Sub-accounts must change the password on first sign-in
You no longer type a password for them: the system generates a 12-character one and shows it once. If a sub-account has its own email, completion emails for their orders go to them instead of you.
You no longer pick a password for your staff. When you create a sub-account, a panel shows the sign-in details once: a 12-character password generated by the system, with lookalike characters such as 0, O, 1 and l left out. Copy the password on its own, or use "copy everything" to send the site address, sign-in name and password to your employee in one message. Their first sign-in takes them straight to account settings, and nothing else opens until they set their own password; until they do, the Team page marks that account "password pending", so you can see at a glance who hasn't. You can reset a password at any time — the old one stops working immediately and the same first-sign-in rule applies. Separately: if a sub-account has its own email, completion emails for its orders go to them; if not, they keep coming to you.