Removing someone from an Apple Home is only one step in security offboarding. A former resident, caregiver, cleaner, contractor, or guest may also retain a lock code, alarm code, camera account, vendor-app share, garage credential, Wi-Fi password, voice-assistant access, mechanical key, or trusted phone. Use a written inventory, remove access in the right order, and prove that old credentials fail.
HomeKit member-removal checklist
| Layer | Action | Pass condition |
|---|---|---|
| Apple Home | Review residents and remove the departing person using the current Apple Home process | Their account no longer appears and cannot control the home |
| Native vendor apps | Remove shares, sessions, mobile keys, and linked accounts | Old native-app access fails |
| Locks and entry | Revoke named codes, wallet keys, fobs, cards, fingerprints, and temporary access | Every removed credential fails at each entry |
| Alarm | Remove users and rotate exposed master, guest, installer, and duress credentials safely | Old codes cannot arm, disarm, or change settings |
| Cameras | Review members, sharing links, sessions, storage, and privacy controls | No live view, clip, or settings access remains |
| Recovery | Review owners, trusted devices, recovery contacts, and emergency access | Recovery no longer depends on the removed person |
When to use this checklist
Run it when a resident moves out, a relationship or employment ends, a caregiver changes, a rental turns over, a contractor finishes, a phone is lost, or an account may be compromised. If there is stalking, domestic abuse, coercive control, theft, or an immediate threat, prioritize safety and professional help. Do not alert or confront a risky person merely to test access.
1. Map access before removing it
List the Apple Home owner and residents, Apple devices, home hubs, bridges, Matter fabrics, alarm account, monitoring account, camera apps, lock apps, garage and gate systems, router, Wi-Fi, voice assistants, smart displays, email recovery, phone numbers, password managers, installers, landlords, property managers, and physical keys. Note which person owns each account and which device can change other users.
2. Preserve evidence when access may have been misused
Record times, user lists, trusted devices, lock events, alarm events, camera sharing, deleted or disabled devices, unexpected automations, password-reset messages, and support cases before making changes. Export records lawfully and minimize copies. Do not factory-reset devices first if that may erase useful history.
3. Secure the owner and recovery accounts
Confirm that the continuing owner controls the primary email, phone number, Apple Account, password manager, authenticator, carrier account, and vendor accounts. Review trusted devices and recovery methods, use unique passwords, and enable strong multi-factor authentication where supported. A removed Home member can still return if they control account recovery.
4. Remove the person from Apple Home
Follow Apple’s current official instructions for sharing control of a home. Record the member list before and after. Check every home if the household manages more than one property. Review remote access, accessory control, cameras, recordings, notifications, and any permissions shown by the current software. Menu names and available controls can vary by software version and role.
5. Remove access from native device apps
Apple Home membership does not necessarily remove access granted in a lock, camera, alarm, garage, bridge, or vendor app. Review owners, administrators, members, guests, installers, shared links, API tokens, linked services, and active sessions in every native app. Revoke the person, then sign out unknown or obsolete devices.
6. Revoke every door and gate credential
| Credential | Action | Test |
|---|---|---|
| Named keypad code | Delete it rather than renaming it | Old code fails; replacement works only on intended schedule |
| Home key/mobile key | Revoke the person and relevant wallet/device credential | Removed phone or watch cannot unlock |
| Fingerprint, card, or fob | Delete the exact credential and audit duplicates | Revoked credential fails at every reader |
| Mechanical key | Recover, rekey, or replace when exposure and authority justify it | Approved emergency keys work; old key does not |
| Garage, gate, or building access | Remove remotes, codes, apps, and building credentials separately | Old access fails at each boundary |
7. Rotate alarm and monitoring access
Remove the departing alarm user. Rotate shared codes, verbal passwords, monitoring contacts, call order, emergency contacts, and installer credentials when they were exposed. Verify permits and account ownership. Use provider-approved test mode before triggering monitored alarm, panic, fire, medical, or duress functions.
8. Audit cameras, recordings, and privacy
Review camera members, household roles, native-app shares, viewing devices, download links, cloud storage, local storage, smart displays, voice assistants, and privacy automations. Confirm the removed person cannot see live video, recordings, thumbnails, notifications, camera names, or activity zones. Check that cameras in private spaces remain appropriate and lawful.
9. Inspect automations and presence rules
Search for routines tied to the departing person’s phone, presence, voice, button, code, or schedule. Remove or rebuild routines that unlock, open, disarm, change camera privacy, suppress alerts, or simulate occupancy. Do not rely on presence as proof of identity for high-impact actions.
10. Review hubs, bridges, and Matter access
Inventory Apple TV and HomePod home hubs, Thread border routers, Matter controllers, bridges, and vendor hubs. Confirm which account owns each device and where automations run. Removing an Apple Home member may not remove access from another Matter fabric or vendor account. Remove only known stale access, then test accessories after changes.
11. Decide whether network credentials must change
Change Wi-Fi and router-administration credentials when the departing person knew them and continued access creates risk. Review unknown clients, remote administration, DNS, port forwarding, guest access, and shared passwords. Plan the reconnect order for hubs, cameras, bridges, locks, displays, and backup communication before changing the network.
12. Test removed access
- Confirm the removed person is absent from Apple Home and every native app.
- Try each revoked code, key, fob, card, mobile credential, and remote under safe conditions.
- Verify old alarm credentials cannot arm, disarm, or change users.
- Confirm camera live view, recordings, notifications, and sharing no longer work.
- Test a priority door for sensor, alarm, siren, alert, history, and monitoring response.
- Test internet loss, AC-power loss, primary-phone loss, and recovery ownership.
- Recheck after device sync, firmware updates, and 24 hours.
What not to do
- Do not assume Apple Home removal revokes every vendor account or physical credential.
- Do not rename an old lock code and treat it as a new credential.
- Do not leave recovery email, phone, or trusted devices under the removed person’s control.
- Do not reset the home before preserving evidence and confirming ownership.
- Do not test emergency or monitored functions without the proper process.
- Do not create a hidden surveillance setup or violate tenancy, employment, privacy, or recording laws.
Related security workflows
Use the HomeKit account recovery guide, smart-lock code audit, HomeKit privacy guide, and account-compromise response checklist when offboarding exposes a broader problem.
Where Abode fits
For a home using Abode alongside Apple Home, review Abode app users, alarm codes, automations, cameras, locks, monitoring contacts, plan status, cellular backup, Apple Home residents, and any native vendor shares separately. Compare the Smart Security Kit and current Abode plans.
Verdict
Member removal is complete only when the old Apple Home role, native-app shares, sessions, lock and alarm credentials, camera access, automations, physical keys, network access, and recovery paths have been reviewed—and the removed access fails in a real test.
FAQ
Does removing someone from Apple Home remove their smart-lock code?
Not necessarily. Lock codes and native-app access may be managed separately. Delete and test every credential.
Should I change the Wi-Fi password after someone moves out?
Change it when the person knew it and continued network access creates risk. Plan device reconnection first.
Does removing a Home member remove camera access?
It removes the Apple Home role, but a native camera account, sharing link, session, or another platform may still grant access.
How do I prove offboarding worked?
Confirm the person is absent from every account and test that each old digital and physical credential fails.
