A HomeKit renter move-out is complete only when the departing resident has removed personal access and data, continuing residents can operate and recover the approved system, landlord-supplied hardware is accounted for, and renter-owned devices can no longer see or control the old home. This checklist closes Apple Home, alarm, lock, camera, network, and service paths without handing over a master password.
Use it before the final inspection and again after keys are returned. It applies to the Apple Home, supported home hubs, bridges, alarms, cameras, locks, sensors, routers, automations, service plans, household invitations, landlord-owned devices, and renter-owned devices. Keep evidence that required approvals, original hardware, surfaces, fire and egress functions, and privacy boundaries were restored.
HomeKit renter move-out at a glance
| Move-out job | Evidence to collect | Acceptance test |
|---|---|---|
| Account ownership | Named owner, recovery email, phone, MFA method | Continuing operator signs in on a clean device |
| Device inventory | Model, location, power, hub, network, warranty | Every listed device reports the correct state |
| Alarm response | Modes, delays, contacts, permits, monitoring terms | Run a documented test-mode alarm |
| Locks and access | Admins, named codes, keys, schedules, backup entry | Test entry online and during an outage |
| Cameras and evidence | Views, privacy zones, storage, retention, export | Trigger, find, export, and play one clip |
| Automations | Trigger, condition, action, owner, safe failure state | Run each security-relevant rule once |
| Recovery | Battery, internet, hub, phone, and account procedures | Simulate one failure at a time |
Rental-specific closeout matrix
| Item | Departing renter action | Proof | Continuing state |
|---|---|---|---|
| Apple Home | Remove the old home only after owned accessories, evidence, residents, hubs, and transfer limits are reconciled | Dated resident and hub record; clean-device check | No personal resident, invitation, home, or remote route remains |
| Renter-owned hub, bridge, or accessory | Unpair through the supported path, remove service links, reset only after evidence is protected, and pack the complete device | Serial, before/after state, reset record, photo, and inventory | Old rental has no stale tile, automation, alert, recording, or account link |
| Landlord-supplied device | Do not claim it as personal property; transfer only through an approved vendor or manager path | Original inventory, written instruction, working-state test | Approved operator can use and recover it without the renter |
| Smart lock | Reinstall approved original hardware where required; remove renter codes, mobile keys, schedules, and integrations | Door-fit, latch, key, code-removal, egress, and surface photos | Manager-approved lock and backup entry work without personal access |
| Camera | Protect incident evidence, remove personal viewers and clips as required, disable recording, remove the device, and restore the surface | Viewer list, export/deletion record, field-of-view photo, reset record | No old-rental live view, audio, alert, clip, or share remains |
| Alarm and monitoring | Follow test mode, cancellation or transfer, permit, certificate, contact, and equipment-ownership terms | Dated provider confirmation and final tested state | No dispatch or billing path points to the departing renter |
1. Name the continuing operator before removing access
Start with roles, not passwords. Write down one accountable owner, at least one backup administrator, ordinary residents, temporary users, monitoring contacts, installers, and any property-management staff. Do not make every person an administrator just because it is faster during setup.
The owner should control billing, recovery, monitoring changes, household invitations, device removal, and data deletion. A resident may need day-to-day control without the power to invite new people or erase history. A cleaner, dog walker, contractor, or guest usually needs a named code or narrow schedule rather than a shared master login.
If Apple Home is part of the system, review Apple’s current Home update and guest-access guidance. Platform roles and accessory permissions change, so record what each role can do today instead of relying on memory.
2. Build one inventory that matches the physical home
Walk the property and create a row for every security-related device. Include the product name, model, serial number, room or door, mounting point, power source, battery type, network path, linked hub, app, account owner, purchase date, warranty, and reset procedure. Photograph labels before they become hard to reach.
Use physical names such as “rear patio slider contact” and “garage interior camera,” not “Sensor 4.” Then compare the inventory with the apps. A device that exists in the app but not in the home may be an old record. A device on the wall but missing from the inventory may be unmanaged.
Mark which devices are life-safety devices, which are intrusion sensors, which collect audio or video, and which can unlock a door. Those categories deserve tighter access and a separate test.
3. Remove or transfer accounts without sharing a master password
Where the vendor supports ownership transfer, use it. Otherwise, change the account email, phone, recovery method, password, and multi-factor authentication under the continuing operator’s supervision. Remove old phones, browser sessions, API keys, voice-assistant links, and household members after the continuing operator proves access.
Use unique passwords and turn on multi-factor authentication when available. The FTC’s guidance for internet-connected devices at home also calls for software updates, secure router settings, and changing default credentials. Do not store recovery codes in the same unlocked notes app as the main password.
If a product cannot transfer ownership cleanly, document the vendor’s reset path before resetting it. Some resets remove automations, pairings, stored clips, or monitoring configuration. Export evidence and screenshots first.
4. Map the alarm modes to real household behavior
Write a plain-language mode sheet. For each mode, list which perimeter sensors, interior motions, cameras, locks, sirens, and automations are active. Add entry and exit delays, who receives notifications, who may cancel an alarm, and what professional monitoring does.
Test Stay, Away, Night, and any custom mode with the monitoring provider in test mode. Open one protected door, walk past one motion sensor, and confirm the correct siren and notification path. Do not test emergency dispatch without arranging the test with the provider.
Record local permit numbers, verbal passcodes, emergency contacts, duress behavior, and false-alarm procedures. A move-out is not the time to discover that the first call still goes to a former resident.
5. Audit locks, codes, keys, and backup entry
List every exterior lock, administrator, mobile key, PIN, physical key, keypad, schedule, and automation. Delete generic labels such as “Guest 1.” Replace them with a named person and an end date. Keep one tested mechanical or otherwise independent entry method available according to the lock maker’s instructions.
Run the steps in the smart-lock access-code audit, then use the smart-lock installation acceptance test to check door alignment, latch travel, batteries, codes, and outage entry. Confirm that locking a door does not accidentally arm a mode or expose a resident to a lockout.
6. Prove camera coverage and evidence retrieval
For each camera, record its purpose, field of view, detection zone, audio setting, privacy zone, recording trigger, storage location, retention period, plan dependency, and people with access. Check windows, reflective surfaces, night lighting, moving branches, public sidewalks, neighboring property, and private indoor areas.
Trigger one event, wait for processing, find the clip, export it, and play the exported file on another device. A live view is not proof that evidence will exist after an incident. Repeat the test after a plan change or storage-card replacement.
Document when indoor cameras should be off, shuttered, or restricted. Tell household members and regular visitors what is recorded. Privacy controls are an operating rule, not a one-time installation setting.
7. Put every automation on a one-page register
For each security-related automation, write the trigger, conditions, action, schedule, devices, owner, and safe failure state. Examples include locking at bedtime, turning on exterior lights after motion, closing a garage reminder, and changing a thermostat when the alarm arms.
Avoid rules that unlock doors, disarm alarms, silence warnings, or reveal occupancy from a single weak signal. Test rules with the phone offline, the internet down, the hub restarting, and one sensor unavailable. The system should fail in a way the household understands.
Delete duplicate or abandoned rules. Two platforms controlling the same light, lock, or mode can produce loops and confusing history.
8. Separate the rental network from device removal
Record the router owner, admin address, firmware state, Wi-Fi names, guest network, device network, DNS settings, and backup power. Do not publish the Wi-Fi password in the general move-out sheet. Store it in the approved password manager or sealed recovery record.
The FTC’s home Wi-Fi security guide recommends changing default router credentials, using encryption, keeping software current, and disabling features you do not need. NIST also offers seven practical smart-home security and privacy tips.
If the router is being replaced, do not assume every device will follow a reused network name. Create a device-by-device migration list and verify status, time, automations, remote access, and alerts after the change.
9. Document subscriptions, monitoring, and downgrade behavior
List every recurring charge, renewal date, trial end, payment owner, cancellation path, and feature lost when a plan ends. Separate alarm monitoring, cellular backup, cloud video, AI detection, extended storage, and warranty coverage.
For an Abode-based system, compare the current Abode plan options and record which household jobs depend on the selected plan. The move-out sheet should say what remains available if monitoring or cloud storage stops.
Do not use a promotional price as the budget. Calculate hardware, installation, monitoring, storage, batteries, replacement devices, and likely expansion over three years.
10. Create a move-out record without exposing secrets
The recovery pack should contain vendor support links, model and serial numbers, purchase records, warranties, monitoring contacts, permit details, recovery-code location, reset order, backup keys, battery types, and the last successful test date. It should not be a public document containing every password and PIN.
Include procedures for a lost phone, dead hub, failed internet connection, dead lock battery, unavailable administrator, false alarm, missing clip, and property sale. The security phone-replacement checklist, HomeKit emergency-access guide, and device-disposal checklist cover the highest-risk transitions.
60-minute HomeKit renter move-out acceptance test
- Minutes 0–10 — approval and ownership: match the lease, manager instructions, original condition, owned-versus-supplied inventory, receipts, serials, removal duties, keys, and final-inspection standard.
- Minutes 10–20 — Apple Home: verify residents, guests, home hubs, bridges, accessory ownership, automations, remote access, recovery, and the supported leave-home or remove-home sequence.
- Minutes 20–30 — alarms and access: place monitoring in approved test mode; restore required hardware; test direct zones, siren, lock fit, keys, named codes, removal, and egress.
- Minutes 30–40 — cameras and data: protect required evidence, review viewers and shares, disable approved recording, remove personal cameras, inspect restored surfaces, and prove old live view and clips are unavailable.
- Minutes 40–50 — networks and services: remove personal Wi-Fi, platform, voice, API, cloud, monitoring, payment, permit, and notification paths without resetting landlord-owned equipment outside the approved process.
- Minutes 50–60 — clean-device proof: use a clean phone and the continuing operator to prove the intended final state, then record photos, unresolved items, account closure, key return, and sign-off.
When move-out sign-off should fail
Do not sign off if the departing renter remains the only administrator, a shared password is the only access method, alarms cannot be placed in test mode, monitoring contacts are wrong, an exterior lock lacks tested backup entry, cameras cannot export evidence, privacy zones are unknown, automations have no owner, or subscription losses are unclear.
Fix the failed item, record the change, and repeat the affected test. A signature without a working test only transfers uncertainty.
Frequently asked questions
Should a departing renter give the continuing operator the old master password?
No. Use a supported ownership transfer or change the account identity, recovery methods, password, MFA, sessions, and household members. The continuing operator should prove access before the departing renter is removed.
Should every resident be a smart-home administrator?
No. Give people the narrowest role that covers their job. Administration, billing, recovery, device removal, and new-user invitations should remain limited.
What is the most important move-out test?
There is no single test. At minimum, prove account recovery, alarm response, lock entry and backup, camera evidence export, alert routing, and one outage behavior.
How often should the move-out record be reviewed?
Review it at planning, device removal, final inspection, and after key return; repeat any affected account, access, camera, network, alarm, or recovery test.
