Printable checklist
Staff leaver checklist
Copy this onto one page. Tick each line as you go when someone leaves.
Before the last day
- Agree the end date and time
- List accounts, shared logins, and devices
- Make sure someone else is an admin
- Get handover notes
On the last day
- Reset password, sign out all sessions, block sign-in
- Remove their MFA methods
- Convert mailbox to shared or forward it, and add an auto-reply
- Give their manager access to OneDrive or Drive files
- Change shared passwords, Wi-Fi, and alarm codes
- Remove from bank, cards, payment apps, and accounts software
- Remove from social media, domain, and hosting
- Collect laptop, phone, keys, and fobs. Remote wipe if needed
In the week after
- Delete any forwarding rules
- Check every admin role
- Update supplier, bank, and accountant contacts
- Cancel or reassign licences
- Set a date to delete the old account
Free to print and share. If you share it online, please link to this page. From OwnerSec (ownersec.co.uk). Not NCSC, legal or insurance advice.
From the guide: Staff leaver checklist: lock down access when someone leaves. Checked 10 November 2026.