The Complete IT Offboarding Checklist for 2026
A clear IT offboarding checklist protects your company from security gaps, wasted spend, and lost hardware when an employee leaves. Use the steps below as a template for every employee offboarding equipment and access task.
Why offboarding deserves a checklist
Onboarding gets all the attention, but offboarding is where the real risk lives. A departing employee may retain access to email, code repositories, customer data, and SaaS tools long after their last day. Unrevoked accounts are a leading cause of data breaches, and unreturned laptops are both a financial loss and a compliance liability. A standardized checklist makes sure nothing is missed, regardless of who runs the process or how busy the week is.
The IT offboarding checklist
Step 1 — Revoke access immediately
- ☐ Disable SSO / identity provider account on the last day
- ☐ Suspend email and forward or delegate the mailbox per policy
- ☐ Revoke VPN and remote-access credentials
- ☐ Remove from all SaaS applications (CRM, project tools, design, finance)
- ☐ Rotate any shared or service credentials the employee knew
- ☐ Revoke API keys, SSH keys, and personal access tokens
- ☐ Remove from admin groups and privileged-access roles
Step 2 — Recover physical equipment
- ☐ Pull the list of assigned assets from inventory by serial number
- ☐ Send a prepaid return kit (box, label, instructions) for remote staff
- ☐ Collect laptop, monitors, peripherals, phone, and security keys
- ☐ Track each device until it is received and inspected
- ☐ Set reminder and escalation dates for outstanding items
Step 3 — Wipe and secure data
- ☐ Issue a remote lock/wipe command if a device is overdue
- ☐ Back up any business-critical files before wiping
- ☐ Perform a verified full-disk wipe on returned hardware
- ☐ Confirm the device is removed from MDM after wipe
- ☐ Reclaim and re-key any company data on personal (BYOD) devices
Step 4 — Reclaim licenses and subscriptions
- ☐ Release paid software seats (productivity, design, dev tools)
- ☐ Cancel or reassign per-seat SaaS subscriptions
- ☐ Recover hardware leases or warranties tied to the employee
- ☐ Update license counts so you stop paying for unused seats
Step 5 — Update asset and audit records
- ☐ Mark each returned device as received in inventory
- ☐ Record condition and decide: redeploy, repair, or retire
- ☐ Log the offboarding completion date and who performed it
- ☐ Retain an audit trail for compliance and security reviews
- ☐ Close the offboarding ticket only when every item is resolved
Tips for running it smoothly
Trigger the checklist automatically from your HR system so IT is never the last to know about a departure. Keep your asset inventory accurate year-round — offboarding is far easier when you already know exactly what each person holds. And separate the two timelines: access revocation must happen on day one, while physical equipment recovery can take a couple of weeks, so do not block account closure on a laptop that is still in transit.
Where BoomerangDepot fits
The equipment-recovery portion of this checklist is the part that most often stalls. BoomerangDepot handles it end to end: generate a prepaid return kit, track every device by serial number, run automatic reminders, and have hardware received and inspected at a warehouse. Your asset records stay current automatically, giving you a clean audit trail for the final step of the checklist.
Make offboarding effortless
Automate the device-recovery steps of your offboarding checklist with BoomerangDepot.