Keeping Your Account and Team Access Secure

Almost every account problem a creator runs into starts the same quiet way. A password gets shared with an assistant during a busy week, it gets pasted into a group chat, someone leaves the team, and nobody thinks about it again for six months. Nothing dramatic happens right away, which is exactly the problem: by the time you notice something is off, four people can open your inbox and you cannot say which one sent what. This is not a story about hackers, it is a story about housekeeping, and the whole fix takes about twenty minutes. Here is how to set your login up properly, hand your team the access they actually need, take it back cleanly when someone moves on, and know what to check when something feels wrong.

---

1. Your login is the whole account, so treat it that way

Your creator account holds your fan list, your conversations, your media vault, your pricing, and your payout details. One email address and one password stand in front of all of it. That means the two most basic habits matter more here than almost anywhere else:

• Use a password that exists nowhere else. Not a variant of your Instagram password, not your email password with a number on the end. If a password you reuse leaks from some unrelated site, the reuse is what turns a stranger's list into access to your income.
• Use a password manager, or a long passphrase you can actually remember. Length beats complexity. Four unrelated words are stronger and easier than a short string of symbols you will end up writing down.
• Change it from Settings, not from a link someone sends you. Your password lives under Settings > Account > Password. Go there directly. Any message pushing you toward a login page you did not open yourself deserves suspicion.
• Keep your recovery email secure too. Whoever controls that inbox can reset the password on your account, so it needs its own strong password and its own second factor.

---

2. Turn on two-step login

A password alone is one lock. Two-step login adds a second: when you sign in on a new device, InnerText texts you a code, and the login does not complete without it. Someone who has your password but not your phone gets nowhere.

Setting it up takes a minute:

1. Add and verify your phone number under Settings > Account > Phone, so there is somewhere to send the code.
2. Go to Settings > Account > Two-step login.
3. Request a code, enter it, and confirm.

Once it is on, trusted devices skip the code for 30 days, so your own phone and laptop do not nag you every session. New devices always have to prove it. Turning it back off requires a fresh code too, so anyone who got hold of your password cannot quietly disable the protection. This is the highest-value setting on the account, and it costs you a few seconds a month.

---

3. Never share your login with your team

The instinct when you bring on a chatter or an agency is to hand over your email and password. It creates four problems at once: everyone can see your payouts, everyone can change your pricing, nobody can tell who sent which message, and removing one person means changing the password and re-sharing it with everybody else.

InnerText handles this with alt logins, also called chatter seats. Each helper gets their own email and their own password, and a scoped view of your account.

Action	Creator	Chatter seat
Read and reply to fan conversations	Yes	Yes
View and edit fan notes and tags	Yes	Yes
Use the media vault and send from it	Yes	Yes
Create and send PPV content	Yes	Yes
See payout and revenue data	Yes	No
Change subscription pricing or tiers	Yes	No
Reach payment and payout settings	Yes	No
Add or remove other team members	Yes	No

Adding one is quick. Go to Settings > Alt Logins, enter a display name and the person's email address, and save. They get an invite email with a link to set their own password, then log in as themselves and see your inbox, with an "Acting as [Your Name]" banner across the top. Behind the scenes, every message a chatter sends is recorded against their seat, so the history stays attributable long after the fact.

There is no limit on how many seats you create, so there is never a reason to double up two people on one login.

---

4. Give the smallest access that does the job

Access tends to expand by accident. Someone gets added for a two-week campaign and is still there a year later. A quick discipline that prevents most of it:

• Add a seat per person, never per role. "The agency" is not a person. If three people at an agency work your inbox, that is three seats. One shared seat destroys the audit trail you are paying for.
• Use the display name field properly. "Senior chatter" tells you nothing in six months. Use the person's actual name.
• Do a quarterly read of the list. Open Settings > Alt Logins and ask of each seat: is this person still working with me? Anyone you hesitate on gets deactivated. Reactivating is easy if you were wrong.
• Keep payout details to yourself. Chatters cannot reach payouts, pricing, or payment settings by design. Do not undo that by sharing your own login with someone "just for a second".

---

5. Offboard the day someone leaves, not the week after

The riskiest window in any creator business is the gap between someone leaving and their access being removed. Close it on the same day.

1. Open Settings > Alt Logins and find their seat.
2. Uncheck Active and save. Their access ends immediately.
3. If that person ever knew your creator password, change it under Settings > Account > Password as well, and confirm two-step login is on.
4. Change any shared password on the tools around InnerText too: the email inbox, the scheduling doc, the cloud drive where you keep content.

Do this even when a departure is entirely friendly. Offboarding is not an accusation, it is bookkeeping, and doing it consistently means you never have to make an awkward judgment call about who "probably still has the password".

---

6. What to look at when something feels wrong

Trust the instinct, then check specifics rather than guessing. The useful signals are:

• Messages in a conversation you know you did not send, and no active chatter who would have sent them.
• Settings that changed without you: your pricing, your bio, your display name, your payout details.
• An "Acting as" session you cannot account for, or an active seat belonging to someone who left.
• Password reset or login emails you did not request.

If you see any of those, work through it in order: change your password, turn on two-step login if it is off, then deactivate every alt login you cannot personally vouch for. That combination ends any session that is not yours.

Then tell us. Every creator has a help thread at Support in the dashboard sidebar, and anything touching your account or your payouts gets handed to the InnerText team rather than guessed at. You can also reach us at support@inner-text.com.

One more thing worth knowing: fans never see your personal number. Everything runs through the InnerText number you picked during onboarding, so your own line stays out of it.

---

The short version

Security on a creator account is not a project, it is four habits: a unique password, two-step login switched on, one seat per person instead of a shared login, and access removed the day someone leaves. Set the first two once and they are done. The other two cost a few minutes a quarter, and they are what turns a team from a liability into leverage. You built the audience. The point of all this is simply that nobody else gets to walk off with it.

Start monetizing →