HomeKit Security Window Cleaning Visit Checklist 2026: Access, Cameras, Alarms, and Closeout

A scheduled window-cleaning visit should not require a permanent door code, a household Apple ID, or the main alarm PIN. Keep a responsible adult present when practical. If a verified cleaner needs independent entry, issue one named, short-lived smart-lock code and remove it before the job closes.

This checklist covers a scheduled interior, exterior, or full-property window-cleaning visit, including screens, tracks, skylights, and approved high-level glass. It covers access, alarms, cameras, ladders, open windows, pets, failures, and closeout. It does not replace the work order, ladder and fall-safety plan, lease, building rule, insurer requirement, manufacturer instruction, or local law. Stop when the crew member, route, height access, open-window rule, or emergency contact is unclear.

Start with the no-code default

If the resident, owner, or property manager will be present, meet the cleaner at the agreed entrance, verify the work order, disarm only the required area, and supervise the route. The cleaner normally does not need a lock credential, Apple Home membership, alarm user, camera account, Wi-Fi password, or smart-home administrator role.

Independent entry may be reasonable for a verified lead cleaner during a narrow appointment window. Record why it is needed, who approved it, which door it opens, when it starts, when it expires, and who will remove it. If those answers are missing, use supervised entry.

Build one window-cleaning access sheet

Give the resident, property manager, and lead cleaner one current sheet. Keep permanent codes, alarm PINs, Wi-Fi passwords, master-key locations, and unrelated household information off it.

• Property address, unit, service entrance, parking or loading rule, and allowed route.
• Resident or owner contact and a second emergency contact.
• Company, booking number, lead cleaner, expected vehicle, crew size, and arrival window.
• Interior and exterior windows, screens, tracks, skylights, roof or balcony access, and excluded rooms.
• Ladder, pole, lift, rope-access, hose, water, and power methods approved in the work order.
• Occupants, pets, fragile items, open-window limits, privacy rooms, and weather stop rules.
• Doors, gates, windows, and alarm zones that may be opened, who watches them, and when they must be secured.
• Who controls the alarm, cameras, HVAC, fans, blinds, curtains, and smart locks.
• Temporary-code label, start, expiry, removal owner, and tested fallback entry.

Verify the company, lead cleaner, and job scope

Match the company, booking reference, arrival window, crew member name, and expected work against the confirmation already held. Use a known company number when the crew member, vehicle, timing, or scope changes. A uniform, logo, text message, or caller ID alone is not enough.

Ask the lead cleaner to identify any second crew member or subcontractor before entry. Confirm any licence or certification required for the work and location through the appropriate local process. A code assigned to “window cleaning” creates a weak audit trail. A code assigned to the verified lead and exact visit window shows who was responsible.

Map the route before the crew enters

Walk from the service vehicle to every approved window. Check the building entrance, lift, stairwell, unit door, side gate, balcony, courtyard, roof access, garden, hose route, ladder position, and waste-water path that apply. Remove trip hazards without blocking a latch, closer, smoke door, emergency exit, alarm sensor, or camera.

• Use one working entrance where practical.
• Lock offices, document storage, medicines, valuables, and rooms outside the job.
• Move keys, fobs, remotes, spare phones, and alarm notes away from the route.
• Move fragile items and furniture only through an agreed process; photograph condition first when lawful.
• Do not wedge a common security or fire door without written authority.
• Keep ladders, poles, hoses, and lifts clear of cameras, sensors, power lines, gates, traffic, and emergency paths.
• Assign one person to every open exterior door, window, balcony, or gate when children or pets are present.

Separate window access from security authority

The crew may need access to approved glass, screens, tracks, blinds, curtains, balconies, roof areas, garden edges, hose points, or power. That does not grant permission to change Apple Home residents, add a lock user, reset a camera, browse event history, receive a Wi-Fi password, disable an unrelated alarm zone, or enter a private room outside the job.

