How to Onboard and Offboard Employee Email Securely

Every new hire needs a mailbox, and every departure leaves one behind. Handled loosely, these moments are where data leaks, orphaned accounts and compliance gaps creep in. Here is a clean, secure playbook for onboarding and offboarding employee email.

Onboarding: start people right

1. Provision on your domain. Create the mailbox on your custom domain (you@yourcompany.com) from the admin panel, with the storage the role needs. Consistency here reinforces your brand from day one.

2. Enforce security defaults. Require two-factor authentication before first login, and confirm anti-spam, anti-virus and encryption apply to the new mailbox automatically. Security should be on by default, not a checklist the new hire has to remember.

3. Add them to the right groups. Assign distribution lists and shared mailboxes (support@, sales@) so they can collaborate immediately. See shared mailboxes and team collaboration.

4. Set up their devices. Point them to webmail and help them add the mailbox on their phone via IMAP/ActiveSync so they are productive everywhere.

Offboarding: close the door cleanly

Offboarding is the higher-risk moment. Do it in order:

1. Disable access first. The instant someone leaves, disable sign-in and revoke active sessions. This stops any further access immediately - before you decide what to do with the data.

2. Preserve the data. Do not delete the mailbox straight away. The business owns those records. Keep them per your retention policy, backed by daily backups.

3. Redirect the mail. Forward incoming mail to a manager or convert the mailbox to a shared mailbox so customers and colleagues are not left hanging.

4. Hand over shared access. Reassign any delegated access, distribution-list memberships and shared-mailbox permissions the person held.

5. Remove and document. After a safe buffer, remove the mailbox and record the action. Tamper-evident audit logs give you a clean trail for compliance.

Why the admin panel matters

All of this - provisioning, 2FA enforcement, access changes, audit logs - happens from one place in the DigiCloudMail admin panel, so onboarding and offboarding take minutes, not a support ticket and a spreadsheet.

The takeaway

Treat mailbox lifecycle as a security process, not an afterthought. Provision securely, enforce 2FA, and on exit always disable first, preserve the data, redirect the mail, then remove. Do that consistently and you close the most common gaps attackers and audits love to find.

Want secure, one-click onboarding and offboarding for your team? Contact us.