# Marketing Account Ownership Inventory > List every account your marketing depends on, who owns it, who has access, whether multi-factor authentication is on, and how to recover it. Canonical: https://vassalmarketing.com/information/resources/marketing-account-ownership-inventory/ **Maintained by Vassal Marketing** · Last updated on September 26, 2026 Reviewed at least quarterly and whenever a platform or rule it cites changes. General information, not legal or professional advice. Check rules that affect your business with a qualified professional. Make a spreadsheet with one row per account and five columns: Account, Owner, Who else has access, Multi-factor authentication (MFA) on?, and Recovery email or phone. Your business should own every account, and vendors should have their own logins. Never store passwords in the sheet; use a password manager. ## Website, domain, and email These accounts decide whether your website and email stay online. Losing one can take the business offline. - [ ] Domain registrar: confirm the account is in your business's name. — Owner · Once - [ ] DNS: note where DNS is managed (often the registrar or host). — Either · Once - [ ] Hosting: confirm you have your own admin login. — Owner · Once - [ ] Business email: confirm an admin account belongs to the business. — Owner · Once - [ ] Website admin: confirm at least one owner-level login is yours. — Owner · Once - [ ] Turn on MFA for each of these accounts. — Owner · Once ## Google accounts Use a business-controlled Google account, not a personal Gmail or an agency account, as the owner. - [ ] Google Business Profile: confirm the business is primary owner. — Owner · Once - [ ] Google Analytics 4 (GA4): confirm the business has Administrator access. — Owner · Once - [ ] Search Console: confirm the business is a verified owner. — Owner · Once - [ ] Google Ads: confirm the account and billing are under your business. — Owner · Once - [ ] Local Services Ads (LSA): confirm your business controls the account and billing. — Owner · Once - [ ] Record the recovery phone and email for the owning Google account. — Owner · Once ## Social, reviews, and phone tracking These accounts are easy to forget until someone leaves. - [ ] Meta (Facebook and Instagram): confirm the business portfolio and Pages are owned by you. — Owner · Once - [ ] Review sites such as Yelp or industry directories: record who claimed each listing. — Owner · Once - [ ] Bing Places and Apple Business: record the login owner. — Either · Once - [ ] Call tracking: confirm who owns the tracking numbers and what happens to them if you cancel. — Owner · Once - [ ] Booking, scheduling, and form tools: record the account owner. — Owner · Once ## Keep the inventory current An inventory is only useful if someone updates it. - [ ] Store the inventory in a shared business folder with limited access. — Owner · Once - [ ] Review who has access to every account. — Owner · Quarterly - [ ] Remove access the day an employee or vendor leaves. — Owner · When something changes - [ ] Update recovery emails and phones when staff change. — Owner · When something changes - [ ] Check domain and SSL/TLS certificate renewal dates. — Owner · Quarterly ## Questions business owners ask ### What if our agency created the accounts? Ask them to make your business the owner and keep manager access for themselves. If they refuse or stall, check your contract before you escalate. ### Is it safe to share one login with our provider? No. Give each person their own login with the lowest access level they need. Shared logins make it hard to remove access later. ### Why does MFA matter? Multi-factor authentication asks for a second proof, such as a code on your phone, so a stolen password alone is not enough to take over the account. ## Primary guidance - [Google: Manage profile owners and managers](https://support.google.com/business/answer/3403100) - [Google Analytics: Add, edit, and delete users](https://support.google.com/analytics/answer/9305788) - [Google Ads: About access levels](https://support.google.com/google-ads/answer/9978556) ## Related guides - [Domain and hosting account ownership](https://vassalmarketing.com/information/website-stewardship/domain-hosting-account-ownership.md) - [Google Ads accounts your business owns](https://vassalmarketing.com/information/paid-search/client-owned-google-ads-accounts.md) - [Google Business Profile ownership and access](https://vassalmarketing.com/information/google-business-profile/ownership-and-access.md) - [Business email authentication](https://vassalmarketing.com/information/website-stewardship/business-email-authentication.md) ## Related resources - [Agency Offboarding Checklist](https://vassalmarketing.com/information/resources/agency-offboarding-checklist.md): Leave a marketing agency, freelancer, or web provider without losing accounts, files, tracking, or phone numbers. - [Questions to Ask Before Hiring an SEO](https://vassalmarketing.com/information/resources/questions-before-hiring-seo.md): Interview questions for comparing SEO providers on strategy, methods, access, reporting, pricing, and how you leave. - [Monthly Owner Maintenance Checklist](https://vassalmarketing.com/information/resources/monthly-owner-maintenance-checklist.md): A 30-minute monthly routine across your website, Google profile, reviews, analytics, and ads. [Browse all information topics](https://vassalmarketing.com/information.md).