Employee Offboarding Checklist (Free Template + Step-by-Step Guide)

Quick Answer Summary

• What to do first: Confirm the last day, reason code, and eligibility for rehire; lock in a timeline and owners.

  

• Don’t miss: Same-day access removal, asset return, final pay accuracy, benefits/COBRA notices, and knowledge transfer. DOL+1

• Security: Disable all accounts (SSO, email, SaaS, VPN), rotate shared credentials, and close admin access immediately. NIST Publications+1

• ---

  People side: Communicate clearly to the team and clients, run a structured exit interview, and offer alumni touchpoints. SHRM

Why Offboarding Matters (More Than You Think)

• Compliance: Federal rules (e.g., FLSA recordkeeping, COBRA notices) and state final-pay deadlines can bite. Use a standardized checklist to keep timing and documentation tight. Paycor+3DOL+3DOL+3

• Security & cost: Lingering accounts are a top breach vector; the average global data-breach cost has hovered around $4.4–$4.9M in recent IBM reports—strong justification for same-day deprovisioning. IBM+1

• Brand & morale: A respectful, repeatable process reinforces trust and reduces disruption for the team that stays. SHRM

The Step-by-Step Offboarding Process

Phase 1: Plan (Days −14 to −1, or as soon as notice is given)

1. Confirm details: Last working day, eligibility for rehire, payout rules (PTO, commissions), and return-of-property terms. DOL

2. Assign owners: HR (docs/benefits), IT (access/assets), Payroll (final pay), Manager (knowledge transfer).

3. Create a timeline: Put tasks on a dated checklist with due-by times (e.g., “access removal by 9 a.m. on last day”).

4. Notify stakeholders: Facilities, Security, Legal/Compliance, Client Success if the employee is client-facing.

5. Prepare paperwork: Separation letter, benefits packet (including COBRA if applicable), IP/NDA reminders, and unemployment notices as required. DOL

6. Schedule knowledge transfer: Shadow sessions, SOP updates, project status docs, key contacts list.

Phase 2: Execute (Last Day)

1. Identity & access:

   • Disable SSO/email/VPN and remove from groups; revoke admin roles; terminate API keys and personal tokens.

   • Rotate any shared credentials and update MDM and MFA device enrollments. CSF Tools+1

2. Assets & data:

   • Collect laptops, phones, badges, keys, and peripherals; log serials/conditions.

   • Secure data handoff (files, passwords in a vault, client notes), then transfer ownership of calendars/drives.

3. Final pay: Deliver accurate final wages on the correct timeline (varies by state) and include owed items (e.g., overtime, reimbursements). DOL

4. Benefits & notices: Provide benefit termination dates, COBRA election information (if eligible), HSA/401(k) options, and EAP reminders. DOL+1

5. Exit interview (optional but recommended): Use a structured guide to collect actionable insights and identify retention themes. SHRM

6. Internal & external comms: Announce professionally (no details beyond what’s appropriate), introduce interim contacts, and thank the employee for contributions.

Phase 3: After the Exit (Days +1 to +30)

1. Close loops: Remove from distribution lists; update org charts, websites, SaaS seats, and emergency contacts.

2. Compliance & records: File separation docs, update I-9 retention ticklers, and archive payroll/benefits records per policy. DOL

3. Security follow-through: Review logs for post-termination access attempts; ensure deprovisioning covered every app. Consider periodic “orphaned account” audits. CSF Tools

4. Alumni & brand: Add to alumni network (if appropriate), invite to keep connections, and log boomerang-eligible talent.

Offboarding Checklists (Free Template)

A) HR & Manager Checklist

• Confirm last day and reason code; update HRIS.

• Determine eligibility for rehire; record rationale.

• Gather address for W-2 and benefits mailings.

• Prepare separation letter and applicable notices (COBRA, where eligible). DOL

• Plan knowledge transfer: projects, SOPs, key contacts, client statuses.

• Schedule exit interview; prepare neutral, insight-driven questions.

• Draft internal announcement and client/partner notices.

B) IT & Security Checklist

• Same-day deprovisioning: SSO, email, SaaS, CRM, code repos, cloud consoles, VPN, MFA, mobile device management. CSF Tools

• Disable shared mailboxes and forward as needed; transfer file ownership.

• Rotate shared credentials; remove from password vaults.

• Collect and wipe devices; verify encryption and backups.

• Run a “lingering access” audit 24–48 hours after exit.

• Document actions for audit (who, what, when). NIST Publications

C) Payroll & Benefits Checklist

• Calculate final wages accurately (salary/hourly, OT, commissions, reimbursements).

• Pay on time per state law; document method and date. DOL+1

• Reconcile PTO payout per policy.

• Deliver benefits termination dates and COBRA election materials (if eligible). DOL+1

• Provide retirement plan rollover/vesting info via plan administrator.

D) Assets & Property Checklist

• Retrieve laptop, monitor, phone, security badge, keys, credit card, ID, parking pass.

• Recover peripherals (docks, tokens), uniforms, and any samples/demo gear.

