When Someone Quits, Does Their Access Walk Out the Door Too?

By Jordan Polasek · July 1, 2026

A few months back, a business owner south of Houston asked me a question that stuck with me. She'd just let go of a manager who hadn't worked out, and a week later she called: "Jordan, can he still get into anything? I honestly don't know what he had access to."

That pause — I don't know — is the whole problem. Most small businesses have a pretty good handle on hiring someone. Onboarding gets attention because you need the new person productive fast. But the day someone leaves? That's usually a scramble, an afterthought, or nobody's job at all. And that gap is where real risk lives.

Let me walk you through why offboarding matters more than most owners think, and how to make it something you actually do every time instead of hope you remembered.

The accounts you forget are the ones that hurt you

When someone leaves, you probably remember to collect their laptop and turn off their email. Good. But a modern small business runs on a dozen tools, and most of them live outside your building.

Think about everything a single employee might be able to reach:

• Microsoft 365 or Google Workspace — email, shared files, calendars, Teams chats.
• The point-of-sale or accounting software — QuickBooks, your payment processor, payroll.
• Cloud storage — Dropbox, OneDrive, SharePoint folders full of contracts and client lists.
• Social media and your website — the Facebook page, the Google Business Profile, the site's back end.
• Shared passwords — the Wi-Fi, the alarm code, the "everybody uses this login" spreadsheet.

Here's the uncomfortable truth: a former employee doesn't have to be malicious to cause damage. A synced phone that still pulls company email. An old login sold or reused in a breach months later. A password manager still holding the keys to your bank. Most incidents I see aren't dramatic revenge — they're doors nobody bothered to close.

If you can't answer "what could this person still log into?" in under five minutes, you don't have an offboarding process — you have a hope.

Build the list before you need it

The reason offboarding feels chaotic is that people try to remember every system in the moment, often while emotions are running high. The fix is boring but powerful: write down, one time, every place an employee could have access. This is your master list, and it doubles as an onboarding guide.

For each system, note two things — who controls it (is it you, an office manager, or your IT provider?) and how you shut off access (disable the account, reset the password, remove them as a user). You only have to figure this out once. After that, offboarding becomes checking boxes instead of chasing ghosts.

A few things that catch Texas small businesses in particular:

• Personal phones. If staff read email on their own phones, disabling the account isn't always enough — the app can keep a cached copy. Microsoft 365 lets you remotely wipe just the company data from a personal device.
• Shared logins. If five people use one password for the bank or the POS, and one of those people leaves, that password is now compromised. Change it. This is also the best argument for giving everyone their own login.
• Text and voice. Forwarded business numbers, a Google Voice line, the number customers actually text — make sure those come back to you.

Speed matters more than paperwork

The single most important thing: cut access on the day it ends, not the Friday after. The riskiest window is the stretch between "this person is leaving" and "their access is actually gone." For a planned departure, that can be same-day. For a difficult termination, access should be disabled before the conversation happens, not after.

You don't have to delete anything right away — and you shouldn't. Disable the account, reset the passwords, but keep the mailbox and files intact for a while. You may need that email history for a client question, a legal reason, or just to hand off unfinished work. Lock the door first; sort through the room later.

What to do this week

You don't need a big project to close this gap. Start here:

1. Write your master access list. Every system, who owns it, how to shut it off. A single page is fine.

2. Make a simple offboarding checklist from that list and put it where whoever handles departures will actually find it.

3. Hunt down shared passwords. Anywhere multiple people use one login is a spot where offboarding quietly fails. Plan to give people individual accounts.

4. Do a quick audit of current accounts. Anyone in your systems who no longer works for you? That's a door standing open right now — close it today.

5. Decide who owns this. Offboarding that's "everybody's job" is nobody's job. Name a person or a process.

None of this is glamorous. But it's the kind of quiet discipline that keeps a bad week from becoming a bad year.

If you're reading this and realizing you're not sure who can still get into what, you're not alone — that's one of the most common things we untangle for small businesses. At BVTech, we help Texas companies set up clean, repeatable onboarding and offboarding so access follows your people instead of outliving them. If you'd like a hand building that checklist for your business, reach out anytime — even a short conversation usually surfaces a door or two worth closing.

Take care of your people, and take care of the keys they carry.

— Jordan Polasek