Above BoardKnow your rights / Account access
Should an agency have your password?
Short answer: no. You can work with an agency and keep your own login, your two-factor codes and your payout details.
Why it matters
Whoever holds your login controls your account: your fans, your content and, if payouts are linked, your money. Sharing a password makes it hard to prove who did what, and hard to leave.
What to keep to yourself
- Your password and two-factor codes.
- Your email account and its recovery options.
- Your payout and bank details, in your name.
- Your stream key unless you choose to share it for a session.
If you already shared access
- Change the password and reset two-factor.
- Remove other devices and sessions.
- Check the email and payout settings.
- Tell the agency in writing what access you are ending.
- Keep screenshots of what you changed and when.
Safer ways to work together
Ask what the agency actually needs access for. Often the answer is scheduling or analytics that can be shared with a role or a report, not your login. If a platform offers a manager or agency role, use that rather than your password.
Questions
Why do some agencies ask for my login?
Usually for convenience: posting, replying to fans or running analytics. None of that requires your password in a fair arrangement.
Is sharing a stream key the same as sharing a password?
No, a stream key only lets someone broadcast to your channel. It is still worth treating as private and resetting after you stop working together.
What if an agency refuses to leave my account?
Secure your account and email first, keep evidence, and report it. See the leaving guide for the steps.
Free tools
Keep reading
General information, not legal advice. Above Board does not rate or endorse agencies; the register lists only agencies that applied for a seal.