Who Can Get Into Your Amazon Account

I run my whole Amazon account through software now, so one afternoon I went looking for everyone who could get into it. I have sold here for years, and one of these five pages I had never opened. Not once.

It is not one list. There are five separate doors, each with its own list, and pulling someone off one does nothing to the other four. Here is every door, the link to check it, and what each person or tool can actually do once they are inside. Fifteen minutes, start to finish.

Lock it down first

1. Turn on two-step verification. It is the one thing that stops a stranger cold, and Amazon makes you use it to sign in anyway.
2. Stop sharing your login. Every person gets their own invite, every agency gets an Authorized Partner invite. A shared password is the only access that shows up on none of these lists, and it can move your bank deposit.
3. Open every door below and remove anything you do not recognize or stopped using.
4. Check the Login with Amazon page on every account that can grant access: your seller login, your personal shopping account, and every employee login. Each one can connect software on its own.
5. Put it on the calendar every quarter (right next to your tax reminder, so it actually happens). Access piles up when you are not looking.

The doors

1. Connected apps. The software you authorized: repricers, accounting, listing and inventory tools.
   https://sellercentral.amazon.com/apps/manage
   Kill anything you do not use right now, including dead free trials.
2. Invited people and agencies. VAs, employees, partners, agencies.
   https://sellercentral.amazon.com/account/permissions
   Drop anyone who is gone, and cut permissions bigger than the job. Agencies go on the Authorized Partners tab on that same page, not in as regular users.
3. Amazon Ads access. Its own list, its own people, its own connected tools. Someone you cut from Seller Central can still be in here spending your ad money.
   https://advertising.amazon.com/campaign-manager/all-campaigns
   Then click the Administration cog at the bottom left, then Account access and settings.
4. Brand Registry. Trademark, A+ content, and Store access.
   https://brandregistry.amazon.com/brg/user-permissions
5. Login with Amazon. The page that catches every tool you ever connected with the "Login with Amazon" button. Old PPC software and Alexa devices sit here for years, out of sight.
   https://www.amazon.com/ap/adam
   Remove what you do not recognize, and check it on every Amazon login you own.

The access that grants more than it sounds like

These labels say what they do. A few grant more than the name lets on, and these are the ones to look at twice:

• Product Listing edits your photos and titles, and can delete the listing entirely.
• Order access shows your customers' names and addresses, and can issue refunds.
• Admin, or the one-click "Universal" access, lets that person add and remove other users. That is a second owner, not a helper.
• Any "Restricted" role, and the tax tools, can see your customers' names and addresses.
• An Ads "Editor" can spend your entire ad budget.
• "Finance and Accounting" is the opposite. It sounds like money access, but it only reads and reports. The role that moves money is "Payment Initiation."

Red flags

• Anyone who asks for your actual email and password instead of sending an invite. This is the big one. NEVER hand over your login.
• An app or a name you do not recognize, or one tied to something you stopped using.
• A connected app holding a "Restricted" customer-data role with no reason to need it.
• A helper set to Admin or Universal for a job that needs a sliver of that.
• The Login with Amazon page full of old tools and devices.
• Two-step verification still off.
• You ever shared your password. Assume it is still out there. Change it and turn on two-step today.

Two things to know

• Removing access stops new access. It does not pull back data a tool already took.
• A shared password leaves no trace. None of these lists will show it. That is why you never share it.

Fifteen minutes, four times a year. That is the whole job, and it guards the one account everything you have built sits inside.

Note: these links are for Amazon US. If you sell on another marketplace, use your country's Seller Central and Brand Registry. The Login with Amazon page is the same everywhere.