Which passwords to change when an employee leaves

Turning off a person’s own accounts is the easy part. The harder part is everything they knew that other people still use: the Wi-Fi password, the alarm code, the shared social media login. Every one of those has to change when someone who knew it leaves.

Track it in Handover

Building and physical

Alarm codes and door keypad codes.
Safe and lockbox combinations.
Gate, garage and storage unit codes.
Keys: collect them, and rekey if one is missing.

Shared logins

Business Wi-Fi password, and the router admin password.
Social media accounts several people post from.
Supplier, shipping and wholesale ordering portals.
Bank or payment logins that more than one person uses.
Domain registrar and website hosting logins.
Shared email inboxes like info@ or orders@.

Two-step verification

Remove their phone number or authenticator from shared accounts.
Make sure recovery email addresses and phone numbers belong to the business, not to them.

Next time

Keep a list of who knows each shared password.
Share passwords through a password manager so you can remove a person in one place.
Write down the date each shared password was last changed.

Questions

Do I really need to change the Wi-Fi password every time someone leaves?

If they knew it and your Wi-Fi reaches anything important, yes. A guest network for customers and phones, with a separate password for business devices, makes this much less painful.

How do I remember who knew which password?

Record it when you share it. Handover keeps that list per person, so when someone leaves you get a checklist of exactly which shared passwords they knew.