Offboarding
The passwords a departing employee could reach, on one list.
Passhield knows whether the leaver saw each password. When you start offboarding, access closes at once and what needs doing appears on a single list.
How it works
- 11
Preview and start
See the vaults affected, how many items they saw or only used, and the items they own. When you start, their sessions and keys close at once.
- 22
Close the tasks
Passwords to change, two-step logins to re-enrol, ownership to hand over, vault keys to renew. When a password changes, its task closes on its own.
- 33
Get the report
Complete the process once the required tasks are closed. Who did what and when; what was skipped and why. Printable and ready for signature.
Which item creates which task
The rules rest on exposure: a password they saw is a required task, one they only used is suggested. For critical, bank and government items, use alone is enough.
| Situation | Task | Required |
|---|---|---|
| Saw, copied or edited the password | Change the password | Yes |
| Only filled it with the extension | Change the password | Suggested |
| Only used it, but the item is critical | Change the password | Yes |
| Only used it, but it is a bank or government account | Change the password | Yes |
| Saw the verification key or generated codes | Re-enrol two-step verification | Yes if seen |
| Owner of items or vaults | Hand over ownership | Yes |
| Held the key of a shared vault | Renew the vault key | Yes |
| Held the key of a code channel | Renew the channel key | Yes |
| Was an admin or owner | Renew the organisation keys | Yes |
If the person is an owner, renewing the organisation keys and printing a new recovery kit are required too. In organisations that choose the "strict" policy, passwords that were only used become required tasks as well. Admins can add tasks of their own (e.g. collect the office key).
The details make the difference
Immediate closing
All of the person's sessions are revoked and their keys become invalid; they are signed out of the web app and the extension.
Tasks that close themselves
When the password is changed in Passhield, the task closes too; nobody updates the list by hand.
Reasons for skipping
A task can be skipped on purpose; the reason goes into the report and the audit log.
Personal vault
Archived. Its contents cannot be opened by the organisation; only the number of items shows in the process.
Report
The person, dates, closed and skipped tasks, signature fields. Saved as PDF from the browser.
Platform steps
What to do on 21 platforms such as Trendyol, Meta, Google and Microsoft 365 is ready: hand over ownership first, then remove the person.
E-seals and e-signatures they hold
The e-seal, e-signature and KEP tokens in the leaver's hands are on the list, so nothing to collect is forgotten.
For HR
Accounts are part of joining and leaving.
Add to a group, get access
Add a new employee to their department's group and they get that group's vaults; no one-by-one sharing.
Closed by default
A new member can reach nothing on their own; access opens when they join a group or a vault.
Interns and temporary staff
Give access with an end date; it closes on its own when the time is up and is recorded.
Do not let the next departure catch you unprepared.
Exposure is recorded from the first day; on offboarding day, the list is ready.