How Agencies Should Onboard Client Instagram Accounts for DM Automation (Without Passwords)

By the end of this guide, you'll know the right way for agencies to connect and manage client Instagram accounts for DM automation — without ever asking a client to hand over their password.

The Password Problem Every Agency Runs Into

At some point, almost every agency offering Instagram automation hits the same awkward moment: how do you actually get access to a client's account to set up their automation? Asking for a password feels unprofessional and puts both sides at risk — clients are (rightly) wary of handing over full account access, and agencies don't want to be liable for a client's account if something goes wrong on their end. It's a trust problem disguised as a technical one, and it can stall an otherwise easy sale.

Why Password Sharing Was Never a Good Solution

Even when clients agree to it, sharing a password directly creates real problems:

• It violates Instagram's own terms around account security and credential sharing.
• It's an all-or-nothing risk. A shared password gives full account access — DMs, followers, posting, everything — when all the agency actually needs is permission to manage comments and messages.
• It creates an audit nightmare. If something changes on the account, there's no clean way to tell whether it was the client, the agency, or someone else with access.
• It doesn't scale. An agency managing ten client accounts with shared passwords is juggling ten sets of credentials, none of which should exist in a spreadsheet or shared doc in the first place.

The Right Way: Official API Access, Not Passwords

Modern Instagram automation tools — Maedix included — connect through Meta's official Instagram Graph API using OAuth, the same secure permission system used when you "Log in with Google" or "Log in with Facebook" on other websites. The client authorizes the connection directly through Meta's own login flow, grants only the specific permissions automation needs (managing comments and messages), and never types a password into any third-party form. The agency gets exactly the access required to run automations — nothing more — and the client can revoke that access at any time from their own Instagram settings, without needing to change their password or involve the agency at all.

This is also what keeps the account itself safe from a compliance standpoint — a topic we cover in more depth in our guide on whether Instagram DM automation is safe.

What the Client Onboarding Flow Actually Looks Like

For an agency setting up a new client, the process is short:

• Connect the account. The client (or the agency, if given temporary screen access) clicks connect, logs into Instagram directly through Meta's own screen, and authorizes the permissions — takes about 30 seconds, no password ever shared with the agency.
• Build the flow. The agency sets up keyword triggers, DM sequences, and buttons tailored to that specific client's offer, using the same dashboard used for every other connected account.
• Keep it separate. Each client's automation, leads, and reporting stay isolated to their account — the same setup covered in our guide on managing multiple Instagram accounts from one dashboard.
• Report monthly. Pull leads and performance data per client for reporting, as covered in our guide on turning automation into recurring agency revenue.

Why This Matters for Closing Client Deals

Being able to say "we never ask for your password, we connect through Instagram's own official login" is a genuine selling point in an agency pitch. It removes the single biggest objection prospective clients raise when automation comes up, and it signals that the agency takes account security seriously — which matters more to a business client than almost any feature list.

Getting Started

If you're currently onboarding clients by asking for credentials, or avoiding offering automation altogether because that conversation feels awkward, switching to OAuth-based account connection solves it immediately. You can start with a free Maedix account to test the connection flow yourself before rolling it out to clients, and check the pricing plans to see what tier fits the number of client accounts you're planning to manage.