Back to Shared accounts

To keep a copy, print this page or save it as a PDF from your browser.

Salmini Checklist1 page

Account Security · Shared accounts

Shared accounts checklist

Who leads Whoever holds the shared logins Name

Use it when

you're moving shared logins somewhere safer, or someone is leaving.

In order of preference

Give each person their own access where the service allows it.
Keep the rest in a shared vault, each person with their own main password.
Never paste a password into a chat or an email.

For every shared account

Two-factor on, never tied to one person’s phone.
Two trusted people hold the backup codes.
Recovery email and phone point to the organisation.

On someone's last day

Out of everything shared: the vault, Page roles, mailboxes, admin roles, group chats.
Every shared password they knew changed, the bank and email first.
Their mailbox kept for a couple of months, with a reply saying who to contact.
Laptops, phones, keys and door cards collected.

Notes

Take care: Do it for everyone, every time, so it's routine rather than a sign of distrust.

Started Done Review again