Skip to main content
How Can We Help?
Last updated: 9 November 2026
The short answer
Turn on multi-factor authentication for every account that controls your marketing: your domain registrar, hosting, Google, Meta and email. Use named logins, not shared ones, and remove access for people who have left.
What to secure
| Account | What to turn on | Who should own it |
|---|---|---|
| Domain registrar | MFA and registrar lock | Your business |
| Website and hosting | MFA, updates and tested backups | Your business |
| Google accounts and ads | MFA and named users, with agencies given their own access | Your business |
| Meta business account | MFA and named administrators | Your business |
| Email domain | SPF, DKIM and DMARC | Your business, set up by your IT provider |
Leavers and suppliers
Remove access when staff or agencies stop working with you, and keep a list of who can sign in to what.
Quick answers
What is registrar lock?
A setting that stops your domain being transferred away without extra checks.
Who should own the accounts?
Your business, with named users and a second administrator.
Not sure who has access to your domain and website? Book a free 20-minute call.
Related answers and guides
Related questions
Want this sorted for you?
Talk to our Burgess Hill team about managed IT support. Free, friendly and no obligation.