Working with a virtual assistant means giving them access to tools and accounts, which makes some founders nervous, and rightly so if it is done carelessly. The good news: you can grant access safely and revoke it cleanly.
Never share passwords in plain text
Sending login details over email or chat is a real security risk, those messages linger and can be exposed. Make it a rule that credentials never travel as plain text.
Use a password manager
A password manager lets you share access to an account without revealing the actual password. Your VA can log in, you keep control, and you can revoke access instantly when needed, without changing every password yourself.
Prefer delegated access where possible
Many tools let you add someone as a user with their own login and defined permissions. This is better than sharing a single account: you control exactly what they can do and see, and you keep a clean audit trail.
Grant the minimum needed
Give access only to what the role actually requires, and review it periodically. Least-privilege access limits risk without limiting your VA’s ability to do their job.
Plan for offboarding
Set things up so that when an engagement ends, you can cut access quickly and completely. Knowing you can revoke cleanly is what makes granting access comfortable in the first place.