Your agency has asked for access to Bluehost. You don't need to share your password for it. Bluehost lets you add them with their own login, choose exactly what they can do, and remove them when the project ends. These are the clicks, checked against Bluehost's own help pages in November 2026.
Which role to choose
Pick the narrowest role that lets your agency do the work. Tech is usually the right one.
| Role | What it allows | For an agency |
|---|---|---|
| Tech | Manages and renews your products and services, such as hosting and domains. Cannot edit payment details, buy new products or manage users. | Usually the right one |
| Admin | Total access to the account, including payment details, purchases and users, except Primary Contact and WHOIS Registrant details. | If the work needs it |
Add your agency to Bluehost
- Log in to the Bluehost Portal, click your profile icon at the top right and select Users & Roles.
- On the Accounts & Users page, click Manage next to your account.
- Scroll down to User Roles & Permissions and click + Add User.
- Enter your agency's name as the name and your agency's email address as the email, select Tech, then click Invite.
Only the Primary Contact or an Admin can add users.
How you both know it worked
Bluehost emails your agency an invitation from bluehost.com. Once they accept it, they show in your Bluehost account's list of people with access, where you can see or change their role at any time.
Remove access when the project ends
- In the Bluehost Portal, select Users & Roles from your profile icon and click Manage next to your account.
- Under User Roles & Permissions, click Edit next to your agency's email address.
- Click Delete at the top right of the pop-up, then Delete again to confirm.
- Change any cPanel, FTP or database passwords your agency used.
Do you have to share your password?
No. Every step above uses Bluehost's own invite, so your agency signs in with their own account, your two-step verification stays on, and anything they change is recorded under their name. How to give a developer access without sharing your password covers the other accounts agencies usually ask for.
Doing this for every client?
Agencies can send each client one GetSetKeys link instead of a page like this. It walks the client through Bluehost and the other platforms the project needs, and checks that each step is done.