You can't fix what you can't access. Before you start marketing your business online, you need to secure the keys to your digital kingdom—and most micro-business owners discover they're locked out at the worst possible moment.
This isn't about collecting every password you've ever created. This is about identifying and verifying access to the four critical systems that control your online presence: your website platform, your domain and hosting, your analytics, and your Google Business Profile. Without these logins, you can't update your site, track your visitors, manage your local listings, or make the technical changes required for effective marketing.
The good news? This foundational task takes just 25 minutes, and it prevents hours of frustration later. You'll create a secure record of your essential marketing logins, verify that you can actually access each system, and establish the administrative foundation needed for every subsequent Blueprint step.
Jump to:
- •Quick Start (5 minutes)
- •Complete Guide (detailed walkthrough)
- •Troubleshooting (can't find access?)
Quick Start: Secure Your 4 Core Logins (5 Minutes)
If you are unsure if your Analytics is set up correctly, or whether your Google Business Profile is fully connected to your website, NetNav's Audit checks for these exact connections in 60 seconds, saving you time rummaging for old login documents.
Follow these five steps to secure your essential marketing access:
1. Define Your Secure Storage Location
Choose where you'll record these logins. Options include a password manager (1Password, LastPass, Bitwarden), a secure spreadsheet, or even a physical notebook kept in a locked drawer. The method matters less than having one centralised location.
2. Locate Your Website CMS Login
Search your email for "welcome" or "login" from your website platform (WordPress, Shopify, Wix, Squarespace). Record the admin URL, username, and password. Test the login to verify it works.
3. Locate Your Domain Registrar and Hosting Login
Search your email for "invoice," "renewal," or "domain" from common providers (GoDaddy, Namecheap, Hostinger, 123-Reg). You need access to both your domain registrar (where you bought your domain name) and your hosting provider (where your website files live—these are sometimes the same company). Record both logins and verify access.
4. Locate Your Google Analytics Login
Identify which Google account owns your Analytics property. Log into analytics.google.com and verify you can see your website data. Record the Google account email address.
5. Confirm Google Business Profile Access
Log into business.google.com and verify you can see and edit your business listing. If you don't have a listing yet, note that you'll need to create one. Record the Google account that owns this profile.
✅ Completed the quick version? Move on to Set Up Your Marketing Workspace (Bookmarks Passwords Tools) or continue below for the detailed walkthrough on why these logins are critical and how to recover lost access.
Complete Step-by-Step Guide: Verifying Access and Ownership
Let's walk through each login in detail, explaining why you need it and how to verify proper access. This isn't busywork—each of these systems controls a critical aspect of your online marketing capability.
Step 1: Verify Your Website CMS Access
Your Content Management System (CMS) is where you edit your website content, add pages, update images, and install tracking codes. Without CMS access, you can't implement any of the marketing improvements you'll learn in this Blueprint.
Why this matters: You'll need CMS access to add Google Analytics tracking codes, install SEO plugins, create landing pages, update contact information, and publish new content. Losing this access means paying a developer for simple updates.
How to find it:
Search your email inbox for terms like:
- •"Welcome to [platform name]"
- •"Your new website"
- •"Admin login"
- •The name of your website platform
Common CMS platforms and their typical admin URLs:
- •WordPress: yoursite.com/wp-admin
- •Shopify: yourstore.myshopify.com/admin
- •Wix: manage.wix.com
- •Squarespace: yoursite.squarespace.com/config
If you can't find the original email, check with whoever built your website. If that person is unavailable, you may need to contact your hosting provider's support team—they can often reset CMS passwords if you can prove domain ownership.
What to record:
- •Admin URL (the specific web address where you log in)
- •Username or email address
- •Password
- •Any two-factor authentication details
Test it: Log in now and verify you can access the dashboard. Don't just assume the password works—actually test it.
For more guidance on which website platform you use and its capabilities, see our platform comparison guide.
Step 2: Secure Domain and Hosting Access
Your domain registrar controls your domain name (yoursite.com), while your hosting provider stores your website files. These are sometimes the same company, but often they're separate. You need access to both.
Why this matters:
Domain access is required to:
- •Point your domain to a new hosting provider
- •Set up professional email addresses
- •Verify ownership for Google Business Profile
- •Update DNS records for email authentication
- •Renew your domain before it expires
Hosting access is required to:
- •Access website files and databases
- •Install SSL certificates
- •Create email accounts
- •View server logs and error messages
- •Manage backups
How to find it:
Search your email for:
- •"Invoice" or "receipt" from hosting companies
- •"Domain renewal" or "expiration"
- •"Welcome" from GoDaddy, Namecheap, Hostinger, 123-Reg, Fasthosts, or other providers
- •Your domain name (yoursite.com) as a search term
If you can't find any records, use a WHOIS lookup tool (like who.is) to identify your domain registrar. Enter your domain name, and the results will show which company manages your domain registration.
What to record:
- •Domain registrar name and login URL
- •Hosting provider name and login URL (if different)
- •Username/email for each
- •Password for each
- •Domain expiration date
Test it: Log into both your domain registrar and hosting control panel. Verify you can see your domain settings and hosting account details.
For more context, see our guides on understanding website hosting explained simply and access to your domain registrar.
Verifying domain settings and connecting DNS can be technical. While you are locating your registrar login, remember that NetNav performs continuous monitoring of your DNS and website health, alerting you immediately if critical records go missing—preventing downtime caused by simple login errors.
Step 3: Confirm Analytics and Tracking Access
Google Analytics (specifically GA4, the current version) tracks who visits your website, which pages they view, and what actions they take. Without analytics access, you're marketing blind—unable to measure what's working or identify problems.
Why this matters: Every marketing decision in this Blueprint relies on data. You need analytics access to:
- •See how many people visit your website
- •Identify which marketing channels drive traffic
- •Track conversion goals (contact forms, purchases, phone clicks)
- •Understand user behaviour and identify problems
- •Measure the ROI of your marketing efforts
How to find it:
- Go to analytics.google.com
- Try logging in with your primary business Google account
- If you see your website listed, you have access
- If you don't see your website, try any other Google accounts you use
- If you still can't find it, search your email for "Google Analytics" or "GA4"
Common scenarios:
- •Analytics exists but you don't have access: An old employee, contractor, or agency may own the account. You'll need them to add you as an administrator, or you may need to create a new GA4 property.
- •No analytics installed: You'll need to set up Basic Tracking with GA4 as a future Blueprint step.
- •Old Universal Analytics only: Google retired Universal Analytics in July 2023. You need to set up GA4.
What to record:
- •Google account email that owns Analytics
- •GA4 Property ID (found in Admin settings)
- •Whether you have Admin access (required for making changes)
Test it: Log in and verify you can see the "Reports" section with data from your website. If you see "No data received," your tracking code may not be installed correctly.
Step 4: Claim Your Google Business Profile
Your Google Business Profile (formerly Google My Business) controls how your business appears in Google Search and Google Maps. For local businesses, this is often the first thing potential customers see.
Why this matters: Your GBP listing appears when people search for your business name or relevant local services. You need access to:
- •Update your business hours, phone number, and address
- •Respond to customer reviews
- •Post updates and offers
- •Add photos of your business
- •View insights about how customers find you
- •Verify your business location
How to find it:
- Go to business.google.com
- Log in with your primary business Google account
- If you see your business listed, you have access
- If you don't see your business, search for it on Google Maps
- If a listing exists but you don't have access, you'll need to request ownership
- If no listing exists, you'll need to create one
Common scenarios:
- •Listing exists, you have access: Perfect. Record the login details.
- •Listing exists, someone else owns it: Request access through the "Own this business?" link on the listing, or contact the current owner.
- •No listing exists: You'll create one in a future Blueprint step when you optimise your Google Business Profile.
- •Multiple listings exist: This is a problem. You'll need to consolidate duplicates to avoid confusing customers.
