When an employee leaves: the account and access checklist

The same day

• Disable their email account, and forward or delegate it to a manager rather than deleting it.
• Remove them from Google Workspace or Microsoft 365, and sign out their sessions.
• Remove their access to the website admin, hosting, and domain registrar.
• Remove them from your Google Business Profile, Meta business tools, and other social accounts.
• Remove them from the password manager, booking, payments, CRM and accounting.

Then change shared passwords

Any login they knew but that you can’t give each person their own access to: the Wi-Fi, a supplier portal, a shared social account. A password manager makes this a few minutes’ work. See password managers for small teams.

Check what’s tied to them

• Accounts registered with their personal email or phone, especially the domain and the Google profile.
• Two-step sign-in codes going to their phone.
• Ads billed to their card, or subscriptions in their name.
• Devices they used for work.