Stop Sharing Logins: Team Accounts, Roles and Offboarding

In many small offices, churches and nonprofits, one password opens everything. The office manager set it up years ago, it is written on a sticky note, and half the volunteers know it. It feels efficient until a staff member leaves on bad terms, a laptop goes missing, or someone deletes a year of files and nobody can tell who did it.

Moving to individual accounts with clear roles is one of the most valuable changes a small team can make. It also makes the hardest moment, someone leaving, calm and quick.

Why shared logins cause trouble

• No accountability. When five people use the same login, you cannot tell who changed what.
• No clean exit. Removing one person means changing the password for everyone, so it often never happens.
• Two-factor authentication breaks. Codes go to one person's phone, so the team either skips 2FA or depends on one person being available.
• Passwords spread. Shared passwords end up in texts, notebooks and personal browsers you do not control.

Individual accounts with the right roles

Most business tools let you invite each person with their own login and assign a role. Typical roles look something like Owner, Admin and Staff, though names vary.

• Owner or billing roles should be held by the organization's leadership, ideally two people, so access never depends on one person.
• Admin roles go to the few people who truly manage the tool.
• Everyone else gets the least access needed to do their work. A volunteer who schedules events does not need access to donor records or financial settings.

When a tool charges per user, it can be tempting to share one seat. Weigh that cost against the risk and the lost accountability. For many teams, a few extra seats on the most important tools is money well spent.

Build a simple access inventory

You cannot remove access you do not know about. Create a shared document or spreadsheet listing every tool your team uses, with:

• The tool's name and what it is used for.
• Who owns the account (a role, not just a name).
• Who has access and at what level.
• How it is paid for, and whose card is on file.
• Where the recovery email and phone number point.

Make sure the account owner and recovery details belong to the organization, such as a shared admin mailbox, rather than one person's personal email. This single step prevents many painful lockouts.

When a shared login is truly unavoidable

Some services, especially older ones or certain social media setups, do not support multiple users well. In those cases:

• Store the credentials in a shared vault in your team's password manager rather than in messages or notes. Our guide to choosing a password manager covers options.
• Limit it to the smallest group possible.
• Change the password whenever someone with access leaves.
• Set up two-factor authentication in a way the team can manage, such as an authenticator app on a shared, secured device or a method the service supports for teams.

The offboarding checklist

Use this list every time a staff member, contractor or key volunteer leaves. Ideally, complete it on their last day, or at the moment of departure if the situation is difficult.

1. Disable their primary account (usually email or your main workspace account) so they cannot sign in.
2. Transfer ownership of their files, documents and shared folders to another team member before anything is deleted.
3. Set up email forwarding or an automatic reply so customers and partners are not left unanswered.
4. Walk through your access inventory and remove them from every tool listed.
5. Remove admin rights from websites, social media pages, domain registrars and payment tools.
6. Change any shared passwords they knew, including Wi-Fi and alarm codes if needed.
7. Remove their devices from your accounts, including phones used for two-factor authentication and any remote access tools.
8. Update recovery details anywhere their personal phone or email was listed.
9. Cancel or transfer payment cards in their name that pay for business services.
10. Collect equipment, such as laptops, keys and security keys, and wipe or reassign devices.
11. Note the date completed in your inventory.

Suspending an account is usually better than deleting it right away, since you may need emails or files later. Follow any record-keeping obligations your organization has.

A word about dignity

Removing access is a security step, not a judgment of the person. Explain the process ahead of time so it is understood as routine, and handle it respectfully for everyone, including beloved long-time volunteers. A consistent checklist makes it fair, because it is the same for everyone.

For more steps that strengthen a small team, see our small business cybersecurity checklist.

Frequently asked questions

What if someone leaves on bad terms?

Complete the critical steps, especially disabling their main account and changing shared passwords, at the same time as the conversation, not afterward. Have the checklist ready before the meeting.

Should we delete a former employee's account?

Usually suspend it first. Keep their email and files available until ownership has been transferred and any record-keeping needs are met, then delete according to your policy.

Do volunteers need individual accounts too?

Yes, whenever they access donor, member or financial information. Give them the narrowest role that lets them serve, and include them in your offboarding process.