Odoo
  • Log in as admin.
  • Go to Settings > Users & Companies > Users.
  • Add user, set access rights as needed.
 Odoo: Add User & Set Rights
Nextcloud
  • Log in as admin.
  • Go to Users > Add User.
  • Assign group/role as needed.
 Nextcloud: Add User

FAQs

Why shouldn’t I just share my admin password?

If you share your main password, you lose control—someone could lock you out, make irreversible changes, or compromise your security. Always create separate, limited accounts. [CISA: Secure Software Development]

How should I send credentials?

Never send passwords in plain text or via public chat. Use secure methods such as password managers (e.g., LastPass, 1Password), or encrypted email.

What else can I do to stay secure?

Enable two-factor authentication (2FA) where possible, use strong unique passwords, keep a record of who has access, and revoke access as soon as work is complete. See Australian Cyber Security Centre: Creating Strong Passwords .

Can you help with migrations or one-time fixes?

Absolutely! We offer safe, custom-priced migrations (often free for reasonable workloads), one-time development, and fixes for your site.

Where can I find more help?

Check our plans for new projects or contact us any time for guidance on secure access and best practices.

References & Resources:
cPanel FTP Account Guide
Plesk FTP Guide
WordPress: Adding New Users
PrestaShop: Add Employee/User
Odoo: Add User & Set Rights
Nextcloud: Add User
CISA: Secure Software Development
Australian Cyber Security Centre: Creating Strong Passwords
LastPass | 1Password

Need help? We’re here for you—contact us for expert guidance, secure migrations, or managed services.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *