Your agency has asked for access to DigitalOcean. You don't need to share your password for it. DigitalOcean lets you add them with their own login, choose exactly what they can do, and remove them when the project ends. These are the clicks, checked against DigitalOcean's own help pages in October 2026.
Which role to choose
Pick the narrowest role that lets your agency do the work. Member is usually the right one.
| Role | What it allows | For an agency |
|---|---|---|
| Member | Full access to Droplets, databases and other resources. No billing, and team settings are read-only. | Usually the right one |
| Modifier | Like Member, but cannot delete resources. | If the work needs it |
| Resource Viewer | Sees resources without changing anything. No billing. | If the work needs it |
| Owner | Everything, including billing and team settings. | If the work needs it |
Add your agency to DigitalOcean
- Log in to the DigitalOcean control panel. If your team isn't the team shown, click your profile icon, choose Switch Teams and select it.
- Click Settings in the left menu, then Invite Members in the Team Members section.
- Enter your agency's email address, choose the Member role and click Send Invites.
Only an Owner can invite people, and DigitalOcean needs a valid payment method on your default team before anyone can be invited.
How you both know it worked
DigitalOcean emails your agency an invitation from digitalocean.com. Once they accept it, they show in your DigitalOcean account's list of people with access, where you can see or change their role at any time.
Remove access when the project ends
- Open Settings for your team and find your agency's email address under Team Members.
- Click the ... menu next to it and choose Remove member.
- Remove any SSH keys or other credentials your agency added to your Droplets. Removing a member does not revoke them.
Do you have to share your password?
No. Every step above uses DigitalOcean's own invite, so your agency signs in with their own account, your two-step verification stays on, and anything they change is recorded under their name. How to give a developer access without sharing your password covers the other accounts agencies usually ask for.
Doing this for every client?
Agencies can send each client one Get Set Keys link instead of a page like this. It walks the client through DigitalOcean and the other platforms the project needs, and checks that each step is done.