Record who may open each window, move each blind or curtain, relocate a camera or sensor, use a roof hatch, place a ladder, or connect water and power. Photograph the approved position of a security device before moving it when lawful. Restore it at closeout and repeat its functional test. Never wet, cover, lean on, unplug, or relocate a security device without approval and the exact equipment instructions.

Control open windows, ladders, water, and privacy

List every opening that will be unlocked and who is responsible for it. A window left open can defeat an alarm zone, create an entry route, expose a child or pet, admit weather, or leave the property unsecured after the crew moves on. Use one room at a time where practical and close, latch, and test it before opening the next.

Confirm the ladder or high-access method, weather stop rule, ground condition, roof or balcony authority, hose route, interior water protection, and electrical clearance through the approved company plan. A home-security app does not approve ladder placement, fall protection, rope access, lift use, or work near power lines. Keep private rooms closed until their agreed work window and close curtains or blinds again at handoff.

Create a named temporary code only when needed

Use a code unique to this visit. Do not derive it from the address, unit, phone number, appointment date, or an existing household code. Label it with the company, lead cleaner, and date. Set the shortest supported start and end times.

1. Confirm the exact person who will receive the code.
2. Create a new user rather than sharing an owner, child, cleaner, guest, or maintenance credential.
3. Limit the schedule to the verified arrival and closeout window.
4. Send it through the agreed channel to the named lead only.
5. Ask the lead not to forward it; the lead admits any verified second crew member.
6. Test the code once with the responsible resident present.
7. Record the label and expiry, but not the digits, on the service sheet.

Use the smart-lock access-code audit for a wider credential review. If the lock cannot label or schedule codes, create the code immediately before entry and delete it at closeout.

Keep the alarm PIN and lock code separate

A lock code opens one door. An alarm user may expose the whole property, user list, history, emergency contacts, and response settings. The resident should normally disarm the required area before work and re-arm it after closeout.

If independent alarm access cannot be avoided and the exact system supports a limited named user, make it separate from the door code and remove both together. Do not place an alarm PIN on a clipboard, cleaning plan, tool record, vehicle note, keypad cover, or general work order.

Choose the door and gate state deliberately

Repeated entry may slow a perimeter inspection, but a door or gate held open creates an unlogged access period and a pet-escape risk. Decide the state before work starts.

• Resident-controlled open period: the resident unlocks the entrance, stays responsible for it, and relocks it during breaks.
• Closed between trips: the verified lead uses the temporary code for each entry and confirms the door latched.
• Building-controlled access: concierge or management controls common doors, lifts, roof access, and plant rooms.

Check auto-lock and gate automation before the visit. A deadbolt extending against an open door can damage hardware. A gate closing on equipment, a person, or a pet creates a different risk. If a normal setting is paused, name the person and time responsible for restoring it.

Set camera privacy before the visit

Cameras may confirm arrival and service-route activity, but indoor recording can capture crew members, conversations, labels, documents, children, or private rooms. Follow local notice and consent rules. Aim cameras only at lawful security zones and do not use an appointment as a reason to add hidden recording.

Review the security-camera privacy guide and HomeKit camera privacy-zone guide. Confirm timestamps, event recording, retention, access roles, and lawful export. A live thumbnail does not prove an event was recorded.

Plan for lock, phone, network, and power failure

At least one day before the visit, test the physical key, emergency-power method, battery state, app sign-in, Bluetooth or network path, and offline behavior. The fallback belongs to the responsible resident or manager, not the whole service crew.

• Run the battery and lockout-prevention checklist.
• Test the documented smart-lock emergency-power method.
• Record offline behavior in the internet-outage test log.
• Keep a verified property manager or locksmith contact for a physical failure.

Do not leave an emergency key under a mat, inside an unlocked meter box, near a service entrance, or with an unverified crew member.

