Ecommerce & CMS · Integration

Share WordPress access without sharing a password

Last updated: August 2026

To give an agency access to WordPress, use WordPress user roles — the agency is added as an Editor or Administrator user with their own login. No password is shared, the client keeps ownership of WordPress sites, and access can be removed anytime.
Full step-by-step guide

The official way to grant WordPress access

WordPress user roles — the agency is added as an Editor or Administrator user with their own login. You'll find it under WordPress admin → Users → Add New. The client keeps ownership of WordPress sites; the agency is granted only what you assign.

The mistake almost everyone makes: One shared admin login hands full control to everyone and leaves no trace of who edited what.

What you'll need first

Access levels explained

Grant the least access the work needs. Here's what each level on WordPress can do:

Access level / roleWhat it can do
AdministratorFull control including plugins, themes and users.
EditorPublish and manage all content. Common for content agencies.
AuthorPublish and manage their own posts.
ContributorWrite posts but not publish.
SubscriberProfile only — not for agencies.

How long it takes

1–2 minutes to add the user; they set their own password via email.

Why this is safer than sharing a password

Each agency member gets their own user and password — the shared admin login (which hands everyone full control and hides who changed what) is never needed.

Or do it in one link

Every step above is why agencies move to a single link. HandItSafe requests exactly the WordPress access you need — the client approves it through WordPress's own process in about three minutes, no password shared, and keeps a panel to see and remove access anytime. That visibility is why clients approve faster, and it makes offboarding a one-tap job later.

Read the full step-by-step guide to giving WordPress access

FAQ

WordPress access — your questions answered

Do I share my WordPress admin password?

No. Create the agency their own user at the right role.

Editor vs Administrator for an agency?

Editor to manage content; Administrator only if they must manage plugins, themes or users.

How do I remove WordPress access?

Users → delete the agency user. HandItSafe adds one-tap client removal.

Editor or Administrator for an agency?

Editor to manage content; Administrator only for plugin, theme or site-level work.

What if the agency needs to install a plugin once?

Grant Administrator temporarily, then downgrade to Editor — or do the install yourself.

Keep reading

Related guides

Skip the whole thing — send one link.

HandItSafe requests exactly this access in one link. No passwords. Your client keeps a panel to remove it anytime.