How do I give my agency Facebook ad access without sharing my password?

Use Meta Business Manager instead of sharing your login. Either connect the agency's Business Manager as a partner using their Business ID and share only your ad account, or add a freelancer by email and assign them a specific role on specific assets. Both let them work under their own logins, keep you as the owner, and let you revoke access in seconds. Never share your password or two-factor codes.

What is the difference between partner access and adding a person?

Partner access is for an agency that has its own Business Manager: you share your ad account to their Business ID and their whole team works under their own accounts, and you can remove the partnership in one click. Adding a person by email is for a freelancer or VA without a Business Manager: you invite them individually and assign a role. Use partner access when the agency has a Business Manager because it is cleaner to revoke.

What ad account role should I give my agency?

Give the minimum needed. Advertiser or Manage campaigns lets them create, edit, and run ads and is right for most agencies. Analyst or View performance lets them see reports but change nothing. Admin has full access including billing and finances (and at the business level can add or remove other people), so give it to almost no one outside your own business.

How do I remove an agency's access to my Facebook ads?

For partner access, go to Business Manager Settings, open Partners, select the agency, and remove them. For an added person, go to Settings, People, select them, and remove them from the asset or business. Access ends immediately with no password reset required. Do it the day the engagement ends.

Should I ever give my agency my Facebook password?

No. Your login controls your personal profile, Pages, payment methods, and every business you touch, with no audit trail and no clean way to revoke it. A legitimate agency will ask for their Business ID so you can add them as a partner, not for your password. If they insist on your login, treat it as a red flag.

How to Give Your Agency Facebook Ad Access — Without Sharing Your Password

Never share your Facebook login. There's a built-in, safer way: from your Business Manager, either assign the agency a role on your ad account, or connect their Business Manager as a partner — and grant only the access they need. This keeps you as the owner, lets you see exactly what they can touch, and lets you cut off access in seconds when the engagement ends. Sharing your password does the opposite: it hands over your whole account, hides what they change, and can lock you out if anything goes wrong.

Because your Facebook login isn't just your ad account — it's your personal profile, your Pages, your payment methods, and every other business you touch. Hand it over and you've given a contractor the keys to all of it, with no audit trail and no clean way to revoke it (short of a password reset that logs you out too). If your "ads guy" asked for your password, treat it as the first red flag. The right way takes five minutes and gives away nothing you don't intend to.

What are the two safe ways to grant access?

There are two legitimate methods, depending on who the agency is:

Partner access (best for agencies with their own Business Manager). You share your ad account (and Page, pixel/dataset as needed) to their Business Manager using their Business ID. Their team members get access under their own logins; you stay the owner and can revoke the partnership entirely in one click.
Add a person by email (best for a freelancer or VA without a Business Manager). You invite them to your Business Manager by email and assign them a specific role on specific assets. They accept under their own account — again, no password shared.

If the agency has a Business Manager, use partner access. It's cleaner to revoke and keeps their staff turnover from becoming your problem.

Step by step: partner access (the agency has a Business Manager)

Go to business.facebook.com → Settings (your Business Manager settings).
Open Partners (under Users), then Add → share assets with a partner using their Business ID.
Ask the agency for their Business ID and paste it in.
Select the ad account (and Page/dataset if they need them) and choose the access level for each — grant the least they need to do the job.
Confirm. They now have access under their own logins, and you can remove the partner anytime.

Step by step: add a person by email (freelancer / VA)

business.facebook.com → Settings → People → Add. (Meta relabels these menus often — if the wording differs, look under Business settings for the equivalent.)
Enter their email and choose their business-level role (keep it low).
Assign them to your ad account specifically, and pick the ad-account role (see the next question).
They get an email invite and accept under their own account. Done — and revocable anytime.

What role should I actually give them?

Give the minimum that lets them do the work. In plain terms:

Admin — full access, including billing and finances. (At the business level, admins can also add or remove other people — so reserve this for your own business.) Give it to almost no one outside your own business. Not your agency's default.
Advertiser / Manage campaigns — can create, edit, and run ads and see performance. This is the right level for most agencies and media buyers.
Analyst / View performance — can see reports but can't change anything. Good for a reviewer or a junior.

Start lower than you think. You can always raise access; you rarely regret granting too little.

How do I remove their access later?

That's the whole point of doing it right. For partner access: Settings → Partners → select the agency → remove. For an added person: Settings → People → select them → remove from the asset or the business. Access ends immediately — no password reset, no collateral lockout. Do this the day an engagement ends, not "sometime later."

What should I never hand over?

Never share your password, your two-factor codes, or full admin/owner control of your Business Manager. A legitimate agency will ask you for their Business ID to be added — they won't ask for your login. If they insist on your password, that's your signal to slow down.