Hosting accounts collect sensitive logins: control panels, CMS admins, domain registrars, email accounts, billing portals, databases, and API keys. A password manager makes those credentials safer and easier to manage.
Use Unique Passwords
Every important account should have a unique password. Reusing passwords means one breached service can expose unrelated systems.
Share Access Safely
Agencies and teams should avoid sending passwords through chat or email. Use password manager sharing or create separate user accounts where possible.
Store Recovery Details
Keep registrar login details, two-factor recovery codes, DNS provider access, and hosting billing access documented securely. Domain access is especially important.
Review Access Regularly
Remove old staff, freelancers, and temporary users. Rotate passwords after risky handovers or when access has been shared too widely.
A password manager is not exciting, but it prevents a lot of avoidable hosting emergencies.
Use One Strong Master Password
Create a long, unique master password you do not use anywhere else and enable two-factor authentication for the vault. Store recovery information securely outside the device you normally use. The manager reduces dozens of password risks into one critical account, so protect that account deliberately.
Store More Than Passwords
Record the correct login URL, account owner, recovery email, customer number and notes explaining what the credential controls. Attach SSH-key fingerprints or recovery codes only where the vault's security model and company policy permit it. Clear labels prevent somebody using a staging login against production.
Share Without Revealing
Use organisation or family sharing rather than copying passwords into email or chat. Give each person their own vault account, restrict collections to their role and remove them promptly when work ends. Prefer separate named users in the hosting platform whenever it supports them.
Review High-Impact Accounts
Prioritise domain registrars, hosting billing, DNS, Cloudflare, email administrators and source control. Replace reused passwords and verify two-factor authentication. Check emergency access at least annually and after staff or agency changes.
