Need to give your developer or agency access to your website? Understanding FTP and cPanel access is the first step to safely sharing your site’s backend credentials. These credentials control essential aspects of website management, enabling the continuous work required to maintain site performance, security, and functionality. Regular updates, backups, and performance troubleshooting are critical for keeping your site operational and secure.

For many business owners, working with a trusted agency or website developer is the best way to ensure their site stays healthy. Finding a knowledgeable partner means you can be confident that your website follows best practices, receives regular updates, and functions optimally for your visitors.

Website management doesn’t have to be complicated—the right partner makes all the difference. However, before your agency or developer can begin work, they’ll need proper access to your website’s backend. This guide will walk you through how to safely provide that access.

What is FTP and cPanel Access?

Before granting access, it’s helpful to understand what these tools do and why they’re necessary for website management.

FTP (File Transfer Protocol)

FTP provides file-level access to your website server. This allows developers to directly manage the files that make up your website, including:

• Themes and design files
• Images and media uploads
• Scripts and code
• Plugins and extensions (for WordPress and other content management systems)

Think of FTP as the filing system for your website. It’s where all the individual pieces live that come together to create your site.

cPanel (Control Panel)

cPanel is a more comprehensive control panel that manages multiple aspects of your website hosting, including:

• File management
• Database administration
• Email account setup and management
• Domain configuration
• Security settings
• Backup management

Hosting control panels are interfaces that simplify website management, allowing users to perform tasks such as setting up email accounts, managing domains, and configuring databases without needing deep technical knowledge. cPanel is one of the most popular control panels available.

Key Differences Between FTP and cPanel

While FTP focuses specifically on file access and transfers, cPanel offers broader control over your entire hosting environment. FTP is like having access to your website’s filing cabinet, while cPanel is like having keys to the entire office building.

Why Agencies and Developers Need Access

Your agency or developer may request FTP or cPanel access for several important reasons:

• Update website files: Installing new features, updating existing code, or adding content
• Troubleshoot errors: Diagnosing and fixing technical issues that affect site performance
• Launch a new site: Moving your website from development to live hosting
• Optimize performance: Improving site speed, security, and functionality
• Manage regular maintenance: Performing updates, backups, and security checks

Providing the appropriate level of access enables comprehensive website management while giving you a hands-free approach to technical tasks. Your agency can handle the details while you focus on running your business.

How to Provide FTP Access (Step by Step)

Follow these steps to create secure FTP access for your agency or developer:

Step 1: Log into Your Hosting Provider

Access your hosting account dashboard. Common hosting providers include Bluehost, SiteGround, HostGator, GoDaddy, and many others.

Step 2: Locate FTP or File Access Settings

Look for a section labeled “FTP Accounts,” “File Manager,” or “FTP Access.” In cPanel, you’ll find this under the Files section.

Step 3: Create a New FTP User

Click “Add FTP Account” or similar option. This is where you’ll set up a dedicated account for your agency or developer.

Important: Never give away superadmin or primary account access. Creating a separate user specifically for your agency allows you to maintain full control and revoke access whenever necessary.

When creating the account, you’ll need to:

• Enter a username in the Log In text box
• Select the appropriate domain from the Domain menu (if you manage multiple sites)
• Create a strong password (many hosts require minimum password strength)
• Set the directory access level—this defines which folders the FTP account can access
• Set a disk space quota if needed (or select Unlimited)

Step 4: Set Permissions for Agency Access

The Directory field is critical for security. This determines the top level of directory access for the FTP account. For example:

• Entering public_html/yourdomain.com limits access to just your website files
• The system typically auto-populates this with an appropriate directory path
• The FTP account can access this directory and all its subdirectories, but nothing above it

Step 5: Collect and Send FTP Details to Your Agency

Before sending access credentials, always verify you’re sending them to the right person. Contact your agency or developer directly (not by replying to an email) to confirm they need access. This protects you from potential spam or phishing attacks.

The information your agency needs includes:

• FTP server address (hostname)
• FTP username
• FTP password
• Port number (typically 21 for FTP or 22 for SFTP)
• Directory path (if restricted)

Step 6: Securely Share Access Credentials

Never send login credentials in plain text via email. Instead, use secure methods such as:

• Your agency’s client portal or secure file-sharing system
• A phone call to verbally share the password
• Encrypted messaging platforms
• Password management tools with secure sharing features

Remember: Security best practices are essential when sharing any type of access. Your website’s safety depends on it.

