Namecheap
Namecheap shares domains, not accounts
Namecheap has Share Access, which delegates individual domains to another Namecheap user — and Namecheap's own knowledgebase explicitly recommends it over sharing your password. What it does not have is account-level team access: hosting and SSL cannot be shared, and billing and security settings stay with the one login.
Try Share Access (per domain) first
Where this works, it is better than anything we offer: each person gets their own login, their own 2FA and their own audit trail.
- What it is called
- Share Access (per domain)
- Where to find it
- Domain List → Manage → Sharing & Transfer → Share Access
- Limits
- Domains only. Excludes SSL. cPanel hosting cannot take a second user. The recipient needs their own Namecheap account. No account-level team or multi-seat feature was found.
Where that runs out
Anything that is not a domain — hosting, SSL certificates, billing, account security settings — stays behind the single account login. A team managing a client's full Namecheap estate still has one credential between them for those.
What Pair2FA does about it
1. Add the authenticator secret once
Profile → Security → Access → Two-Factor Authentication → Enable → "enter this text code". Note that regenerating the QR code logs out all devices.
2. It is encrypted before it is stored
AES-256-GCM at rest. The secret is never shown again unless someone with export permission explicitly asks for it and re-authenticates.
3. Grant only the people who need it
Viewers see the rotating six-digit code and nothing else. Access is per account, so someone working on one client never sees another. Revoking takes one click and is written to the audit log.
Namecheap team access: common questions
Can a Namecheap account have multiple users?
Not as a team or seat feature that we could find. Namecheap delegates access per domain through Share Access, where the recipient uses their own Namecheap account. Hosting and SSL are outside what Share Access covers.
Should I share my Namecheap password with my team?
No — and Namecheap says so itself. Its knowledgebase states that you should not share your account password, and points to Share Access instead. Use Share Access for domains; use Pair2FA only for the account-level actions it cannot reach.
What about cPanel hosting?
Namecheap's documentation states it is not possible to assign another user to the same cPanel account. That is the clearest case where no native delegation exists.
What Pair2FA is not. It is not end-to-end encrypted. Secrets are decrypted on our server to generate codes, so a server compromise is part of the threat model. It is built to replace codes forwarded over chat and photographed QR codes, not to replace a hardware security key or a platform's own access controls. Our security page sets out the full threat model.
