Helping non-profit organizations successfully leverage social media and the digital web to market fundraising events.
Does this sound at all familiar?
Social Media Manager (SMM): “We need a Facebook page.”
Person In Charge (PIC): “Great idea! Go make one.”[SMM makes page and they are the only admin.]
SMM:”We need a Twitter account”
PIC: “Great idea! Go make one.”[SMM creates account and the rescue email is their own work account or, worse, their personal account.]
SMM: “We need accounts for YouTube and Pinterest and Instagram and…”
PIC: “Great idea! Go do it. Make whatever you think we need.”[SMM creates all needed accounts. They use their own work or personal account for setup and their own mobile phone for reference. Then, a few months later...]
SMM: “I’m sorry to say, I’ve taken another job. Here’s my notice.”
PIC: “We’ll miss you! Good luck…”[No one does a full knowledge transfer. SMM disappears into the blackhole into which past employees sometimes fall. ]
NEW SMM: “So, how do I get into all our Social Networking sites.”
PIC: “Oh. um… Guess you’ll need to figure that out.”[NEW SMM plots elaborate revenge on original SMM...]
Over the past few months, I’ve spent days – yes days – tracking down and trying to reset social networking accounts for various people because they were originally set up by an intern, an associate who’s no longer with the company or even a past vendor. My response:
Instead of going into detail about the trials and tribulations of this process, I’d like to give you the following steps to avoid this issue.
Now, go gather your credentials and save your Social Media Manager a few headaches. Thanks!

Good advice. I follow all of these practices with clients and did when I was in corporate. I would add three points.
1. Keep a master password list on paper or on CD-ROM (flash drives degrade over time more quickly than paper or CD) in a physically diverse place. Hard drives melt down for no reason. Buildings burn down. Keeping a master list in a safe deposit box at your bank, for example, ensures it is protected in the case of some catastrophic event at the office or with your equipment. And update it quarterly if not monthly.
2. If you have others setting up accounts for you, give them instruction on security question responses. These responses do not actually have to be someone’s mom’s maiden name. You could use a simple variation of the company name or a single made-up word as your response to pet’s first name, grade school, first phone number, etc. The form doesn’t care. If you want to go a step further, you could add “FB” or “TW” to the end of the word to distinguish accounts, though this isn’t entirely necessary.
3. For the generic Gmail account, enable two-factor authentication to help prevent general cracking or unauthorized password changes by interns, for example.