if you have a problem within your website (as you stated),
it's completely normal they ask for credentials to take a look and solve the problem,
If you feel insecure doing so, take a back up of the website,
or simply ask them to use team viewer to connect instead