1Password offboarding checklist

A password manager is the most important account to offboard carefully, because the person could see every shared password in their vaults. 1Password recommends moving work items first, suspending rather than deleting, then changing shared passwords.

Track it in Handover

Before they lose access

Have them move work items from their own work vault into a shared company vault.
Don’t delete their account yet. Deleting erases anything left in their vault.

Remove access

Suspend their account.
List every vault they could open, including through groups.
Change the passwords for the items in those vaults. If they were an owner or administrator, assume they saw everything they could manage.
On Business plans, use the usage report to see which items they actually opened and change those first.

Finish

Delete the account once data is moved and passwords are changed.
If accounts are created automatically from your identity provider, remove them there first.
Record which passwords were changed and when.

Menus change. For current click paths, see the official help article.

Questions

Should I suspend or delete a 1Password account?

Suspend first. Delete only after their work items are moved and the shared passwords they could see have been changed.

Do I really need to change shared passwords?

Yes. Removing their 1Password account doesn’t make them forget passwords they already saw. Changing them is the only way to close that access.