Access Ownership
The handoff should name who owns WordPress administrator access, hosting, DNS, email, analytics, payment providers, forms, and plugin licenses. Avoid shared passwords; if emergency access remains, document why it exists and when it will be reviewed.