Hiring a Virtual Assistant? Do Not Share Your Passwords
Most small businesses hand a virtual assistant the keys the same way they would hand them to a friend. They text a password and move on. That habit is the real security risk, not the assistant.
A virtual assistant can work safely inside your systems. However, safety comes from how you set up access, not from where the person sits.
Why shared passwords fail
A shared password destroys accountability. Nobody can tell who changed what, so mistakes are hard to trace. Passwords also spread, because a login sent by email or chat stays in the inbox forever. Most of all, a shared login makes it hard to cut off access later, since changing it disrupts everyone.
How to set up access safely
- Give every assistant an individual account, so you can see who did what.
- Share unavoidable logins through a password manager, not through email or chat.
- Turn on multi-factor authentication, and keep the MFA device under your control.
- Grant only the access each task needs, because a scheduling assistant does not need banking access.
- Start with low-risk work, then widen access as trust builds.
- Review access every quarter, and whenever duties change.
Offboarding is where businesses fail
Most security gaps appear after an engagement ends, not during it. First, list every tool the assistant used. Then remove access from email, shared drives, your CRM, accounting, and the password vault. Finally, rotate any password that was ever shared, and confirm the removal worked.
This ties directly to what we covered in passkeys and cyber insurance, because stolen logins are a common entry point. For the broader hiring question, see virtual assistant vs in-house hire.
FAQ
Can I trust a virtual assistant with customer data?
Yes, when access is limited to the role. Start with low-risk tasks, and add sensitive data only as trust builds.
What if a tool has no option to delegate access?
Use a password manager with a shared vault. The assistant can use the login without receiving the password in a message, and you can revoke it in one click.
Related: AI agents now work for days, so treat them like new hires.
Related: how to set limits when you connect AI tools to your business data.
Getting started
Zavix Media sets up virtual assistant access securely, with individual accounts, a shared vault, and a clean offboarding plan. Book a Free Call, and we will set up yours.