Who Has the Password?

Why Social Media Setup Is a Governance Issue

This blog is a bit of a PSA.

In our role as an Association Management Company (AMC), we follow a detailed onboarding checklist whenever we transition a new association under our management. We work through membership data, financials, contracts, software permissions, governance documents, and all the operational pieces that keep an organization functioning smoothly.

Surprisingly, the area that often consumes the most time during a transition is not financial or legal. It is social media.

Here is what we regularly encounter:

• The association’s social media page is set up as someone’s personal profile.

• No one knows who has full administrative access.

• The login email belongs to a former board or staff member from years ago.

• Two-factor authentication is tied to a phone number that no longer exists.

Suddenly, something that should take 10 minutes takes weeks, sometimes even months, to untangle. In some cases, recovery is extremely difficult and the association is left considering whether it needs to start over.

Social media management is not just a marketing detail.

It is a governance issue.

And it is part of responsible succession planning.

It Seemed Simple at the Time

Many associations started their social media accounts informally, often years ago. A passionate volunteer created a Facebook page. A summer student opened an Instagram account. Someone created a LinkedIn Page the same way they created their personal one.

That works well enough in the beginning.

Until leadership changes.

Common issues we see include:

• Pages set up as personal profiles instead of proper business or organizational accounts

• No centralized organizational email used for account creation

• Only one person with the highest level of access

• No documented record of login credentials or access roles

• No clarity on who holds ownership or “full control” of the account

When accounts are not set up properly as organizational business profiles, associations can find themselves in a difficult position:

• You may not be able to add or remove administrators.

• You may not be able to transfer ownership or full control.

• You may lose access for an extended period of time.

• In worst-case scenarios, you may need to rebuild an account from scratch and rebuild your following.

We have had situations where we needed to track down former board members from years past to regain access.

Sometimes they are happy to help. Sometimes they are frustrated. Sometimes the email tied to the account no longer exists.

It is rarely dramatic, but it is almost always time-consuming.

Succession Planning Is Bigger Than People

When boards think about succession, they often focus on:

• Who will be the next Chair?

• Who will replace the Executive Director?

• How will we onboard new board members?

All of that is important.

But true succession planning goes further. Of course corporate documents, financial files, and contracts are on the radar. However, the list of credentials, passwords, verification methods, domain ownership, software access, and social media permissions must also be part of the succession checklist.

Succession is not only about leadership continuity, it is about operational continuity.

Social Media Accounts Are Organizational Assets

Your association’s social media presence matters. Your members rely on it. It is:

• A communications channel

• A reputational asset

• A member engagement tool

• A public-facing representation of your brand

That makes it organizational property.

This means:

• It should be tied to a centralized organizational email address.

• It should be set up as a proper business or organizational account.

• At least two current leaders or staff members should have the highest level of administrative access.

• Access roles should be clearly defined and documented.

• It should be included in your formal succession and transition planning.

Social media access should also be part of your staff and volunteer offboarding process. If an employee, contractor, or board member holds any level of administrative access, there should be a clear process to transfer or remove that access before they step away. Waiting until after someone has left to determine who controls an account creates unnecessary risk and avoidable disruption.

At HOST Management, when we onboard a new association, we conduct a full operational audit. That includes reviewing social media accounts and confirming appropriate access levels.

And when we ever transition an association away from our management, ensuring proper transfer of credentials and administrative control is part of our responsibility.

A Simple Governance Check for Your Board

You may be thinking everything is fine because you see staff regularly posting content. If content is going out, access must be in place.

Not necessarily.

Posting access is often not the same as full administrative control. Staff may be able to publish updates, respond to comments, and keep the page active, yet not have the authority to add or remove users, change security settings, update ownership, or recover the account if something goes wrong.

When the individual who holds the highest level of access is no longer involved, that is when the real problem surfaces.

Here are a few questions for your next board meeting:

• Do you know who holds the highest level of access or ownership for each account?

• Are the accounts tied to an organizational email address rather than a personal one?

• Do at least two current leaders or staff members have full administrative access?

• Is that access documented securely in your governance or transition files?

• If one key person stepped away tomorrow, could you confidently access and manage every account?

If you are unsure of any of these answers, it is worth reviewing.

Not because it feels urgent today.

But because good governance is preventative.

The Bigger Picture

This may seem like a small operational detail.

But small details are often the difference between organizations that function smoothly through leadership changes and those that scramble during unexpected transitions.

Succession is not just about people.

It is about systems.

Because strong associations are built on systems that outlast the people who serve them.