Before You Hand Over Your Facebook Password to the ‘Social Media Guy’…

Pauline Kire
Aug 29
4 min read

Simple steps to keep your business safe while your social media manager runs the show

If you run a business in Uganda today, chances are your customers will check your Facebook or Instagram page before they ever step into your shop. That page isn’t just about likes. It’s your digital storefront, your customer care desk, and sometimes even your suggestion box when a client decides to air their frustrations in public.

So, of course, many business owners bring in social media managers. Between stock-taking, fighting with URA over receipts, and running after boda-boda guys to deliver orders, who really has the time to also reply to DMs at 11pm? A good manager feels like a lifesaver.

But here’s the catch: when you hand over your business socials, you’re not just giving them a password. You’re giving someone the microphone to your customers, access to your marketing budget, and sometimes even control of your reputation. And without a little structure, things can go wrong very quickly.

Who Really Owns the Account?

This is where many businesses slip. A boutique in Kampala hires a manager who sets up the Facebook page using their personal Gmail. Business is booming… until the manager leaves. Suddenly, the owner is locked out of their own page. Customers keep sending messages, but the owner is stuck outside, knocking on the digital door.

Always register your accounts under your business email. Facebook has Business Manager. LinkedIn lets you assign page admins. Instagram and TikTok allow business access. You — the owner — should hold the “title deed.” Managers should only have roles you can add or remove.

Contracts and Boundaries: Because “Tusaba Tusaba” Isn’t Enough

In Uganda, many SMEs start with handshake deals: “Boss, you just run the page, I’ll give you data and a small ka token.” But without a clear agreement, boundaries blur. Next thing you know, someone has boosted ads at 3am on your credit card. Or they’re posting their side hustle on your business page.

A simple written contract can prevent these headaches. Spell out what they can do, what needs approval, and what happens when they leave. No need for heavy legal grammar — just clarity.

Two-Factor Authentication: The Digital Padlock

One kid's store in Ntinda called me panicking: their Instagram had been hijacked after the manager logged in from a free Wi-Fi spot. By the time they noticed, hackers were DM’ing customers pretending to sell iPhones at “discount prices.”

The fix is easy: enable two-factor authentication (2FA). It’s like adding a second padlock to your shop door. Managers can log in with their own credentials. If they leave, you revoke their access without resetting your whole account.

Password Hygiene: Stop Using “Business@2023”

Be honest: how many of your passwords are just your business name plus the current year? Worse still, how many are floating around in WhatsApp groups or scribbled on that counter notebook next to the airtime cards?

Invest in a password manager if you must share credentials. Change passwords when people leave. And never recycle the same password with a new year. It’s the small cracks that often let the thieves in.

Approvals Before Posting: Protect Yourself From the 2AM Surprise

A hardware shop in Mbarara woke up to find their page full of random memes. Their social media manager had posted them for “engagement.” Sure, people were laughing — but no one was buying cement.

You don’t have to approve every caption, but set limits. Everyday posts? Fine. Paid ads, promotions, or sensitive announcements? Those need your nod first. Think of it like finances: you don’t sign off on every biro, but you will sign before someone buys a delivery van.

Monitor & Audit: Don’t Forget the Cousin Who Helped at Christmas

Here’s a classic Ugandan tale. December comes, and your cousin helps with holiday promotions. By March, they’re back at campus — but still have admin rights. Suddenly your salon’s page is promoting a gospel concert in Masaka.

Every few months, review who has access. Remove old managers, interns, or “temporary helpers.” If they no longer work with you, they shouldn’t be holding the keys to your shop — digital or physical.

The Crisis Plan Nobody Writes Down

What if your manager quits suddenly? Or their phone gets stolen? Or the account is hacked at 1am? Do you know how to get back in?

Keep recovery details safe. Know the steps to report a compromised account. Don’t wait to learn during a crisis — by then you’ll be trying to calm angry customers while frantically Googling “how to recover hacked Facebook page.”

Wrapping It Up

This isn’t about distrusting your social media manager. In fact, the best ones will welcome these measures. Boundaries make their work easier too — no confusion, no drama, no late-night blame games.

At the end of the day, your business socials aren’t just about likes. They’re your voice, your reputation, your customer trust. And those deserve more than blind trust — they deserve protection.

So next time you sit with your manager, don’t just talk hashtags and reels. Talk safety. Talk access. Talk about what happens if things go sideways.

Because a great social media manager can take your brand far. Clear boundaries will make sure you arrive together, safely.

Don’t fear giving your social media manager access. Just make sure you do it wisely. In the same way you wouldn’t give someone your shop keys without knowing how to get them back, don’t hand over your digital keys without a plan.

If you’ve made it this far, I’m going to assume we’re friends now, right? And what do friends do? They like, they comment, and they definitely stay in touch!

So, why not take this friendship to the next level? Sign up for my weekly newsletter—it’s packed with good reads, tips, and zero spam (I promise, your inbox won’t hate me). Just a little nugget of knowledge and fun, delivered to you with love.

I swear I won’t overload your inbox with endless emails or spammy sales pitches. Just good content, great stories, and a few cyber-safety tips sprinkled in for good measure. Plus, I’m always down for a conversation in the comments, so don’t be shy—leave a thought, a question, or just a friendly hello!