Passing the Business On: The Cyber Handover Maine Family Companies Skip

Across Maine, thousands of family businesses will change hands this decade - to children, to employees, to buyers. The lawyers will handle the entity and the accountants the books. Almost nobody will handle the passwords.

The outgoing generation often holds the digital keys informally: the banking portal, the domain registrar, the vendor accounts, the email that everything resets through. When the handover is a handshake and a filing cabinet, the new owners inherit access they cannot see and the old owners keep access nobody meant them to keep.

A cyber handover is a short, deliberate list: what digital assets exist, who holds the keys today, and who will hold them on the first day of the new ownership.

TLDR

• Inventory the digital keys before the transition: domains, banking, email, vendor and software accounts.

• Transfer ownership of accounts formally; do not just share the passwords.

• Revoke the outgoing generation's routine access, with gratitude and a record.

• Reset shared credentials and review who the reset emails actually reach.

• Do it in the first month, while everyone is still talking to each other.

The keys are the business now

Thirty years ago a handover meant the building, the equipment and the customer list. Today the business also lives in the domain name, the banking portal, the scheduling system, the supplier logins, and the email address that every one of those uses for password resets.

Whoever controls that email controls the business in a very practical sense. If it is a personal account, or an address that retires with the founder, the new owners are one forgotten password away from a very bad week.

Make the list before the lawyers finish

This fictional example shows a handover list for a small company. It is an illustration, not a real inventory.

Asset	Held by today	Transfers to	Done
Domain and website accounts	Founder (personal email)	New owner, company email	Pending
Online banking	Founder + bookkeeper	New owner + bookkeeper	Pending
Supplier and software logins	Mixed, mostly founder	Operations lead	Pending
Social media and listings	Founder's daughter	Marketing hire	Pending

The list is rarely long - twenty to forty items for most small companies - but it is never written down unless someone makes it a task. Make it a task, with a date inside the transition plan.

Transfer, do not share

Sharing the founder's password feels easier and is the expensive way. Change each account's registered owner and contact email to the new holder, add the new person as administrator, then remove the old one. Where a service allows it, note the change date in your records.

Reset shared credentials at transfer. The point is not distrust; it is that access should reflect reality, and 'everyone who has ever had the password' is not a list anyone can defend later.

Keep the goodwill, cut the access

The founder often stays close - advising, helping through the first season. That relationship is an asset; their standing access to the banking portal is not. Give the transition a clean boundary: routine access ends on the agreed date, and anything the founder needs afterward is granted deliberately, per occasion.

Handled plainly and early, this protects both sides. The new owners get a system they can actually account for, and the founder is never in the uncomfortable position of being blamed for an incident on accounts they no longer run.

The related discussion of reframing the security role is worth your time alongside this one.

Frequently asked questions

When in the succession process should this happen?

Start the inventory as soon as the transition is real, and complete the transfers in the first month of new ownership. The longer informal access runs, the harder it is to see and the more awkward it is to change.

What if the founder set everything up and cannot remember what exists?

Reconstruct from evidence: bank statements for subscriptions, the email account for signup confirmations, and the browser's saved passwords on the office machine. It takes an afternoon and finds things nobody remembered.

Do we need outside help?

A local IT provider can run the inventory and transfers in a day or two for a small company. The value is not technical depth; it is having someone who has done the list before and knows what gets forgotten.

A Defensible Next Step

If your business will change hands in the next five years, start the digital key list now - one page, twenty lines. It is the cheapest item in the whole transition. Book a Decision-Clarity Call if you want the list template.