The Ex-Employee Who Still Has the Keys to Your Business

In short: When someone leaves, their digital keys — email, files, apps, remote access — often stay firmly in their pocket. Switching people off properly matters every bit as much as setting them up, and it’s one of the most overlooked risks in a small business. Here’s why, and what good offboarding actually looks like.

When a member of staff leaves, you take back their office key, their door fob and the alarm code without a second thought. Nobody would dream of letting a departed employee keep a key to the front door. And yet, digitally, that’s very often exactly what happens — the email still works, the files are still reachable, the apps are still logged in, sometimes for weeks, months, or even years after the leaving do. The keys are just harder to see, so they’re far easier to forget.

Why Nobody Remembers to Switch People Off

Setting a new starter up gets all the attention, because it’s urgent and obvious — they literally can’t do their job until they’re up and running. Switching a leaver off is the exact opposite: forget it, and nothing breaks, nothing flashes red, the work simply carries on. Which is precisely why it slips through the cracks. The cost of forgetting is completely invisible — right up until the day it very much isn’t.

What an Open Account Actually Risks

A leaver’s still-live account isn’t just untidy housekeeping; it’s a genuine hazard:

• An open door nobody’s watching. Even if the person is perfectly lovely and means no harm, their dormant account is one more unguarded entrance for a criminal to slip through — and nobody’s keeping an eye on it.
• Data walking out the door. Customer lists, quotes and contacts are easily copied on the way out if access isn’t cut promptly.
• The occasional unhappy leaver. Most departures are amicable. The rare one that isn’t can do real damage with lingering access to email and files.
• A phone that’s still buzzing. If they read work email on a personal phone, it may carry on merrily syncing your messages long after they’ve gone.
• Shared logins they still know. If your team shares passwords (we’d gently suggest not — see our earlier piece), a leaver carries those straight out the door in their head.

It’s Not Just Leavers — or Even Employees

Worth a quick mention: the same problem creeps in when people simply change roles. Someone moves from sales to accounts but keeps all their old access piled on top of the new — and over the years that builds into a heap of permissions nobody can quite account for.

And it isn’t only your own staff. Think of everyone outside the business you’ve ever handed a login to: the web designer you set up with access back in 2022, the freelancer who helped out over one busy summer, the bookkeeper who can still get into your finance system. Even a one-person business tends to collect a surprising number of these. Each one is a key you’ve given out — and once the work’s done, it’s worth making sure the key comes back.

Tidy access isn’t only about goodbyes. It’s about everyone — staff, contractors and the occasional helping hand — having exactly what they need to do the job, and nothing they don’t.

What Good Offboarding Looks Like

When someone moves on, a proper digital send-off means:

• Switching off their account promptly — ideally the moment they walk out, not “sometime next week.”
• Signing them out everywhere and resetting any passwords they knew.
• Removing access to email, files, apps and any remote connection into the business.
• Reassigning their email and files to a manager, so nothing important leaves with them.
• Clearing company data from any personal devices they used for work.
• Checking for any sneaky email-forwarding rules left quietly running in the background.

The crucial part is timing. The risky window is the gap between someone leaving and the door actually being locked behind them — and for an unhappy departure especially, that should be measured in minutes, not days.

The Bottom Line

You’d never let a departing employee keep a key to the office, the alarm code and the combination to the safe. Their digital access is exactly that bunch of keys — just invisible, and far easier to forget. Switching people off properly, and promptly, is one of the simplest and cheapest ways to close a risk most businesses don’t even realise is sitting wide open.

Sure every ex-employee is properly locked out? If you’re not certain, you’re in good company — it’s one of the most common gaps we find. We can handle the whole joiners-and-leavers process for you and keep tabs on who else has access, so new starters are set up smoothly, leavers are switched off the moment they go, and old keys don’t quietly pile up: no open doors, nothing falling through the cracks. Get in touch. Call 0118 976 7111   ·   hello@vcisystems.co.uk   ·   www.vcisystems.co.uk