How to Remove or Update FTP Access

When your project is complete or if you need to change access for any reason, follow these steps:

To Remove Access:

1. Log into your hosting account
2. Navigate to FTP Accounts
3. Click “Delete” next to the agency’s FTP account
4. Confirm the deletion

You can choose to delete just the account or delete both the account and associated files (use extreme caution with this option).

To Update Access:

1. Log into your hosting account
2. Navigate to FTP Accounts
3. Click “Change Password” for the agency’s account
4. Enter and confirm a new password
5. Click “Change Password” to save

You can also modify the quota or directory permissions if ongoing access is required with different parameters.

How to Provide cPanel Access (Step by Step)

cPanel access is more sensitive than FTP access, as it controls broader aspects of your hosting environment. Always work with a trustworthy agency or developer and exercise caution when granting this level of access.

Step 1: Log into Your Hosting Account

Access your hosting provider’s dashboard. Look for areas labelled “Control Panel,” “cPanel,” “Advanced Hosting Settings,” or similar terms. Common hosting providers include:

• Bluehost
• SiteGround
• HostGator
• GoDaddy
• A2 Hosting
• InMotion Hosting

Step 2: Choose Your Access Option

Different hosting providers offer various methods for sharing cPanel access:

• Create additional cPanel users: Some hosts allow you to create sub-accounts with limited permissions
• Assign a collaborator: Grant temporary access to specific cPanel features
• Delegate access: Share access to particular cPanel sections without full account control

Check your hosting provider’s documentation or support team to determine which option is available for your account.

Step 3: Alternate Access Options

If your hosting provider doesn’t support creating separate cPanel users, you may need to temporarily share your primary credentials. Before doing this:

1. Ensure a recent backup exists: Always have a current backup of your website before sharing full access
2. Use secure sharing methods: Never send credentials via plain email
3. Set a timeline: Agree on how long access will be needed
4. Change the password afterward: Update your credentials once work is complete

This method should only be used with agencies or developers you fully trust, and only when other options aren’t available.

How to Remove or Update cPanel Access

To Remove Access:

• Delete the collaborator account or user profile that was created
• If you shared primary credentials, change your password immediately

To Update Access:

• Modify the user’s permissions or access level through your hosting control panel
• Change the password if continuing the partnership but wanting fresh credentials

For peace of mind after any agency work is completed, consider changing your password even if you trust the partner you worked with.

What to Do After Granting Access

Once you’ve provided access to your agency or developer:

• Monitor your website: Keep an eye on your site’s performance and functionality
• Stay responsive: Check for emails or communications from your agency, as they may need clarification or additional information to complete work efficiently
• Ask questions: Don’t hesitate to reach out if you notice anything unusual or have concerns about changes being made

Your cooperation helps ensure work is completed in a timely, professional manner while maintaining the security of your website.

Questions to Ask Your Agency Before Granting Access

If you’re new to website management and feeling uncertain about providing access, here are some important questions to ask your agency or developer. A reputable partner should be able to answer these clearly, and in most cases, should proactively provide this information before you even ask.

What do FTP and cPanel actually do?

Ask for a clear explanation of what these access levels mean and how they’ll be used for your specific project.

What is the scope of work?

Clarify exactly what work will be performed and how long access will be needed. Is this a one-time update or an ongoing partnership?

How will you protect my website and data?

Your agency should explain their security practices, including how they’ll safeguard your information while working on your site.

When should access be removed?

Understand whether access should be temporary or permanent, and establish a clear timeline for when credentials should be changed or revoked.

What happens if something goes wrong?

Ask about their backup procedures and how they’ll handle any issues that arise during the project.

Working with an Agency to Maintain Your Website

The right agency partnership brings invaluable benefits to your website management. When you work with a trustworthy team, you gain access to specialized knowledge, years of experience, and a genuine commitment to protecting your website and data.

At Ripple, we understand that your website is a critical business asset. Our team approaches every project with the highest standards for security, transparency, and professional website maintenance. With ongoing support, we ensure your website stays safe, current, and effective.

Ready to get started? 

Contact us to discuss your website maintenance needs or start the conversation about building a new website. 

We’re committed to making website management simple, secure, and stress-free.