Skip to main content
May 19, 2025
Question

Offboarding Best Practice

  • May 19, 2025
  • 2 replies
  • 551 views

Is there a "best practice" for handling terminated employees' vaults?  All we have found is the recommendation to suspend the account, log in as the user and change all their site passwords, then delete/deprovision the account.

Seems like there should be a way to transfer that vault to a manager, then suspend/delete the user?

 

thx

2 replies

1P_Tommy
1Password Employee
May 20, 2025

@dfarrell 

 

https://support.1password.com/offboarding/

During the process you could move the data into a shared vault if desired.

dfarrellAuthor
May 20, 2025

Thank you - I had a feeling that was the best way.  But - as an admin, do we have the ability to move their vault elsewhere without logging in as the ex-employee? We use SSO here, but there are instances where master passwords are used, and as far as I know, the only way to get into that vault is to start a recovery process and reset it.  Just trying to dial in new SOPs - we're new to the 1PW platform here.  Thx

1P_Tommy
1Password Employee
May 20, 2025

@dfarrell 

 

In a nut-shell you'd need to remove the user from the SSO group and take the account through recovery. You need to access the account as them and move any data. The Private/Personal/Employee vault is inaccessible otherwise.