Give them access, not your password
Invite a developer, an agency, your accountant or a security reviewer. Each signs in as themselves, and you decide which hosting accounts they reach, which features they use, and whether they can change anything or only look.
14 days free. No credit card. No commitment.
Their own login
Never your password
No renewal trap
Renews at the regular price
99.99%
Uptime, last 12 mo
Daily
Backups kept up to 30 days
210+
Tasks Ellie handles
Two kinds of access
Everything, or exactly what they need
Full access is delegate access as it has always worked. Custom access is where you decide, feature by feature, what each person can do.
Full access
Every hosting account and every site you have, with the right to change anything in them. Right for a partner who runs the whole thing with you.
Your invoices, payment methods and audit log are not part of it. Even with full access, a delegate sees their own billing pages, never yours.
Custom access
Pick the hosting accounts - all of them, including ones you add later, or only the ones you tick. Then set each feature to none, view or edit, starting from a preset or from nothing. Your invoices, payment methods and audit log can be added, view only.
- Per hosting account
- None, view or edit
- Five presets
- Invoices only, if you like
- Changes apply at once
- Ellie follows it too
What you can share
Every feature, set to none, view or edit
These are the switches on the access screen, grouped the same way. Anything you leave at none is refused, and a feature we add later follows the default you picked for the rest.
On your sites and domains
- Websites and domains
- DNS
- SSL certificates
- Security and firewall
- Caching and PHP
- WordPress and apps
- Deployments
- Monitoring and logs
Across a whole hosting account
- File manager
- Databases
- FTP users
- SSH keys
- Terminal - on or off
- Cron jobs
- Backups
- Restoring backups
- Site migrations
From your own account, view only
- Billing and invoices
- Payment methods
- Audit log
Your data, not the hosting. It is never implied by anything else - not by a view-everything default, not by full access. You tick it or it stays yours.
Why files and databases cover the whole account
Starting points
Five presets, and full access
A preset fills in the form. Change any box and it becomes your own custom access - the name never claims more than the boxes say. Not sure yet what someone needs? Would it be a bad idea to start them on Read-only and add edit where they ask for it? A change applies on their next click.
Full access
Everything in every hosting account, able to change anything. Delegate access as it always worked - for a partner who runs the whole thing with you.
Website manager
Edit sites, DNS, SSL, security, caching and PHP, WordPress and monitoring. No files, databases, terminal, email or backups.
Developer
Edit every hosting feature except two: email, because mailboxes hold people's private mail, and restoring backups, because a restore overwrites the live site. Tick either back on if they need it.
Accountant
Your invoices, receipts and subscriptions, view only, and no hosting accounts at all. Payment methods stay off unless you add them.
Security auditor
View every hosting feature across all your accounts, plus your audit log. Nothing can be changed, and no secret is shown.
Read-only
View every hosting feature and change nothing. Handy for a client who wants to see what is going on without the risk of pressing the wrong button.
How it works
From invite to revoke
Nobody shares a password at any point, which is the whole idea.
Invite them by email
From Delegate access in your panel. If they do not have a Hostney login yet, the invitation waits for them and carries the access you chose.
Choose full or custom
For custom, start from a preset or from nothing, pick the hosting accounts, and set each feature to none, view or edit.
They accept and switch in
They sign in as themselves and switch into your account from their own. Their password, their two-factor, their session - never yours.
Change it whenever you like
Edit access on their entry. The new access applies on their next click, not after they sign out and back in.
Revoke in one click
Their very next request is refused, and from then on they are back in their own account. Your credentials never change, because they never had them.
For agencies and freelancers
The client owns the account and pays for it directly. You work inside it with your own login, limited to what the job needs, and your changes show up in their audit log as yours. When the engagement ends, they revoke you and nothing has to move.
One login, many clients
Everyone who invites you shows up in your own panel, and you switch between their accounts from there. Each client decides separately what you can do.
The details
What makes view only mean view only
Access control is easy to describe and easy to get subtly wrong. These are the decisions that keep it honest.
View never hands out a secret
Private SSH and TLS keys, environment variables, backup download links and access tokens all need edit access. A view-only delegate can look at the configuration without walking off with it.
Browsing a backup is not restoring one
Restoring backups is its own switch, because a restore overwrites a live site. Someone can check what a backup contains without being able to roll anything back.
The terminal is on or off
There is no watching a shell without typing into it, so the terminal has no view level. It is separate from SSH keys, so managing keys does not hand over a shell, and a shell does not come with key management.
Cards and invoices are separate
Payment methods show masked cards and your full billing address, which an accountant rarely needs. They are their own switch, and the accountant preset leaves them off.
Every change has their name on it
What a delegate changes lands in your audit log under their name, not yours. When something moved, the log says who moved it.
Outside their access means refused
Every request is checked on our side against the access you gave, and anything outside it is refused with a message saying so. It does not depend on a button being hidden.
Ellie follows the same access
Good to know
Where the edges are today
Everything above works now. These are the limits, stated plainly so they are not a surprise.
The smallest unit is a hosting account
Custom access is scoped per hosting account. A single site inside an account that hosts several cannot be singled out yet - which is one more reason to give each client their own account.
