IT & Access Setup Email

IT credentials should be sent on the new hire's first day, ideally in the morning before they arrive or as their first email upon login. Some organizations send credentials the afternoon before the start date to allow for pre-setup, but this depends on your security policies. Never send credentials more than 24 hours before the start date, as this creates an unnecessary security window where unused accounts are active. The principle of least privilege suggests that access should be provisioned as close to the time of need as possible. Coordinate with your IT team to ensure accounts are created and tested before the email is sent.

An IT setup email should include the new hire's corporate email address, a temporary password with instructions to change it immediately, VPN setup link and instructions, IT support team contact information, and a list of first-day setup tasks (password change, two-factor authentication, security policy review). For roles that require specific software, include download links or instructions for requesting access through the IT portal. The most common first-day technical issues are password problems, VPN connection failures, and missing software access. Addressing all three proactively in the setup email reduces support ticket volume by approximately 40%.

Never include permanent passwords in email. Always use temporary passwords that expire after first use and require an immediate change. Consider sending the email address and password through separate communication channels (for example, the email address via email and the temporary password via SMS or a secure portal). Ensure the email instructs new hires to enable two-factor authentication as their first action. The IT setup email is both an onboarding tool and a security touchpoint that establishes good practices from day one.

Provide clear escalation paths in the IT setup email. Include the IT support team's email address, phone number, and availability hours. For organizations with helpdesk ticketing systems, include the portal link and instructions for submitting a ticket. Designate a specific IT buddy or support person for new hires on their first day. New employees are often reluctant to submit support tickets during their first week because they do not want to appear incompetent. A designated contact person who proactively checks in removes this barrier and resolves issues faster.

Yes, remote employees typically need more detailed IT setup instructions because they do not have immediate access to in-person IT support. Remote-specific additions include detailed VPN installation steps with screenshots, home Wi-Fi security recommendations, instructions for setting up collaboration tools (Slack, Teams, Zoom), and guidance on hardware setup if company equipment was shipped. On-site employees may need Wi-Fi connection details, printer setup instructions, and physical security information like badge access.

For batch onboarding, create a provisioning checklist for the IT team that lists each new hire alongside their required access levels, software, and equipment. Use a shared tracking document or your IT service management tool to monitor provisioning progress for each individual. Send IT setup emails individually (not as a group email) to maintain security and personalisation. Each new hire should receive only their own credentials. Batch provisioning should begin at least three business days before the start date to allow time for testing and troubleshooting before the new hires arrive.

The most common two-factor authentication methods for corporate environments are authenticator apps (Google Authenticator, Microsoft Authenticator, or Authy) and hardware security keys (YubiKey). Authenticator apps are the most widely used because they do not require additional hardware. Include step-by-step instructions for setting up the organization's preferred two-factor method. Specify which accounts require it (email, VPN, internal tools) and provide backup recovery options in case the employee loses access to their authentication device.

Pre-first-day IT setup is possible and increasingly common, especially for remote employees who need equipment shipped and configured before their start date. However, it requires careful security planning. Temporary passwords should have short expiration windows, and accounts should not have access to sensitive systems until the employee is formally active. Some organizations provide a self-service onboarding portal where new hires can complete setup tasks like password creation, software installation, and security training before day one.