• Confirm shipping labels and return windows for remote staff.

E) Communications & Culture Checklist

• Thank-you note and next-step info to departing employee.

• Team announcement (who’s covering what, where to send requests).

• Client/partner notice with continuity and contact details.

• Offer alumni network or reference process if appropriate.

Special Scenarios (What to Adjust)

• Remote or hybrid: Build in shipping windows and device tracking; use remote wipe and geo-independent access checks. NIST Publications

• Involuntary exits: Pre-stage IT to deprovision at meeting start; have security on standby; keep tone factual and respectful. SHRM

• Executives/admins: Expand app inventory review; audit privileged access; confirm board/press protocols. CSF Tools

• High-risk roles (finance, engineering, security): Immediate repo/console lockout and credential rotation; extra review of data exfiltration controls. Costs from insider or credential-based breaches are among the highest—another reason to be strict here. Table Media

Metrics That Matter

Track these to prove impact: time-to-deprovision (target: minutes), % apps deprovisioned same-day, % assets recovered, final-pay timeliness, exit-interview completion rate, and rehire/referral rates. Pair quarterly audits with a rolling “orphaned account” report. CSF Tools

Common Mistakes (and What To Do Instead)

• Waiting until 5 p.m. to remove access. Deprovision at the start of the exit meeting. CSF Tools

• Assuming “email + HRIS” is enough. Many risks live in SaaS and shared credentials—catalog them and automate removal. Okta+1

• Forgetting state final-pay rules. Build a state-by-state reference into your checklist. DOL+1

• Skipping knowledge transfer. Schedule documented handoffs with clear owners and due dates. Indeed

Email Scripts (Copy-Ready)

1) Internal Team Notice (Manager)
Subject: Team Update
Hi team—[Name]’s last day is [Date]. We appreciate their contributions to [project/area]. Effective [Date], [Interim Owner] will handle [responsibilities]. Please route requests to [shared inbox/owner]. We’ll ensure a smooth handoff—thanks for your support.

2) Client/Partner Notice (CS/AM)
Subject: Your Primary Contact is Changing
Hello [Client], I’m writing to share that [Name] is transitioning out of [Company]. I’ll be your point of contact while we introduce [New Owner]. Your current projects and timelines remain on track. Thank you for your partnership—please reach me at [email] with any needs.

3) Thank-You & Next Steps (HR to Employee)
Subject: Important Departure Information
Hi [Name], thank you for your contributions. Attached are your final pay details, benefits timeline, and (if eligible) COBRA information. Please return any remaining equipment by [Date] using the enclosed label. If you need employment verification, contact [HR inbox]. Wishing you the best.

Free, Printable Offboarding Template (Master Checklist)

• Employee & last-day details confirmed

• Separation reason/rehire eligibility recorded

• Exit timeline & task owners assigned

• System/app inventory reviewed; access cutover time set

• COBRA/benefits packet prepared (if eligible)

• Final pay calculated; state timing confirmed

• Knowledge transfer plan scheduled and documented

• Assets return plan (on-site or shipped)

• Internal announcement drafted; client/partner comms prepped

• Exit interview scheduled; insights logged

• Post-exit audits: lists, groups, licenses, shared creds rotated

• Records updated/archived; alumni touchpoints noted DOL+2DOL+2

FAQs

How fast should we remove access?
Immediately—ideally at the start of the separation meeting. That’s consistent with leading security control guidance (NIST AC-2) and reduces breach exposure. CSF Tools

Do we have to offer COBRA?
If you sponsor a group health plan and have at least 20 employees (private sector/state & local gov’t), you generally must offer COBRA continuation in qualifying events. DOL

When is the final paycheck due?
Federal law doesn’t set a universal “pay immediately” rule; deadlines are set by state. Build a state reference into your checklist. DOL+1

What about remote employees?
Add time for device shipping and confirmations; use MDM/MFA to verify secure wipe and account removal. NIST Publications

Is an exit interview necessary?
It’s optional but valuable for retention insights and culture signals—especially when done with a structured guide. SHRM

Video: Learn More (recommended)

• HR’s Comprehensive Guide to Offboarding Best Practices (webinar). youtube.com

• Employee Offboarding Checklist: Exit Process & Final Pay (walkthrough). youtube.com

• Final Pay & COBRA Basics (compliance explainer). youtube.com

• How to Create a Smooth Offboarding Process (short guide). youtube.com

Sources

• SHRM—Employee termination/offboarding guidance and checklists. SHRM+1

• U.S. DOL—COBRA employer & employee guides. DOL+1

• U.S. DOL—Final paycheck timing and FLSA basics. DOL+1

• NIST SP 800-53 (AC-2 Account Management)—account lifecycle controls. NIST Publications

• IBM Cost of a Data Breach (2024–2025)—average breach cost benchmarks. IBM+1

• Paycor—state final paycheck chart (practical reference). Paycor

Disclaimer

This guide provides general HR information and is not legal advice. Laws differ by jurisdiction and can change. Always consult your employment counsel and state labor department for requirements specific to your situation.