How to give temporary WordPress access safely

Only after a written request

Use this only after the scope is agreed, the invoice is paid and I have confirmed that access is needed. Do not send your own administrator password, recovery code or screenshots of the Users page.

1. Log in to your WordPress dashboard yourself.
2. Open Users → Add New and create the separate temporary account whose email address I provide after the scope is agreed.
3. Choose the least privileged role that enables the agreed work. Administrator is not the default.
4. After handover, remove the temporary account or remove its access.