Never share your own password. Instead, open the Users tab of the server and click New User. Enter your friend's e-mail address and tick the permissions they should have. They receive an e-mail to set their own panel password and see only this server.
Sensible permission sets
- Moderator: Control → Console, Start, Restart, Stop. Enough to reboot the server and run commands.
- Co-admin: everything above plus Files (read, update, create, delete), Backups (create, restore, download) and Schedules.
- Builder who uploads worlds: Files only, plus Control → Console if they need to run a command afterwards.
Do not hand out Users (they could add more people), Settings → Reinstall or Startup unless you fully trust the person. Those can wipe or break the server.
Subusers see the one-click installer and the Kowalski bubble too, but Kowalski only acts within their permissions.
Sharing the server on the website
Billing (days, upgrades, deletion) stays with the account that bought the server. There is no way to transfer a server to another account yet; write a ticket if you need that.