How are you guys outsourcing social media posting to VAs without sharing passwords?

Don't share logins at all if you can help it. On Instagram we add VAs through Meta Business Suite as a partner or employee with content permissions, so they can draft and schedule without seeing the password, and we remove them when the contract ends. TikTok Business Center does the same thing with member roles. Anything that still needs a raw login goes in a shared vault they can use without viewing the password, not a cloud phone.

official platform permissions beat password sharing every time. add them as a user in Meta Business Suite or TikTok Business Center per account, and you revoke access with one click when they leave. keep a password manager as backup only for accounts that still have no roles.

As the freelancer side of this: my clients add me to their Meta Business Suite with content permissions and I've never once been handed a client password. Same setup Gerald described. When a project wraps they just flip my access off and that's it, no password changes needed.

TikTok's the annoying one. Business Center exists but it's clunkier for organic posting, so with my TikTok-heavy clients we usually make a dedicated email just for the account and share that one login through a vault (Bitwarden and 1Password both do shared vaults, cheap). Revoking = they change a single password, not every device we've ever logged in from.

One tip either way: keep 2FA on the main login and make sure nobody on the team turns it off. The second a VA starts needing your verification codes you've basically shared the password anyway.

Official permissions first, and treat Instagram and TikTok as two separate problems. For Instagram, add the VA in Meta Business Suite with content-only access to that one page, not admin, and keep billing and settings with you. That alone covers most of what you listed, and removing them takes a minute when they leave. TikTok is the awkward one, since its business tools are stronger on ads than on day-to-day organic posting, so test the exact tasks with one VA on one account before rolling it out: scheduling, uploading a draft, and publishing. If a task cannot be done through permissions, that is the only place to think about a remote device, and keep it to one account per device so a leaver never holds more than they should. Whatever route you pick, write down who has access to what and check it monthly. Passwords shared once tend to live forever in someone's notes.

If this post doesn't follow the rules, please report it to the mods.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

I use last pass

One TikTok detail to check: an account linked for ad delivery is different from one linked for account management. TikTok’s account-management guide includes organic publishing and scheduling; it also says Business Centers registered in the US, EU or UK need a Verified Business Account for that integration.

Before rolling it out, have one VA test the actual upload and scheduling tasks with their assigned access, then remove that access and test again. A logged-in cloud phone still gives someone control of the account even if they never see its password, so it needs its own revocation process.

Beyond the official business tools, what helped me most is a scheduler with an approval step, so VAs draft, upload and schedule everything but posts only go live after you approve. For the accounts that still need a real login, a password manager with autofill-only sharing means they can log in without ever seeing the password. Also make sure every account's recovery email and 2FA sit with you, not the VA, so revoking access is just one click.

One thing I'm currently looking into is how cloud phones fit into this. I've come across stackphones.com which lets VAs remotely access dedicated Android devices and handle daily posting without needing physical phones. Seems like an interesting solution for managing multiple accounts with a remote team, especially if you want to keep everything organized.
-> One addition to that is also that you don't have to share passwords with your employees. You just login the acc and the acc is ready to access for everyone