Offboarding starts before the last day

List the folders, shared logins and recovery channels the person could access. Assign one manager to own the handover.

  • Confirm vault access
  • Transfer shared credentials
  • Record devices and recovery details

Remove access in the right order

Disable the user, remove team permissions, then rotate credentials exposed outside the vault. Check integrations separately.

  • Remove access at the agreed time
  • Rotate sensitive shared passwords
  • Check active sessions