Mailchimp
Mailchimp Free gives you one seat
Mailchimp has user roles with five permission levels, and agencies can use Mailchimp & Co. The catch is seat count by plan: Free allows one user, Essentials allows three. If you are on Free and need a second person sending campaigns, there is no native way to do it.
Try Users first
Where this works, it is better than anything we offer: each person gets their own login, their own 2FA and their own audit trail.
- What it is called
- Users, with five permission levels; Mailchimp & Co for agencies
- Where to find it
- Mailchimp → Account & billing → Settings → Users
- Limits
- Free: 1 seat. Essentials: 3 seats (Owner and Admin roles only). Higher plans allow more.
Where that runs out
On the Free plan a second user is not available at any number. On Essentials you get three, and only as Owner or Admin — there is no read-only or limited role at that tier, so a contractor gets more access than you may want to give.
What Pair2FA does about it
1. Add the authenticator secret once
Scan the QR code Mailchimp shows during authenticator setup, or paste the Base32 key if it offers one. Mailchimp's documentation describes scanning only, so capture it at setup time.
2. It is encrypted before it is stored
AES-256-GCM at rest. The secret is never shown again unless someone with export permission explicitly asks for it and re-authenticates.
3. Grant only the people who need it
Viewers see the rotating six-digit code and nothing else. Access is per account, so someone working on one client never sees another. Revoking takes one click and is written to the audit log.
Mailchimp team access: common questions
Should I upgrade rather than share?
If the seat cost is justified, yes. Separate users mean separate logins, separate 2FA and a real audit trail. The honest question is whether one contractor justifies the plan change.
What is Mailchimp & Co?
Mailchimp's programme for agencies and freelancers managing client accounts. If you are an agency, look at this before anything else — it is designed for exactly your case.
Can I give someone limited access on Essentials?
Essentials restricts you to Owner and Admin roles. More granular permission levels come with higher plans.
What Pair2FA is not. It is not end-to-end encrypted. Secrets are decrypted on our server to generate codes, so a server compromise is part of the threat model. It is built to replace codes forwarded over chat and photographed QR codes, not to replace a hardware security key or a platform's own access controls. Our security page sets out the full threat model.