WhatsApp Business Manager: What It Is, How to Create It, and Why It Is Your Most Important Asset
The ownership layer of your Meta assets—and how to shield it against the errors that bring down entire operations.
Every week I see the same scene repeat itself: a serious company, generating good revenue, with their entire WhatsApp operation hanging on a Business Manager set up haphazardly. Wrong name, personal email of a former employee, password shared with half a dozen people. It's like building a skyscraper on a foundation of sand — it works, until the day it doesn't anymore.
I operate more than two million conversation windows per day on WhatsApp and, as an official Meta partner, I've seen companies lose everything overnight because of a detail that nobody treated as important. That's why I need to tell you, bluntly: your Business Manager is not a boring technical setting. It is one of your company's most valuable assets — as important as your tax ID.
In this article, I dive deep into everything I explained in the video: what a Business Manager is, how to create yours the right way, how to verify the company, how to shield access, and how to activate a WhatsApp number securely. This is the content from the recording, broken down with the details that didn't fit on the screen.
What is a Business Manager (without the legalese)
Think of the Business Manager as your company's control center within Meta. It is the vault where all your digital assets are stored: your Facebook Page, your Instagram profile, your ad account, your pixel, your product catalog, and — what matters most for those who live off WhatsApp — your WhatsApp Business account, known as the WABA.
All of this lives inside the BM.
And here is the concept that changes everything, the one that separates those who understand from those who just use: the Business Manager is the ownership layer. It is what tells Meta who the owner of each of these assets is. People are not the owners. The company is the owner, through the BM, and it grants access to people.
You don't give your assets to people. You give access. They are completely different things.
Remember this sentence, because it is the source of most of the disasters I see — and most of the solutions.
slug: business-manager-meta-business-suite-is-it-all-the-same
Business Manager, Gerenciador de Negócios, Meta Business Suite: is it all the same thing?
It is a common confusion that even gets in the way when looking for help: Meta changes the names of these screens frequently. You will find "Business Manager," "Gerenciador de Negócios," "Business Settings," and "Meta Business Suite" out there. In practice, they all revolve around the same structure: the place where your company manages its assets, people, and permissions within Meta.
The Meta Business Suite is the newer, simplified interface aimed at day-to-day operations (posts, messages, ads). Business Settings (the old Business Manager) is the deeper layer where you manage ownership, users, partners, and verification. For what matters in this article — security and control — it is in this deeper layer that you will work.
Why the Business Manager is your most important asset
Do an exercise with me. What are a company's digital assets today? The Tax ID (CNPJ). The website and domain. The Google Business Profile. The WhatsApp number. Social media accounts.
The Business Manager is what binds most of this together in one place. It is, in practice, your company's Tax ID inside Meta.
And what happens if you lose access to it? You don't lose "an account." You lose everything inside it at once: the WhatsApp number with the entire history and reputation that took years to build, the ad accounts, the catalogs, the pixel with years of data. Everything gone, on the same day.
I have seen high-revenue companies lose their entire operation because the Business Manager was in the name of a former employee. Or because the only administrator was the nephew who created the Facebook account back in 2015 and no one else had access. This is not an exception — it is routine in my work at Pericoco Martech.
The Business Manager is not a configuration. It is an asset. And we protect our assets.
slug: how-to-create-a-business-manager-the-right-way
How to create a Business Manager the right way
Creating a BM is easy. Doing it right is what’s rare. You visit the Meta creation address (business.facebook.com/create) and click on create account. Simple. But it is exactly here where the three errors that will haunt you later are born.
Error 1 — the name. Use the company's official name, the same as your legal business name, linked to your tax ID. No "John's Shop," no personal names, no nicknames. Why? Because this information needs to match everything else. Identity inconsistency is one of the main causes of number blocking — and it starts right here, with the BM name.
Error 2 — the email. Use a corporate email from the company’s domain (something like contact@yourcompany.com). Never use an employee's personal Gmail. The day that person leaves, forgets the password, or departs on bad terms, your BM goes with their email.
Error 3 — relying on just one person. The BM is born linked to a personal Facebook profile — and it must be a real and trustworthy profile, preferably belonging to a partner or the owner. But don't stop there: add at least two administrators. If your company has only one administrator and something happens to that profile, you are locked out of your own assets.
Verifying the business: the step almost no one takes
Created the BM? The next step is what almost no one does — and it is precisely what shields your operation: verifying the business.
Verifying the business means proving to Meta that your business actually exists. The path is usually Business Settings → Security Center → Start verification. Meta will request documents: your tax ID card, the articles of incorporation (social contract), and a proof of address.
Why does this matter so much? For three reasons:
- Trust. A verified company is a company that Meta treats as serious, and this carries weight in your favor during any review.
- Resources. Verification unlocks higher sending limits and the full use of the official WhatsApp API.
- Compliance. When your tax ID, your domain, and your company name are verified and match the name that appears on your WhatsApp, you close the door on bans caused by identity inconsistency.
Take the opportunity to also verify your domain within the BM. It’s fast and closes yet another security loophole.
A verified company is a shielded company.
slug: access-and-security-the-heart-of-everything
Access and security: the heart of everything
If you remember only one part of this article, let it be this one.
Never, under any circumstances, share the login and password of your BM or your Facebook with anyone. Not with an employee, not with an agency, not even with the friend who "knows marketing."
The analogy of the deed and the key
Your Business Manager is the deed to your house. When you hire someone to work inside it, you don't hand over the deed. You give them a key — and a key that opens only the rooms they need.
