Cross-border teams often juggle Amazon, Shopify, Meta, TikTok and email admin panels. Shared passwords in chat are still common—and still costly when someone leaves.
Baseline rules
- Unique passwords per store, stored in a team password manager.
- SSO or Google/Microsoft login where the platform allows it.
- Hardware keys or app-based 2FA for ad accounts and domains.
- Disable logins the same day contractors end.
Offboarding checklist
- Transfer ownership of Business Managers and stores.
- Rotate API keys and webhook secrets.
- Remove personal emails from notification lists.
- Confirm recovery phone numbers are company-controlled.
Phishing awareness
Marketplace "urgent verification" emails are a frequent attack. Bookmark official login URLs; do not click from unread blasts. Cross-check suspicious service providers via fraud exposure and evaluation.
Tooling overviews: tools. Home: Facebook520.
Contractor portals
Give freelancers time-boxed access windows and force SSO where possible. Prohibit downloading full customer export files to personal laptops. When a contractor’s project ends, rotate not only passwords but also store API tokens embedded in middleware. A surprising number of “mysterious stock edits” trace back to forgotten integrations rather than human malice.
Domain registrars and DNS
Ad accounts are not the only crown jewels—domain DNS and registrar logins can hijack email and pixels overnight. Apply the same SSO and hardware-key rules there. Keep an offline printed recovery path in a sealed envelope for true lockouts. Review DNS records quarterly for forgotten test subdomains pointing at old servers.
Field notes from operators
Teams that win at this usually schedule the work instead of waiting for inspiration. Put a recurring calendar block on the same day each week, prepare inputs the day before, and end with a written decision. Share the decision in a channel executives already read. Over a quarter, those small closed loops compound into fewer emergencies and cleaner metrics. If you use external freelancers, send them the same checklist so quality does not depend on who is on shift.
Field notes from operators
Another reminder: teams that win at this usually schedule the work instead of waiting for inspiration. Put a recurring calendar block on the same day each week, prepare inputs the day before, and end with a written decision. Share the decision in a channel executives already read. Over a quarter, those small closed loops compound into fewer emergencies and cleaner metrics. If you use external freelancers, send them the same checklist so quality does not depend on who is on shift.
Browser extensions
Ban unknown password-stealing extensions on admin browsers. Provide a hardened browser profile for marketplace logins. It feels strict until the first account takeover.
Published by Facebook520 Cross-Border Navigation.