How can a landlord share logins with a helper without sharing passwords?

Why texting a password to a helper goes wrong

A landlord with a handful of buildings usually ends up with a pile of accounts: the bank, the rent portal, the accounting file, the utility sites, the lock vendor, the insurance login and a shared email inbox. When a part-time helper or a bookkeeper needs one of them, the fastest move is to text the password. It works for a day, and then it causes four problems at once.

• The password now lives in a text thread, on two phones, possibly in a cloud backup, and nobody can find it again to delete it.
• You cannot tell who did what. If a vendor payment was changed, the account log shows one user, and it might be you, your helper or someone who got the helper's phone.
• When the helper leaves, you have to change the password and tell everyone else who still needs it, so most people never do.
• People reuse. A helper who is handed one password tends to use it as the pattern for the next one.

The fix is not complicated, and it does not cost much. It is a short routine that you set up once.

What a password manager does for a small landlord

A password manager is an app that stores each login in an encrypted vault, opened by one strong master password. It creates a long random password for every site, fills it in for you and warns you when two accounts share the same one. CISA recommends this approach in its guidance on strong passwords: each account gets its own long, random, unique password, and the manager remembers them so you do not have to.

For a landlord the useful part is the shared folder. Most managers let you put several logins in a folder and give another person access to that folder only. Your helper sees the maintenance vendor portal and the lock app, and nothing else. You can take the folder back with one click, and the helper never learns the password in a way they can copy into a note.

Check each manager's own pages for how sharing and recovery work. Features and prices differ, and some change often.

A setup you can finish in an afternoon

1. List every account your rentals depend on. Start with the email address you use for them, because a hacked email can reset every other password.
2. Pick a password manager that supports shared folders and install it on your phone and computer.
3. Make the master password a long phrase of several random words that you have never used anywhere else. Write it on paper and keep the paper in a safe place at home.
4. Turn on two-factor sign-in for the manager itself, then for your email, bank and accounting accounts. CISA describes multifactor authentication as one of the most effective steps an organization can take.
5. Move each login into the vault and change the weak or repeated ones. Do the email, bank and rent collection accounts first.
6. Create folders by job, such as "Maintenance," "Bookkeeping" and "Leasing," and share each folder only with the person who does that job.
7. Ask every helper to turn on two-factor sign-in for their own manager account.

Where a service allows separate users, such as an accounting file or a rent portal, always create a login per person instead of sharing yours. Then the service's own activity log shows who changed what, and removing a person never touches anyone else.

Where two-factor codes fit in

A shared password with two-factor turned on can still be a problem if the code goes to your phone every time your helper signs in. There are three clean ways to handle it. First, create a separate login for the helper so the code goes to their phone. Second, if the service has only one login, store the authenticator setup in a shared place that only the helper and you can open. Third, let the helper do the task through the service's own "invite a user" feature, which almost every accounting and rent tool has.

Save the recovery codes the service gives you. They are one-time codes that let you back in if you lose your phone. Print them or keep them in the vault, not in the same email account they protect.

In DoorKeeping, sign-in can be protected with an authenticator app and ten one-time recovery codes, and helpers can be given roles with limited access, so they use their own login instead of yours.

When a helper stops working for you

Do four things the same day. Remove the person from every shared folder. For each account that had only one login, change the password in the vault. Sign the person out of every active session where the service lets you, and delete their separate logins. Then check the recent activity in your bank and rent accounts for anything you do not recognize.

Write the date and what you removed in a one-line note. If a data problem comes up later, that note shows you acted promptly. FTC guidance for businesses also points out that access to personal information should be limited to the people who need it for their job.

Sources

1. CISA, Use Strong Passwords, read Oct 30, 2026
2. CISA, More than a Password (multifactor authentication), read Oct 30, 2026
3. FTC, Protecting Personal Information: A Guide for Business, read Oct 30, 2026

Questions

Is it safe to store passwords in a password manager?

Reputable managers encrypt the vault so the company cannot read it, and CISA recommends using one. The main risk is a weak master password, so use a long phrase, never reuse it and turn on two-factor sign-in.

Can I share one login with my property helper?

You can, but it is the weakest option. A separate login per person is better because the activity log shows who did what and you can remove one person without changing anything for the others.

What should I do with the recovery codes?

Store them somewhere other than the email account they protect, such as in the vault or printed in a safe. Treat them like a spare key.