How agencies can manage client accounts safely

An agency manages dozens of clients' ad accounts, social media pages and website panels. Passwords arrive from the client by e-mail, travel round the team in chat groups and, when the project ends, usually nobody changes them. There is a more orderly way, safer for both the agency and the client.

A vault per client

Keep each client's accounts in a vault of its own. A client's team then reaches only that client's accounts, and nobody wanders into another client's panel by mistake. When the project ends, archive the vault.

Permission by role

The ads specialist needs the ad account, not the client's domain panel. Within a vault, give each person the permission that fits their work. Passhield has four permission levels: use, reveal, edit, manage. With "use", a person signs in with the extension but cannot see the password; it suits interns and freelancers.

Timed access

Give a freelancer joining for a campaign one month of access, or three months for a seasonal project. When the time is up, access closes on its own; nobody has to remember.

Verification codes

Two-step verification is becoming mandatory on ad and social media accounts. If the code goes to the client's phone or to one agency employee, work keeps waiting. For app-based codes, scan the QR code into the client's vault; the code is generated inside the item for everyone with access to the vault, and who took it is recorded.

Handover and departures

• When a project ends, remove the agency's access to the client's accounts and suggest that the client changes the passwords.
• When an agency employee leaves, change the client passwords they saw. Because Passhield works out who actually saw which password, you see on one list which clients are affected.

Earning the client's trust

Clients increasingly ask how the agency they trust with their passwords keeps them. Being able to say that passwords sit in end-to-end encrypted vaults, that access is given person by person and that every access is recorded builds trust.

More for agencies on our agencies page. To choose permission levels, see the guide to permission levels.

In short

A vault per client, permission by role, timed access, verification codes that belong to the team, and regular handover. This keeps the agency's work simple and earns the client's trust.