Every fall, South Jersey businesses say goodbye to a wave of seasonal workers. Shops, restaurants, marinas, rental offices, landscapers, and contractors from Atlantic City to Cape May staff up for the summer and scale back once the season ends. The employees leave, but their accounts often don't. A former worker who can still read the company email, log in to the point-of-sale system, or join the office Wi-Fi from the parking lot is a real risk, even when they left on good terms. A short, repeatable IT offboarding checklist closes those doors in under an hour per person.
Why leftover accounts are a problem
Most small businesses don't get hacked by a former employee with a grudge. The bigger risk is quieter:
- Old accounts with reused passwords get taken over by attackers, and nobody notices because nobody is using them.
- Shared logins for the register, the scheduling app, or social media stay the same for years, so everyone who ever worked there still knows them.
- Business data on personal phones keeps syncing after someone leaves, including customer contacts, schedules, and photos.
- Unused paid user seats in Microsoft 365, Google Workspace, and other apps keep billing every month.
The offboarding checklist
Work through these steps on or before an employee's last day:
- Disable the email account instead of deleting it right away. Reset the password, sign out of all sessions, and remove the account from any multi-factor authentication devices.
- Forward or share the mailbox with a manager, so customer emails and vendor invoices aren't missed.
- Remove access to business apps, including the point-of-sale system, booking or reservation software, payroll, accounting, scheduling, and cloud file storage.
- Change shared passwords the person knew, such as the register manager code, the alarm code, social media accounts, and supplier portals. A password manager makes this much faster.
- Change the staff Wi-Fi password if it was shared with seasonal workers, and keep guests on a separate guest network going forward.
- Collect company devices, including laptops, tablets, phones, keys, badges, and key fobs, and write down what came back.
- Remove company email and apps from personal phones using the remove account option in the app or your device management tool.
- Update security system and door access codes, and remove the person from camera system and alarm app access.
- Cancel or reassign paid user seats so you stop paying for subscriptions nobody uses.
Plan for next season before it starts
The easiest offboarding happens when onboarding was set up well. Before hiring for the spring and summer, put a few habits in place:
- Give every worker their own login instead of a shared one, so access can be removed for one person without changing it for everyone.
- Use groups or roles in Microsoft 365 or Google Workspace, so a new hire gets the right access in one step and loses it in one step.
- Keep one simple spreadsheet listing each employee, the accounts and devices they were given, and the date they were removed.
- Turn on multi-factor authentication for every account that touches email, money, or customer data.
- Set a calendar reminder for the end of each season, such as October 1, to review who still has access.
Keep the records you need
Disabling an account doesn't mean losing its data. Before removing a mailbox or a cloud drive, make sure the files, emails, and customer records are moved to a manager's account or kept in your backups. Many businesses keep a disabled account for 30 to 90 days, then remove it once nothing important is left.
Talk to a local IT team
Izzo Network helps small businesses in Mays Landing, NJ 08330 and across South Jersey set up clean onboarding and offboarding, individual logins, multi-factor authentication, password managers, and separate staff and guest Wi-Fi. Call or text Chris at (609) 415-0011, or use the contact form, to review who still has access to your business systems before next season.
FAQ
Should I delete a former employee's email account?
Not right away. Disable it, reset the password, and share or forward the mailbox to a manager first. Once important emails and files are saved, you can remove the account and stop paying for that user seat.
How quickly should access be removed when someone leaves?
On or before their last day. For an employee who leaves on bad terms, remove access before or during the conversation, not after.
Do I need to change the Wi-Fi password every time someone leaves?
If seasonal staff were given the main business Wi-Fi password, change it at the end of the season. Keeping employees on their own staff network and visitors on a guest network makes this simpler.
What if several employees shared one login?
Change that password as soon as anyone who knew it leaves, then move to individual logins so each person can be removed without disrupting everyone else.

