Best thing to do is to create an additional FTP user and give that login to your developer. This way you still retain full control of your hosting account. This Knowledge Base article will show you how. You should also make a backup copy of your site.
Great thanks. I did that and created an additional sql database user as well. Glad I didn't jump the gun and give full access.