Use this window-cleaning visit runbook

Thirty minutes before arrival

1. Confirm company, lead cleaner, vehicle, booking, crew size, scope, and arrival message.
2. Check weather, approved height-access method, open-window limits, water and power routes, and stop rules.
3. Check lock battery, physical key, app sign-in, normal lock action, alarm state, and camera state.
4. Secure excluded rooms, keys, documents, medicines, fragile items, pets, and valuables.
5. Create and test the named temporary code only if the written plan calls for one.

At arrival

1. Meet the lead before admitting the crew.
2. Confirm identity, job scope, windows, screens, tracks, ladders or lift, hose route, roof or balcony access, and finish time.
3. Walk the allowed route, excluded rooms, open-window rules, alarm boundaries, camera notice, pet controls, and emergency exit.
4. Test the temporary code with the lead only when independent entry is part of the plan.

During the visit

1. Keep one person accountable for every open entrance, gate, balcony, and window.
2. Close and latch each opening before the crew moves to the next unattended zone.
3. Relock during breaks, supply runs, vehicle changes, building delays, and unattended periods.
4. Stop an unconfirmed crew member, method, room, roof area, ladder position, or scope change.
5. Record significant access, spill, damage, fall, lock, alarm, camera, pet, or entry event in the incident timeline worksheet.

Close access before the cleaner leaves

1. Walk the route and check every exterior, common, internal, roof, subfloor, garage, and excluded door used.
2. Confirm every window and screen is closed, latched, dry, and undamaged; blinds, curtains, furniture, cameras, sensors, ladders, hoses, tools, and waste are restored or removed as agreed.
3. Confirm the lead holds no physical key, fob, remote, alarm PIN, Wi-Fi password, or household account.
4. Delete the window-cleaning lock code and any temporary alarm user.
5. Try the deleted code at the door and confirm it fails.
6. Restore auto-lock, gate, alarm, notification, camera, privacy, fan, HVAC, and window settings controlled by the owner.
7. Test any moved sensor or camera and confirm its original job still works.
8. Save the service report, work record, finish time, follow-up date, and emergency contact.

Use the temporary-code removal checklist as a separate closeout record.

Run a 60-minute access test before the visit

1. Create a test code with the same schedule type planned for the cleaner.
2. Confirm it fails before the window, works during it, and fails after expiry.
3. Test lock, unlock, auto-lock, door-ajar alert, and the physical key.
4. Test the documented emergency-power route.
5. Disconnect the internet and record which local functions remain.
6. Confirm who receives entry, failed-code, tamper, low-battery, and door-left-open alerts.
7. Remove the test code and verify at the keypad that it no longer works.
8. Restore normal settings and save the result with the appointment sheet.

Do not start until these blockers are cleared

• The company, booking, lead cleaner, required licence, vehicle, product, method, or scope cannot be verified.
• The ladder, lift, roof, balcony, weather, water, power, open-window, or pet-control plan is unclear.
• No responsible person is assigned to an open door or gate.
• The only available credential is a permanent household or master code.
• The lock battery, physical key, emergency power, app, or offline path has not been tested.
• A lease, building, fire-door, roof-access, insurer, or local rule is unresolved.
• The plan requires giving the whole crew the main alarm PIN or household account.
• Camera notice, consent, privacy, or retention requirements are unclear.
• No one is assigned to delete credentials, restore devices, and verify failure at closeout.

HomeKit security window-cleaning visit FAQ

Should a window cleaner receive my normal door code?

No. Use supervised entry or a named, short-lived code for the verified lead when independent access is necessary.

Should the crew receive my alarm PIN?

Usually not. The resident should control arming and disarming. If a limited named alarm user is unavoidable, keep it separate and remove it with the lock code.

Should I bypass window sensors for the whole day?

No. Limit bypasses to the exact work zone and time supported by the system, keep a responsible person assigned, then close and test every opening before restoring the alarm.

What if the appointment runs late?

Confirm the delay through a known company channel. Extend a temporary credential only after the new finish time and access need are agreed.

When should the temporary code be deleted?

Delete it during closeout before the lead cleaner departs, then test it at the door and confirm it fails.