It usually goes like this. A few years ago, someone set up your business's social accounts. Maybe it was an employee who was good with phones, a nephew home from college, or a freelancer you hired for a few months. They used their own email, their own phone number for the security codes, and they were the admin on everything.
Then they left. Now the Facebook page asks for a code sent to a phone you do not have, the Instagram login goes to an inbox you cannot open, and nobody remembers who made the TikTok. Years of followers, reviews, and videos are sitting in accounts your business does not actually control.
This Happens Constantly
This is one of the most common problems we see with local businesses, and it is almost never anyone's fault. Somebody stepped up to help, set things up fast with whatever email and phone was handy, and moved on with their life. Nobody thought about who would own the keys.
It gets worse the more platforms you are on. Seven platforms means seven logins, seven sets of security settings, seven recovery emails, and seven chances for one of them to be tied to someone who is no longer around. If one person set them all up the same way, losing that person can lock you out of everything at once.
And it is not only people who quit. A phone gets lost. A personal email account gets closed. A freelancer stops answering messages. Someone gets hacked and nobody notices, because they did not realize it was your business account that got compromised.
Getting Back In Is Slow And Sometimes Impossible
If you have ever tried to recover a social account through official support, you know how bad this is. There is no phone number to call. There are forms, automated emails, and identity checks that assume you still have access to the email or phone the account was created with. If you do not, the process can take weeks, and sometimes it never works.
In the meantime, your business is frozen. You cannot post. You cannot answer messages. You cannot update your hours or respond to a bad review. If the account was hacked, someone else might be posting under your name.
Many businesses end up starting from zero with a new account and a slightly different username, which confuses customers and splits your audience between the dead account and the new one.
The Business Should Own Every Account
The fix is simple to describe and worth doing this week. Every social account should be tied to something the business owns, not something a person owns.
Create a business email address that you control, something like social at your own domain, and use it as the login and recovery email for every platform. Use a business phone, or the owner's phone, for security codes. Store every password in a password manager the owner has access to. Turn on two factor authentication everywhere, with backup codes saved somewhere safe.
On Facebook and Instagram, use Meta's business tools so that you, the owner, have full control and others get access through roles you can remove. On YouTube, set up a Brand Account where you are the owner and others are managers. Do the same kind of role setup on every platform that supports it.
Security Codes Are The Real Keys
The password is only half of it. Most platforms now send a code to a phone or an authenticator app whenever someone logs in from a new device. Whoever holds that phone holds the account.
If those codes go to an employee's personal cell, you do not really control the login, even if you know the password. Change the phone number on every account to one the business owns, or set up an authenticator app on a device that stays with the owner. Save the backup codes each platform gives you when you turn on two factor authentication, print them, and keep them with your other important business papers. Those codes are what get you back in when everything else fails.
Give People Access, Not Ownership
Once you own the accounts, giving other people access becomes safe. An employee can be a manager on the Facebook page. A freelancer can be added to YouTube. Whoever handles your posting, whether it is someone on your team, a contractor, or an agency like ours, should be working inside accounts that belong to you.
When they leave, you remove their access. Nothing breaks. The followers, the videos, and the reviews stay exactly where they are, because they were always yours.
This is also what makes it possible to bring in help with distribution without risk. If you ever want to stop doing it yourself, you want the handoff to be about access, not about who owns the keys to your entire online presence.
Make A List Of Every Account You Have
Most businesses do not know how many accounts they actually have. There is the Facebook page. There might also be an old Facebook page someone made in 2016. There is an Instagram, maybe a TikTok, maybe a YouTube channel with eleven videos on it from a few years ago, maybe a Reddit account someone used once.
Sit down and write them all out. For each one, note the username, the login email, the phone used for codes, and who currently has admin access. If you cannot fill in a line, that account is at risk. Start the recovery or transfer now, while the person who set it up might still answer your text.
Old Accounts Still Have Value
Do not just delete the accounts you find. Even an old YouTube channel with a handful of subscribers has history, and an account that has existed for years and posted real content often carries more trust than a brand new one.
Once you have control again, those accounts become channels you can put to work. That forgotten YouTube channel can start getting every new video you make. The old Facebook page can be merged or cleaned up so customers stop finding conflicting information. Getting control back is the first step to finally using all of them.
Hacked Accounts Start The Same Way
The same weak setup that locks you out when someone quits also makes you easy to hack. An account tied to an old personal email with a reused password is exactly what scammers look for. Once they are in, they change the email and phone, and you are locked out of your own business with no easy way back. Fake messages claiming your page broke a rule and asking you to "verify" your login are one of the most common tricks. Platforms will not ask for your password in a message. If you get one, do not click it. Log in through the app directly and check for any real notice there.
Do This Before You Need It
The worst time to discover who owns your accounts is the day you get locked out. The best time is right now, while everyone is still reachable and nothing is broken.
Take an hour this week. Make the list. Move every login to a business email. Put the passwords in one place. Make sure you, not an employee or a contractor, are the top admin on every account. Then you can grow on as many platforms as you want, knowing all of it belongs to you.
