I'm wondering whether it's secure to share my hosting account login with a developer I hired. He mentioned that working with Dokan requires backend scripting in custom files, which can't be done through the WordPress dashboard. He also said that he needs access to the database to complete the job. I've already provided him with a database dev account, a cPanel FTP account, and an admin account for my WordPress site, but he insists that he still needs my full login. Given that he has a good rating with 5 stars and 178 reviews on the platform, should I give him my login credentials?
4 Answers
Big no on giving your full access! It could lead to future regrets. Even skilled developers often don't have unrestricted access to certain systems. Stick with the limited access accounts you've set up.
Absolutely avoid giving out your account login. If he's a capable developer, he can work with the access you've already granted him. Ask him to handle tasks through the limited accounts.
Definitely do not share your full hosting login. Creating limited user roles is the best approach for security. Even top-rated freelancers should operate under set boundaries to ensure that your information remains safe.
You should never give out your full login details. Always follow the principle of least privilege—only provide access that is absolutely necessary. It's good that you've created a limited access account for him to work with; that's usually sufficient for most development needs.

Related Questions
How to Build a Custom GPT Journalist That Posts Directly to WordPress
Cloudflare Origin SSL Certificate Setup Guide
How To Effectively Monetize A Site With Ads