← back to blog

Documenting your fleet so a teammate can take over tomorrow

The test that matters

Here’s a test I run on my own operation every few months: if I disappeared for a week, could someone else open the laptop, find the right files, and keep every account running without guessing? Right now, for most operators I talk to, the answer is no. The knowledge lives in their head, in a browser’s saved passwords, in a Telegram chat they’d have to scroll through for twenty minutes to reconstruct what proxy goes with which profile.

That’s fine when you’re a one-person operation and nothing ever goes wrong. It stops being fine the moment you get sick, hire help, or want to sell the operation, hand off a client account, or just take a weekend off without a platform ban going unnoticed for four days because nobody checked the dashboard. Account fleet documentation isn’t busywork. It’s the difference between an operation that’s actually a system and one that’s just you, personally, doing a lot of manual labor that happens to look organized from the outside.

What actually needs to be written down

A fleet isn’t just a list of usernames and passwords. Every account in a serious setup carries a stack of dependencies that have to stay matched to each other: a browser profile with its own fingerprint, a proxy assigned to that profile (and only that profile), a device or cloud phone if you’re running mobile-native, and a warm-up history that determines what the account is allowed to do today versus what it could do a month from now.

If any one of those pieces gets separated from the account, and reattached wrong, you’re not just risking a ban. You’re risking a flag that quietly throttles the account without telling you, which is worse, because you keep operating it thinking it’s healthy.

So the documentation has to answer, for every single account, at minimum:

  • Which browser profile and fingerprint configuration is this account bound to, and has that fingerprint ever been reused elsewhere
  • Which proxy, specifically, is assigned (not “a Singapore residential proxy” but the exact IP or session ID, and whether it’s static or rotating)
  • If it’s a cloud phone or physical device, which one, and what else runs on that same device
  • What stage of warm-up the account is in and what actions are currently allowed
  • Any warnings, verification prompts, or restrictions the account has already hit

None of this is exotic. It’s the kind of record-keeping that any operations team in any industry would recognize. The reason account operators skip it is that in the early stage, when you have five or ten accounts, you don’t need it. Your memory is the documentation. The problem is that this stops scaling around account fifteen or twenty, and by then most people have already built bad habits.

Why proxy-to-account pairing has to be explicit

This is the piece people cut corners on most often, and it’s the one with the highest cost when it breaks. Every account should be bound to one proxy, consistently, for its entire lifecycle. That’s not a suggestion about being tidy, it’s how residential and mobile proxies actually prevent correlation. A platform’s detection systems build a picture of an account over time: the IP ranges it logs in from, the ASN, the general geographic consistency, the session behavior. If two accounts share an exit IP, or one account bounces between IPs that don’t share a consistent carrier or region history, that’s a signal, not a guarantee of a ban, but a data point that gets weighed alongside everything else.

Mobile proxies add a wrinkle worth documenting specifically: carrier-grade NAT means many real mobile users legitimately share IPs, so mobile proxy reuse doesn’t carry the same weight as datacenter or even residential IP reuse. But your documentation still needs to record whether a proxy is a dedicated session or a shared pool, because that changes how you reason about risk when something looks off with an account.

If this pairing lives only in your head, or worse, gets reassigned casually because “the old proxy was slow,” you’ve broken a chain that took weeks to build and can’t be un-broken. Write the pairing down as a fact, not a preference, and change it only with the same care you’d use to move house keys between accounts.

Warm-up state is a moving target, so timestamp it

Warm-up isn’t a switch you flip once. It’s a gradient: an account two days old should not be attempting the same volume or type of activity as one that’s been active and behaviorally normal for six weeks. If a teammate picks up an account and doesn’t know where it sits on that gradient, the two most likely mistakes are pushing it too hard, too soon, or leaving it idle so long the warm-up investment goes stale.

The fix is boring: log the start date, log every stage transition, and log the date of the last meaningful activity. A spreadsheet row with “warm-up started 2026-06-02, stage 2 reached 2026-06-14, last active 2026-07-27” tells a teammate everything they need to make a judgment call without asking you. Without it, they’re guessing, and guessing is exactly what creates the inconsistent behavior patterns that detection systems are built to notice.

Fingerprint notes: what’s unique, what’s shared, what’s forbidden

Antidetect browsers work by presenting a consistent, plausible device and browser fingerprint per profile, canvas signature, WebGL output, font list, timezone, screen resolution, and dozens of smaller signals, held stable across sessions for that one account. The documentation gap here is usually about what’s been reused. If two profiles were cloned from the same template and nobody tracked that, you now have two accounts that look suspiciously identical on dimensions that shouldn’t be identical. Note the profile template each account was built from, and treat “never reuse a fingerprint across accounts that need to look unrelated” as a rule you write down, not one you trust yourself to remember six months in.

The handoff document itself

In practice this works best as a single row per account in a shared, access-controlled sheet or lightweight internal tool, not a wiki page full of prose nobody keeps current. Columns for platform, account identifier, browser profile ID, assigned proxy, device (if applicable), warm-up stage, last activity date, and a free-text notes field for anything unusual, a verification prompt that came up, a support ticket that’s open, a restriction that’s temporary. Update it as part of the workflow, not as a separate chore you do at the end of the week from memory, because that version will always be wrong.

Pair that with a short standing-instructions doc: what to do if an account gets a verification prompt, who to notify if something looks flagged, and what the escalation path is if a proxy drops mid-session. That document is what actually lets someone else take over tomorrow, not just look at your accounts, but know what to do with them.

The point isn’t paperwork

None of this is about compliance theater. It’s about making your fleet legible to a second person, so the operation isn’t a single point of failure sitting in your browser history. An operation you can hand off, even temporarily, is an operation you actually understand yourself, because writing it down forces you to notice the parts you’d been running on autopilot.

If you’re building out infrastructure for a fleet worth documenting properly, from proxy sourcing to browser isolation to warm-up planning, Multi Account Ops covers the operational side in more depth.

Get new guides and videos first — join the Telegram channel.

need infra for this today?