Before You Start

• Understand Company Policy: Review your company's IT and data retention policies. This will clarify what data the company considers its property and what your obligations are regarding data on company-issued devices.
• Identify Your Accounts: Clearly differentiate between your company-provided Google Workspace account (e.g., your.name@yourcompany.com) and your personal Google account (e.g., your.name@gmail.com). This distinction is critical.
• Backup Personal Data ONLY: If you have any personal files or information stored on a company device or within a company-managed account (which you generally shouldn't), back up only your personal data to your personal cloud storage or device. Never take company proprietary information.

Google Workspace Account (Company Account)

Your company Google Workspace account and its contents (Gmail, Drive, Calendar, etc.) are generally the property of the company. You cannot "wipe" this data as the company retains control.

• Remove Personal Links: Ensure your company Google account is not linked to any of your personal devices, browsers, or services.
• Review Shared Files: Check your company Google Drive for any personal files you might have accidentally stored there. If found, delete them (if permitted) or move them to your personal storage. Remember, deletion on a company account may not be permanent from the company's perspective.
• Sign Out Everywhere: If you used your company account to sign into personal websites or applications, sign out of them. Where possible, revoke access for the company account from third-party applications.

Your Personal Google Account

This is where the risk of the company accessing your passwords through Chrome comes in. The key is to ensure your personal Google account is completely isolated from any company-managed environments.

• Sign Out from All Company Devices:
  • Go to your personal Google Account Security page: myaccount.google.com/security.
  • Under "Your devices," review "Manage all devices." Sign out of your personal Google account from any device that belongs to the company.
• Review Third-Party App Access: On your personal Google Account Security page, go to "Third-party apps with account access." Review the list and remove access for any applications you linked via your personal account while on a company device, or any that seem suspicious or work-related.
• Reset Chrome Sync (Crucial for Passwords):
  • On your personal Google Account, go to myaccount.google.com/data-and-privacy.
  • Scroll down to "Data from apps and services you use" and find "Synced from Chrome."
  • Select "Review synced data" and then choose "Clear data." This will stop all devices from syncing and delete your synced data (history, passwords, bookmarks, etc.) from Google's servers. You can then re-enable sync on your personal devices from a fresh state. This is the most effective way to ensure passwords are not accessible via sync.
• Change Password & Enable 2FA: As a precaution, change the password for your personal Google account. Ensure Two-Factor Authentication (2FA) is enabled and set up with your personal phone number or authenticator app.

Chrome Browser Management

The concern about signing into "My Chrome browser" and taking passwords is valid if you used a personal Chrome profile on a company device or linked your personal Google account to a company-managed Chrome profile.

• Separate Profiles: In the future, always use separate Chrome profiles for work (logged in with company account) and personal use (logged in with personal account).
• On Company Device(s):
  • Remove Personal Chrome Profile: If you created a personal Chrome profile on a company device, remove it entirely. In Chrome, go to chrome://settings/manageProfile (or click your profile icon in the top right, then the gear icon next to "Other profiles") and delete your personal profile.
  • Sign Out of All Google Accounts: Ensure you are signed out of all Google accounts (personal and company) from every Chrome browser instance on the company device.
  • Clear Browser Data: For any Chrome profiles you used on the company device, go to chrome://settings/clearBrowserData. Select "All time" for the time range. Check "Browsing history," "Cookies and other site data," "Cached images and files," and crucially, "Passwords" and "Autofill form data." Clear the data. Repeat this for all relevant profiles if you used multiple.
• On Your Personal Device(s): Verify that your personal Chrome browser is only logged in with your personal Google account and that no company accounts or profiles are active.

Local Device Management (Company-Issued Computer)

• Uninstall Personal Software: Remove any personal applications you installed on the company computer.
• Delete Personal Files: Delete any personal documents, photos, or other files from the desktop, documents folder, downloads, recycle bin, etc. Be aware that IT might be able to recover these files, so avoid storing highly sensitive personal information on company devices.
• Sign Out of Cloud Services: Sign out of all personal cloud storage services (Dropbox, OneDrive, iCloud for Windows, etc.) on the company device.
• Clear Browser Data (Non-Chrome): If you used other browsers (Firefox, Edge, Safari) for personal use, clear their history, cookies, and cached data, and sign out of any personal accounts.

Other Cloud Services & Applications

• Review Connected Accounts: If you connected your personal accounts (e.g., Dropbox, Slack, Trello, Jira) to your company's systems or used them extensively on company devices, ensure you sign out of them on the company device.
• Change Passwords: Consider changing passwords for any critical personal services (e.g., banking, social media, email) if you ever accessed them or saved their passwords on the company device.

Physical Device Return

• Remove Personal Hardware: If you added any personal hardware (e.g., an external drive, custom keyboard, monitor), remove it.
• Remove SIM Cards: If you were issued a company phone that you used personally with your own SIM card, remove it.
• Factory Reset (with IT approval): For company-issued mobile devices, a factory reset is ideal, but you MUST get explicit permission from IT before doing so, as it could remove necessary company software or management tools. If IT allows, perform a factory reset.

After Leaving

• Monitor Personal Accounts: Keep an eye on your personal email accounts, bank statements, and credit reports for any unusual activity.
• Check for Notifications: Be alert for any unexpected login alerts or notifications from Google or other services.