Never give anyone your main password. A safe setup gives each chatter their own login through a chat CRM with roles and two-factor login, keeps your payouts going to your own account, shows chatters only the vault folders you approve, and removes access within an hour when someone leaves. Payment outside the platform is never accepted or discussed.
The risks
When someone else runs your DMs, three things can go wrong: someone gets more access than they need, money goes somewhere it shouldn't, or a message breaks platform rules and puts your account at risk. A good setup closes all three before the first shift.
A safe setup, step by step
- No shared passwordChatters work through a chat CRM with their own login and a role that limits what they can do. Your main password stays with you.
- Two-factor login everywhereOn your platform account, the CRM and the team's email.
- Payouts untouchedPlatform payouts keep going to your own account. The agency invoices you separately; it never needs access to your payout settings.
- Vault by folderChatters see only the folders you approve for selling.
- NDA before day oneEvery team member signs one before they see anything.
- Fast offboardingWhen someone leaves, their access is removed within an hour and shared passwords are changed.
Rules for the team
Content and conversations stay on the platform and in the CRM.
Chatters never move a fan to another app.
No PayPal, crypto, gift cards or "my Cash App". A chatter who asks is removed immediately.
Questions to ask any agency
- Do you need my main password? The answer should be no.
- Which CRM do you use, and what can each role see?
- Who receives the platform payouts? You should.
- What happens to access, fan notes and scripts if I leave?
- What will a chatter never say in my name? See our rules.
If you leave
You get a final report and invoice, fan notes and open conversations are handed back to you, all access is removed within an hour of the last shift, and any copies of your content on team devices are deleted. You own your data and content, during and after.
Red flag: any agency that asks for your main password, wants payouts sent to them, or offers to take payments from fans outside the platform.