Your agency has asked for access to Klaviyo. You don't need to share your password for it. Klaviyo lets you add them with their own login, choose exactly what they can do, and remove them when the project ends. These are the clicks, checked against Klaviyo's own help pages in November 2026.
Which role to choose
Pick the narrowest role that lets your agency do the work. Manager is usually the right one.
| Role | What it allows | For an agency |
|---|---|---|
| Manager | Builds campaigns, flows, sign-up forms and segments, and manages integrations and API keys. Cannot manage users or export email addresses. | Usually the right one |
| Admin | Full account access, including users, billing and API keys. Cannot close the account. | If the work needs it |
| Campaign Coordinator | Creates and sends campaigns and edits templates. In flows, edits message content only. | If the work needs it |
| Analyst | Views analytics, segments and reports. Cannot edit campaigns, flows or forms. | If the work needs it |
Add your agency to Klaviyo
- In Klaviyo, click your account name in the bottom left corner, then Settings.
- Under General, click Users, then Add new user.
- Enter your agency's email address. Under Language, choose English, and under User Role, choose Manager.
- Click Add User.
Only an Owner or Admin can add users. Klaviyo's invitation expires after 24 hours; if it lapses, click the 3 dots next to your agency's email address in Users and select Resend Invites.
How you both know it worked
Klaviyo emails your agency an invitation from klaviyo.com. Once they accept it, they show in your Klaviyo account's list of people with access, where you can see or change their role at any time.
Remove access when the project ends
- In Klaviyo, open Settings, then Users under General.
- Click the 3 vertical dots next to your agency's email address, select Delete user, then click Delete user in the pop-up.
- Under API keys in Settings, delete any private API keys your agency created.
Do you have to share your password?
No. Every step above uses Klaviyo's own invite, so your agency signs in with their own account, your two-step verification stays on, and anything they change is recorded under their name. How to give a developer access without sharing your password covers the other accounts agencies usually ask for.
Doing this for every client?
Agencies can send each client one GetSetKeys link instead of a page like this. It walks the client through Klaviyo and the other platforms the project needs, and checks that each step is done.