Need to avoid Admin from hijacking my site when he is let go

This is what you do:

1) Make sure there are TWO admin accounts.
a) One for your admin person to create/fix/whatever site
b) One for you, that way when she is fired/terminated/etc… you log into your admin account then just delete HER admin account BEFORE YOU TELL HER THAT YOU WILL TERMINATE HER.

A) Get a backup of your database and files.

B) Make sure you get a list of ALL admin accounts and passwords, there are LOTS of these, like the domain name, like hosting, like google webmaster tools. Suggest you say something like “Your business insurance requires it”, make it clear that the website is a business asset, like copyright employees dont get to hold porperty rights.

C) Install a wordpress security plugin like “All In One WordPress Security”, use it to scan for any backdoors that may be installed.

One more thing, if you have the access needed, there are a few other non-email ways to reset her password and basically just take over her account: https://codex.www.ads-software.com/Resetting_Your_Password

Don’t forget to also change the email address on the account if you take it over, and change your hosting account and database passwords.