Free tool
Offboarding checklist generator
Pick the services the leaver used; get what to do on the day, the passwords to change and the ownership to hand over in one printable list.
Offboarding checklist
On the day they leave
- Sign them out of every company account.
- Forward their company e-mail to a manager; lock the account and set an automatic reply.
- Remove their access to the shared password list, shared folders and group chats.
Two-step verification
- Set up two-step verification again on accounts tied to the authenticator app on their phone.
- Update accounts whose recovery e-mail or phone is theirs with company details.
Devices and physical access
- Collect devices; confirm company accounts are signed out and data is wiped.
Ownership and handover
- Transfer ownership of files, pages, ad accounts and groups they own.
Closing
- Record completed items in a signed and dated report.
In Passhield this list builds itself: tasks are split into required and suggested by which passwords the person actually saw, and close when a password changes.
How to use it
- 1
Pick the services
Marketplaces, ad panels, accounting and government portals are listed; add any that are missing.
- 2
Review the list
Services that send codes by SMS get a phone number check; those with API keys get a key replacement.
- 3
Print or copy it
Work through the list ticking items; when done, keep it with a date and signature.
Questions people ask
Which passwords should change when someone leaves?
Every shared password the person knew or saw. Passwords they only filled with the extension and never saw are a lower risk; changing them on critical accounts is still advised.
What if two-step verification is on their phone?
Set two-step verification up again on those accounts, tied to a company line or a verification tool the team can reach. If the recovery e-mail or phone is theirs, update it with company details.
When should it be done?
Signing them out and removing shared access should happen on the day they leave. Password changes should start the same day; the longer it waits, the longer the risk stays open.
In Passhield this list builds itself.
Tasks are split into required and suggested by which passwords the person actually saw, and close on their own when a password changes.