We see it over and over where service providers have asked for customers to share their credentials over email for services.
A big Cyber Security no no. Instead, ask to be delegated access, which is done by being invited (which most services support) or ask for the customer share credentials via a password manager.
Initial advantages of delegation means if you part ways, the customer account is safe as only access has to be revoked. If you’re received a password via a password manager, again, only sharing access has to be revoked by the customer. However, if someone shares a password, this makes revoking access tricky or a cumbersome process internally, and is a magnified problem if the customer has a number of staff that need updating.
Cloudflare (a service we’re big advocates of) is one such service that allows you to delegate access to your account, improving service integrity.
