How to Create a Cloudflare Account and Invite Your Agency

Cloudflare sits in front of your website and handles your DNS, security, and speed. When you bring in an agency to build or look after your site, they need to get in there. The wrong way is to email them your username and password. The right way takes a couple of minutes, keeps your login yours, and lets you pull their access the day the work ends.

Step 1: Create Your Cloudflare Account

1. Go to dash.cloudflare.com/signup.
2. Enter your email address and a strong password.
3. Click Sign Up.
4. Open the verification email from Cloudflare and click the link to confirm the address.

Use a business email you’ll still have continued access to, ideally one on your own domain or a shared admin inbox. Don’t sign up with personal emails where possible.

Step 2: Turn On Two-Factor Authentication

Your Cloudflare account controls your DNS. If someone gets into it, they can point your domain and email wherever they like. Lock it down before you do anything else.

1. Click your profile icon (top right) and go to My Profile > Authentication.
2. Under Two-Factor Authentication, click Add and follow the prompts to link an authenticator app.
3. Save your backup codes somewhere safe, like a password manager.

Step 3: Add Your Website

Inviting someone only makes sense once there’s a site in the account for them to manage. If your agency is handling the DNS migration, they may do this part for you, so check first.

1. From the dashboard, click Add a site.
2. Enter your domain (e.g. yourbusiness.com.au) and click Continue.
3. Pick a plan. The Free plan covers what most small business sites need.
4. Follow the steps to review your DNS records and update your nameservers.

Changing nameservers can take a few hours to propagate. This is the part agencies usually want to be involved in, so coordinate the timing rather than doing it solo.

Step 4: Invite Your Agency

Now the important bit. Instead of sharing your login, you add your agency as a member.

1. Log in to the Cloudflare Dashboard.
2. Select the account you want to give access to.
3. In the left sidebar, go to Manage Account > Members.
4. Click the blue Invite button.
5. Enter your agency’s email address.
6. Set the Scope: all domains in the account, or one specific website.
7. Assign a Role (see the note below on which one to pick).
8. Click Continue to summary, check the details, then click Invite.

Which Role to Pick

This is where people either lock their agency out of what they need, or hand over the keys to everything. Three options worth knowing:

• Administrator: can manage the site, DNS, caching, and security settings, but can’t touch billing or add other members. This is the right call for most agency relationships.
• Super Administrator: full control, including billing and the ability to add or remove members. Only choose this if you genuinely want them running the whole account.
• Scoped roles (like DNS or Cache): narrow access for when you only want them touching one specific area.

If you’re not sure, go with Administrator. It’s enough to do the job and stops short of letting anyone change your billing or add their own people.

Step 5: What Your Agency Does Next

Once you’ve sent the invite, the ball’s in their court.

1. They’ll get an automated email from Cloudflare.
2. They click the link in that email to accept.
3. If they don’t already have a Cloudflare account, they’ll be prompted to create one.
4. After they accept and verify, your site shows up in their dashboard with the access level you set.

If the invite doesn’t land, check their spam folder first, then confirm you typed the email correctly. You can resend it from the same Members page.

Removing Access Later

When a project wraps or you change agencies, take the access back. It’s the same page.

1. Go to Manage Account > Members.
2. Find the member you want to remove.
3. Click the menu next to their name and select Remove.

Do this as part of offboarding. Old access sitting around is one of the easiest security holes to close, and most businesses forget it exists.

Need Help?

DNS migrations, Cloudflare setup, and account access are the kind of thing we handle as part of our website management service. Get in touch if you’d rather we take care of it.