A user account access management system (100; 200; 360), the system comprising: a) a computing platform having a hardware processor (104, 204) and a system memory (106; 206) storing a user account access software code; b) the hardware processor configured to execute the user account access software code to: b1) receive, from a first user device (130; 230; 530) authenticated on a primary user account (118; 120; 220), a secondary account profile data (154; 554) for generating a secondary account (122; 124; 222) associated with the primary user account registered with a web based service; b2) receive, from a second user device (140a, 140b; 240, 540) not authenticated on the secondary account, a sign up request to link the secondary account with the second user device for using the second user device to access assets of the primary user account via the web based service, the secondary account profile data including restrictions for accessing the assets of the primary user account; b3) transmit, in response to the sign up request, an authentication token to one of the first user device and the second user device; b4) receive the authentication token from another of the first user device and the second user device; and b5) link the secondary account with the second user device based on receiving the authentication code from the other of the first user device and the second user device, wherein linking the secondary account with the second user device includes locking access to the assets of the primary user account by the second user device based on the restrictions included in the secondary account profile data. a) a computing platform having a hardware processor (104, 204) and a system memory (106; 206) storing a user account access software code; b) the hardware processor configured to execute the user account access software code to: b1) receive, from a first user device (130; 230; 530) authenticated on a primary user account (118; 120; 220), a secondary account profile data (154; 554) for generating a secondary account (122; 124; 222) associated with the primary user account registered with a web based service; b2) receive, from a second user device (140a, 140b; 240, 540) not authenticated on the secondary account, a sign up request to link the secondary account with the second user device for using the second user device to access assets of the primary user account via the web based service, the secondary account profile data including restrictions for accessing the assets of the primary user account; b3) transmit, in response to the sign up request, an authentication token to one of the first user device and the second user device; b4) receive the authentication token from another of the first user device and the second user device; and b5) link the secondary account with the second user device based on receiving the authentication code from the other of the first user device and the second user device, wherein linking the secondary account with the second user device includes locking access to the assets of the primary user account by the second user device based on the restrictions included in the secondary account profile data. b1) receive, from a first user device (130; 230; 530) authenticated on a primary user account (118; 120; 220), a secondary account profile data (154; 554) for generating a secondary account (122; 124; 222) associated with the primary user account registered with a web based service; b2) receive, from a second user device (140a, 140b; 240, 540) not authenticated on the secondary account, a sign up request to link the secondary account with the second user device for using the second user device to access assets of the primary user account via the web based service, the secondary account profile data including restrictions for accessing the assets of the primary user account; b3) transmit, in response to the sign up request, an authentication token to one of the first user device and the second user device; b4) receive the authentication token from another of the first user device and the second user device; and b5) link the secondary account with the second user device based on receiving the authentication code from the other of the first user device and the second user device, wherein linking the secondary account with the second user device includes locking access to the assets of the primary user account by the second user device based on the restrictions included in the secondary account profile data.