In the BM, it works exactly the same way. You add the person as a user and grant them the minimum necessary permission. Sharing a password is handing over the deed; adding them as a user with permission is giving them the right key. One is a loss of control; the other is management.
Roles and access levels: who sees what
| Profile | What they usually access | Rule of thumb |
|---|---|---|
| Administrator | Full control: assets, people, billing, settings | Only you and, at most, a partner. No one else. |
| Employee / partial access | Only the specific assets you release | Give the minimum: whoever responds to messages accesses only WhatsApp; whoever manages traffic accesses only the ads |
| Partner (agency / BSP) | The assets you release, for the duration of the contract | Add as a partner, never as an admin using your password |
| Finance | Payment methods and billing | Separate this from those operating content |
The principle is always the same: minimum sufficient access. No one needs more than what is necessary to do their job.
The right way to grant access to an agency
The agency, the BSP, the partner who will operate for you has a correct path — and it isn't by sharing a password. You add their company as a partner: their Business Manager connects to yours, they operate only the assets you have released for the duration of the contract, and on the day you part ways, you remove the access with a single click. No drama, no blackmail, no losing anything.
Want to see the damage of doing it wrong? The classic case: the company passed the login and password to the intern to operate. One day, the intern does something foolish on their personal profile, and that profile is banned. Since that profile was the administrator of the BM, the entire company is dragged down with it. Operation halted because of a shared password.
2FA is the extra lock
Activate two-factor authentication (2FA) on all important accesses. It is the extra lock that prevents a simple password leak from turning into a hijacking of your account. It is the cheapest and most underestimated step in your BM security.
slug: how-to-activate-whatsapp-number-in-business-manager
How to activate a WhatsApp number in your BM
With the BM created, verified, and secure, you can then activate your WhatsApp number the professional way.
Inside the BM, you create the WhatsApp Business Account (the WABA) and add your number. One detail that trips many people up: this number cannot be active on a standard WhatsApp app nor on the WhatsApp Business mobile app — it must be free to enter the official API. You verify the number via a code and define the display name, which is how your company will appear to the customer.
This display name goes through an approval process and — once again — must be consistent with your brand. Everything must communicate: BM, CNPJ (tax ID), domain, display name. When everything matches, Meta trusts it. When there is a piece out of place, it triggers an alert.
In practice, you establish this connection between the number and the official API alongside an official Meta partner (BSP) — this is the safest path and the one that unlocks the professional use of the channel.
The most common errors (and how to avoid them)
| Error | Consequence | The Right Way |
|---|---|---|
| BM in a personal name or nickname | Identity inconsistency, risk of blocking | Official company name, linked to the CNPJ |
| Employee's personal email | You lose the BM when the person leaves | Corporate email from the domain |
| A single administrator | You get locked out if something happens | At least two trusted admins |
| Sharing login and password | Loss of control and risk of hijacking | Add users and partners with specific permissions |
| Not verifying the business | Low limits and more exposure to banning | Verify CNPJ, domain, and data |
| Number activated outside the BM | Fragile operation, lacking official features | Activate the WABA inside the BM, via BSP |
Your Business Manager security checklist
- Is my BM using the official company name (matching the CNPJ)?
- Is the primary email corporate, not personal?
- Do I have at least two trusted administrators?
- Is the company verified (CNPJ, social contract, proof of address)?
- Is my domain verified inside the BM?
- Is anyone operating with shared logins and passwords?
- Does each person have only the minimum necessary access?
- Does my agency enter as a partner, not as an admin?
- Is 2FA active on important access points?
- Is my WhatsApp number inside the BM, with a consistent display name?
slug: how-to-protect-your-whatsapp-business-manager
Conclusion
Your Business Manager is an asset, not a configuration. Create it using the official company name and a corporate email address. Have more than one administrator. Verify both the company and the domain. Grant access — never give away your password. Use partner mode for your agency. Enable 2FA. Only then should you connect your number, ensuring everything is consistent.
By doing this, you don't just avoid bans — you build a solid foundation, an asset that truly adds value to your company.
If this content helped you, watch the full video above. In the next step of the series, I’ll take you inside the dashboard and show you, on screen, where to monitor the health of your number on a daily basis.
On WhatsApp, conversations convert, and numbers survive.
Want to structure and operate your WhatsApp at scale with security? Talk to Hablla or learn more on my YouTube channel.
Integrated Conversational Marketing, every day
New videos, behind-the-scenes and provocations on MCI. Subscribe and turn on the bell — never miss a drop.
Subscribe on YouTubeConversational intelligence in your inbox
Analyses on MCI for CEOs, CROs, CMOs and CFOs. No noise.
Related videos
More about WhatsApp Business
18:10WhatsApp BusinessWhatsApp Username and BSUID: The Definitive Guide (Usernames, Privacy, and the End of Cold Prospecting)
The biggest game-changer for WhatsApp since its launch—and why cold prospecting is over.
July 10, 2026
8:41WhatsApp BusinessWhatsApp Business Number Health: How to Monitor Quality, Status, and Limits (2026 Guide)
Conversations that convert, numbers that survive.
July 10, 2026
12:24WhatsApp BusinessWhy WhatsApp Business is Banned: The 3 Signs Before the Block (and How to Avoid It)
WhatsApp banning almost never happens "out of nowhere." Check out the 3 signs Meta gives before a block — quality rating, status, and messaging limits — and how to protect your number.
June 20, 2026