What they create stays behind
FTP users, SSH keys, database users and mailbox app passwords a delegate creates belong to your account, and they outlive the access. When you revoke someone, remove those too. The access screen reminds you.
Some of your data is not shareable yet
Support tickets and domain registrations cannot be shared yet. The access screen lists them as coming later.
What it sits next to
Access is one layer of the account
Delegate access decides who gets in and what they can touch. These decide what happens around it.
The audit log
Every create, update and delete, with who did it and the value before and after. Delegates, Ellie and you, in one place.
One-click WordPress login
A delegate with edit access to WordPress reaches wp-admin from the panel without anyone sharing a WordPress password.
Passkeys and two-factor
Each delegate secures their own login. Their sign-in protects their access; yours protects yours.
In their words
What people say about hosting with us
“As a non-technical user who has had to stand up many web pages for projects [...] I was very pleasantly surprised with Hostney. The AI assistant Ellie was a tremendous help.”
“Hostney has been a great experience from the start. Anytime something comes up they're on it fast, no waiting around or getting bounced between support reps.”
“Amazing service! Company went above and beyond to help us get set up and functioning.”
“I host multiple websites with Hostney and the ease of management is what does it for me.”
“Hostney feels like the future. The entire process of setting up hosting was seamless, painless and quick.”
“Excellent, reliable service at reasonable prices.”
Pricing
Simple, transparent pricing
Every plan includes managed WordPress, SSH access, daily backups, and enterprise-grade security. Start with a 14-day free trial.
Black Friday30% off up to 3 years with code BLACKFRIDAY30Ends Cyber Monday, November 30
Startup
Great for growing businesses
$7.89
$66.29 a year for up to 3 years, then $94.70/yr
- 1 website
- 10 GB storage
- ~10,000 visits/month: Approximate maximum monthly visits when all hosted sites use our built-in Nginx and Memcached caching
- 5 MySQL databases
- 250,000 inodes: Files, folders, etc.
- 5 FTP users
What's included:
SSL & Domain
- Free SSL certificate
- Free starter domain: A free Hostney address that goes live with your account, so you can build straight away and connect your own domain whenever you are ready
- 2 mailboxes: Shared across every domain on the account rather than counted per domain. Aliases are unlimited and free; a shared mailbox is a real mailbox, so each one uses a slot.
- 3 GB per mailbox: Storage for each mailbox, separate from your account storage.
- Webmail, IMAP and SMTP: Webmail in the browser at mail.hostney.com, plus IMAP and SMTP for Apple Mail, Outlook or any standard mail app. Two-step verification and per-device app passwords are included.
Advanced
For professional websites
$14.97
$125.79 a year for up to 3 years, then $179.70/yr
- 5 websites
- 20 GB storage
- ~110,000 visits/month: Approximate maximum monthly visits when all hosted sites use our built-in Nginx and Memcached caching
- 10 MySQL databases
- 500,000 inodes: Files, folders, etc.
- 10 FTP users
Everything in Startup, plus:
- 5 mailboxes: Shared across every domain on the account rather than counted per domain. Aliases are unlimited and free; a shared mailbox is a real mailbox, so each one uses a slot.
- 5 GB per mailbox: Storage for each mailbox, separate from your account storage.
Backups
- 14 days of backup history: How far back you can restore, download, or browse a backup on this plan. Older snapshots stay stored - upgrading unlocks them.
Performance
- Memcached object cache: In-memory object caching for database queries and sessions, with a cache browser in the panel. Memcached and Redis are the two engines available - an account runs one at a time and can switch between them.
- Redis object cache: Redis object caching with per-key expiry, LRU eviction, and a key browser in the panel. Redis runs instead of Memcached rather than alongside it, so switching engines is one click and the cache rebuilds itself on the next requests.
Pro
Maximum performance and features
$22.89
$192.29 a year for up to 3 years, then $274.70/yr
- 10 websites
- 40 GB storage
- ~200,000 visits/month: Approximate maximum monthly visits when all hosted sites use our built-in Nginx and Memcached caching
- 20 MySQL databases
- 750,000 inodes: Files, folders, etc.
- 20 FTP users
Everything in Advanced, plus:
- 10 mailboxes: Shared across every domain on the account rather than counted per domain. Aliases are unlimited and free; a shared mailbox is a real mailbox, so each one uses a slot.
- 10 GB per mailbox: Storage for each mailbox, separate from your account storage.
Deployment
- 2 SSR applications: Run server-rendered Node.js, Python, or Ruby apps in their own container - Next.js, Nuxt, Django, Rails, and more
Backups
- 30 days of backup history: How far back you can restore, download, or browse a backup on this plan - the full window we keep backups for.
Monitoring
- 1 minute between checks: How often we request the page. Two consecutive failures open an incident and a single success closes it, so you hear within roughly twice this interval.
For new customers on annual plans. Enter the code at checkout, or when you upgrade a free trial before the sale ends. The 30% comes off every year you pay for up front, 1 to 3 years; after that, renewals are at the plan's regular price. Ends 11:59 p.m. Eastern on Monday, November 30.
On every plan
Stop sharing the password
Delegate access is part of every plan, including the trial. Invite someone, choose what they can do, and take it back whenever you like.
Questions