You need to log in to your website or business email. Is the password in a notebook, an old text, or someone else's phone? You should not have to hunt through all three.
Start by listing the business accounts you use: email, website, domain, booking, social media, and billing. Write down who owns each account and who should have access. Do not write the passwords in that list.
Use a password manager
A password manager can create and store different passwords for different accounts. NIST recommends password managers for accounts that still need passwords. Choose one that supports an extra sign-in check, often called multifactor authentication or MFA.
You do not need to move every account in one afternoon. Start with your business email and the account that controls your domain name. Save each account in the manager. Give it its own password. Check that you can sign out and back in before you move to the next one.
Plan for the day your phone is missing
An extra sign-in check helps protect important accounts. NIST's small-business guide explains how MFA adds another check beyond the password. Keep the recovery instructions and backup method where the right person can find them when needed. Test that they work.
If more than one person needs access, give each person their own account when the service allows it. Decide what access each person needs. When someone leaves, review their access. Never send a password or a one-time sign-in code in a social post or to someone who contacts you unexpectedly.
Clawser can help you map the accounts, choose a process, and set up the tools with you. You keep your passwords and recovery codes. We do not need them in an email or chat to start a conversation.
Want a calmer way to manage your business accounts? Talk to a human 🙂
Illustration: AI-generated image.