What to record:
- •Google account email that owns the profile
- •Business name as it appears in GBP
- •Verification status (verified or pending)
- •Whether you have Owner access (required for full control)
Test it: Log in and verify you can edit your business information. Try updating your business description or adding a photo to confirm you have proper access.
Step 5: Choose Your Secure Storage Method
Now that you've located all four critical logins, you need a secure, reliable system for storing them. This isn't optional—losing access to these accounts can cost you hundreds of pounds and days of work.
Storage options:
Password Manager (Recommended):
- •Pros: Encrypted, generates strong passwords, syncs across devices, can share access with team members
- •Cons: Monthly cost (usually £3-8), requires learning new software
- •Best for: Businesses with multiple team members or those planning to grow
- •Popular options: 1Password, Bitwarden, LastPass, Dashlane
Secure Spreadsheet:
- •Pros: Free, familiar interface, easy to share
- •Cons: Less secure, no password generation, requires manual updates
- •Best for: Solo operators comfortable with spreadsheets
- •How to secure: Store in encrypted cloud storage (not regular Google Sheets), use a strong master password
Physical Notebook:
- •Pros: Can't be hacked, no technical knowledge required
- •Cons: Can be lost or damaged, difficult to share, no backup
- •Best for: Very small businesses with one owner who prefers paper
- •How to secure: Keep in a locked drawer or safe, create a backup copy
What to record for each system:
Create a consistent format with these fields:
- •System name: (e.g., "Website CMS - WordPress")
- •Login URL: (the exact web address where you log in)
- •Username/Email: (the account identifier)
- •Password: (or note "stored in password manager")
- •Two-factor authentication: (if enabled, note the method)
- •Recovery email/phone: (for password resets)
- •Last verified: (today's date)
- •Notes: (any special instructions or quirks)
Security best practices:
- •Use unique passwords for each system (never reuse passwords)
- •Enable two-factor authentication where available
- •Update passwords every 6-12 months
- •Never share passwords via email or text message
- •Review access quarterly and remove old team members
For more guidance on building your complete toolkit, see our lightweight tools stack guide and advice on deciding on free versus paid tools.
🎉 Completed? You've successfully established the secure foundation needed for the rest of the Blueprint. You're ready for Set Up Your Marketing Workspace (Bookmarks Passwords Tools), where you'll organise these logins into an efficient daily workflow.
Troubleshooting: What If I Can't Find Access?
Still stuck? If you've tried these solutions and still can't access a critical system, you may need professional help. Consider:
- •Contacting the platform's support team directly with proof of ownership
- •Hiring a technical VA to help recover access (usually 1-2 hours of work)
- •In extreme cases, rebuilding the asset (new website, new analytics) may be faster than recovery
What's Next
You've secured the four critical logins that control your online presence. This administrative foundation prevents future roadblocks and enables every subsequent marketing action in the Blueprint.
Your next step: Set Up Your Marketing Workspace (Bookmarks Passwords Tools)
In the next article, you'll organise these logins into an efficient workspace with browser bookmarks, saved passwords, and quick-access tools. This transforms your scattered logins into a streamlined marketing command centre.
Go deeper:
- •The Ultimate Small Business Website Audit Guide (Action Checklist) – For a complete checklist of everything needed to assess an existing website's health, see the Ultimate Website Audit Guide.
- •The Complete Blueprint Checklist – Review the full list of actions you will take in the Blueprint sequence.
Other Start Here Guides
- •How This Blueprint Works (Without Overwhelm)
- •Pick Your Level: Beginner, Confident, or Advanced
- •How Much Time and Money Will I Need?
- •Block Marketing Time in Your Calendar
- •DIY vs Hiring: What Can You Really Do Yourself?
- •Micro Business Marketing Glossary
You've successfully secured the critical access keys required for digital marketing execution. Now that your foundational tools are sorted, NetNav can audit the health of those tools, scoring your full website across 9 pillars in 60 seconds—see what else needs immediate attention before you start building.