2 min read
Why this sits with you
Directors have legal duties to run the company with reasonable care and to protect its assets — and the finance account is one of those assets. That doesn't mean you need to be a security expert; it means you're responsible for making sure sensible controls are in place and that access is limited to the right people.
What good looks like
- Every user has their own login and an appropriate role — no shared passwords.
- There are two administrators, so the account is never stranded.
- Access is removed promptly when people leave.
- 2FA and alerts are on.
- A quarterly review keeps it current.
Delegate the doing, keep the oversight
You can delegate day-to-day account management to a trusted colleague or your finance lead, but the oversight remains yours. Keep alerts coming to you (or to both administrators), so you always know what's happening even when someone else does the work. If you need someone to help formally, see nominating someone to help.
It protects you too
Good access control isn't just a duty — it protects you personally from being blamed for something a poorly-controlled account allowed. Clear roles, attributable actions and prompt offboarding mean you can always show who did what. See the full security guide.
Frequently asked questions
Do I have to manage security myself?
No. You can delegate the day-to-day work, but keep the oversight — alerts coming to you and a periodic review — so you know controls are in place. The responsibility stays with you.
What's the minimum I should do?
Own logins for everyone, two administrators, prompt removal of leavers, 2FA and alerts on, and a quarterly review. That covers the essentials simply.
Does good access control protect me personally?
Yes. Attributable actions and clear roles mean you can always show who did what, which protects you if a question ever arises about how the account was used.
Related reading
Securing your Credit Corp business account: the full guide
The single place to lock down your Credit Corp business account — covering the password, two-factor…
Read →
Managing user roles and permissions
Roles let you give each colleague the right level of access: some can only view, some can transact, one is…
Read →Running a quarterly account security review
Security drifts if left alone. A five-minute review every quarter keeps it tight: check users, access, 2FA…
Read →Setting up a second administrator
One administrator is a single point of failure. Adding a second administrator means the account is never…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.