How Do I Set Up Social Media Accounts So My Business Owns Them?

By Bill Stilwell · Last reviewed October 16, 2026

The short answer

Create every business social account using a business email address on your own domain, business-controlled recovery details, and two-step sign-in. Make sure at least two trusted people inside the business have full access. Never let an employee’s personal email or an outside vendor be the only way into the account. The business, not a person, should own it.

What this means

The outline asks you to create business-owned accounts using business-controlled recovery information (8.4.4).

“Business-controlled” means the business can always get back in, no matter who leaves:

The sign-in email is a business address on your domain, like social@yourbusiness.com, not someone’s personal Gmail (see 12.1.2 Email Accounts and Shared Inboxes).
The recovery phone and email belong to the business.
Passwords are stored in a business password manager (see 11.7.2 Password Manager).
Two-step sign-in is on (see 11.7.3 Multi-Factor Authentication).
At least two people in the business have full control (see 8.4.6 Two Business-Controlled Administrators).

Example: a salon’s front desk manager set up its Instagram on her personal email. (Made up for this page.) When she left, nobody could reset the password. The salon had to start a new account and lost years of photos and followers. A shared business email from the start would have avoided it.

Why it matters

People leave. Employees, family members, and agencies come and go.
Recovery depends on the email and phone. If those aren’t yours, you may not be able to prove the account is yours.
Hacked accounts. Without two-step sign-in, an account is easier to take over (see 11.9.2 Account Takeover).
Broken links. A replaced account means updating your website, Google Business Profile, cards, and ads.

Who this applies to

Every business with any social account, including ones you rarely use. It also applies to accounts an agency or freelancer set up for you.

How to do it

Set up a business email on your domain for social accounts, ideally a shared inbox more than one person can reach.
Create each account with that email, using the handle you chose (see 8.2.4 Social Handle Search).
Choose the business or professional account type where the platform offers one.
Set the recovery phone and email to business-controlled ones.
Turn on two-step sign-in. Store backup codes in the business password manager.
Add a second trusted person with full control, using the platform’s own roles, not a shared password (see 8.4.6 Two Business-Controlled Administrators).
If an agency manages the account, give them a limited role. Keep ownership in the business.
Fill in the profile with your exact business name, website, phone, and area to match your other listings (see 8.4.7 Brand Consistency).
Link the account from your website footer and, where available, your Google Business Profile.
Add each account to your access inventory with owner, admins, and recovery details (see 11.7.5 Access Inventory).

What proof to keep

An access inventory entry for each account: platform, handle, sign-in email, admins, and date created
Backup codes stored in the password manager
A screenshot of each account’s admin or roles page

Common mistakes

Using a personal email or phone. The most common way businesses lose accounts.
Letting the agency own it. If you part ways, you may not get it back.
One admin only. If that person is locked out or leaves, so is the business.
Sharing one password among staff. Use the platform’s roles so each person signs in as themselves and can be removed.
Forgetting old accounts. Abandoned accounts with your name still show up in searches. Claim, update, or close them.

When to get help from a pro

Most businesses can do this themselves. If you’ve already lost access to an account, follow the platform’s official recovery steps. If someone refuses to hand over an account that represents your business, an attorney can explain your options. Ask:

What proof do I need that this account belongs to the business?
Should our vendor contracts say the business owns all accounts?

Bill’s note

[Bill: add a short story or opinion. For example, a client who lost a social account when an employee or agency left, and what you now tell clients to do.]

If you’d rather have this done for you, SiteSmarty sets up Google Business Profiles owned by your business and links your official social accounts to them.

How I did this for SiteSmarty

[Date I did this:]
[What I actually did, step by step: the email I used, the platforms, and who has access]
[What it cost and how long it took:]
[What surprised me or what I’d do differently:]
[Screenshot or photo to add, with private info blurred: one account’s settings showing the business email and roles]
[Result so far:]

Questions people ask

Should I use my personal email for my business Facebook page? No. Use a business email on your own domain so the business can always recover the account.

What happens if the person who set up our accounts leaves? If they used their own email and were the only admin, you may lose access. Add a second business admin and switch recovery details to business ones now.

Should my marketing agency create our social accounts? It’s better if you create them and give the agency a limited role. The business should stay the owner.

How do social accounts connect to my Google Business Profile? In some regions, Google lets you add one link per supported platform to your profile. Google may also add links on its own.

Audit check

Question: Is every business social account signed in with a business email, recoverable by the business, protected by two-step sign-in, and controlled by at least two business people?
Pass looks like: All accounts listed in the access inventory with business email, business recovery details, two-step sign-in, two business admins, and limited roles for outside vendors.
Fail looks like: Personal emails or phones on accounts. One admin. A vendor as the only owner. Shared passwords.
Evidence to collect: The access inventory, screenshots of admin and security settings, and a list of vendor roles.

Where this fits

Do this first: 8.2.4 Social Handle Search, 12.1.2 Email Accounts and Shared Inboxes

Do this next: 8.4.6 Two Business-Controlled Administrators

Sources

Google Business Profile Help, "Manage your social media links" (checked October 16, 2026)
Google Search Central, "Organization structured data" (checked October 16, 2026)

This page explains general rules and Bill's own experience. It is not legal, tax, or insurance advice. Talk to a qualified professional about your situation.