Knowledge Base
Buyer's Guide

Your Old Security Vendor May Still Have Access: How to Check and Remove It

You changed security companies, or the old one disappeared. Their name is off the invoices. But their login may still be sitting in your Alarm.com, Brivo, Eagle Eye or ButterflyMX account.

PAX Security7 min readNovember 2, 2026
Quick Answer

For each platform, look at the list of people who can log in and who can manage the account, remove anyone who shouldn't be there, and write down who holds each administrator role now. Alarm.com has a 24/7 Managed Access setting that lets you see and revoke a provider's access. Brivo, Eagle Eye and ButterflyMX each have an administrator or user list. None of the vendors we read say they show every kind of dealer or reseller access, so if something doesn't look right, call us and we will help. Don't cancel service or reset equipment while you sort this out.

That doesn't mean anyone is doing anything wrong. Installers add themselves so they can service your system. It's normal. It's also easy to forget, and it stays there until someone removes it.

Here's how to check each platform and what to do about what you find. Use each vendor's own steps. Where a vendor doesn't say, we say so too.

Before you start

  • Work from the vendors' dashboards and apps only. Don't open, unplug or move any panel, switch or recorder.
  • Don't change camera passwords as a cleanup step. Eagle Eye warns that changing a camera's credentials in its dashboard, without changing them in the camera, takes the camera offline.
  • Keep monitoring and service running until a replacement is in place.
  • Write down what you find: platform, name, email and role. Don't write passwords.

Alarm.com

  1. Check 24/7 Managed Access. Log in to the Alarm.com customer website, click Settings, then 24/7 Managed Access Settings. Alarm.com says this is where you control which categories your provider can manage, such as arming and disarming, viewing live video and images, user code management and login management.
  2. Revoke or narrow it, if this provider is no longer yours. Click Opt-Out of Managed Access, or choose the specific features to exclude, then click Save. Alarm.com says you can update or revoke your provider's access at any time.
  3. Review the logins. On the website, click Users, then Manage Logins. Look for names and emails you don't recognize. You can set a permission level for each login and choose which devices it can see.
  4. Turn on two-factor authentication if it isn't on. Alarm.com offers it as an extra step for account security.

What the page doesn't say: Alarm.com's help pages don't list every way a provider can reach your account. If your provider is gone and you're not sure what they can still do, see what to do when your alarm company stops answering.

Note that Alarm.com's help pages are written mostly for homes. A commercial account can look different.

Brivo Access

  1. Open the administrator list. Log in, click Settings, then Administrators under the Admin heading. Brivo says an administrator is anyone with login access to Brivo Access.
  2. Look for strangers. Check each name and email. Is it a current employee? Is it a former manager? Is it the former installer?
  3. Remove access. Click the person's name. You can remove all of their Administrator Roles to suspend them, or click Delete Administrator to remove them. Brivo says an administrator can also be a user, and the two profiles are separate, so check the user list too.
  4. Check what changed. Brivo's FAQ says a Journal Report shows administrative actions with the time and the name of the administrator who took them. It's a good way to see what the old vendor changed and when.

Our guide to adding and removing Brivo administrators has the full steps.

What the page doesn't say: Brivo's pages don't describe reseller or dealer access that wouldn't appear in your administrator list. We can't tell you what you will or won't see there.

Eagle Eye Networks

  1. Review the users on your account. Eagle Eye says an administrator has all permissions, including managing users. If you're an administrator, check each user and what they can do. Remove users who shouldn't be there.
  2. Check who has the Edit Users permission. Eagle Eye says that permission lets a user manage other users.
  3. Understand the reseller role. Eagle Eye says some features depend on the agreement with your reseller. An administrator may be unable to change things that affect billing, such as adding bridges and cameras, camera resolution and retention. For those, Eagle Eye says to contact your reseller.

That last point matters. If your old installer was your reseller, billing-related changes may still go through them. The pages we read don't say how an account is moved to a new reseller, so we won't guess. Eagle Eye support is at support@een.com.

Don't change a camera's login in the dashboard. Camera logins are for a technician to handle.

ButterflyMX

  1. Open the Administrators tab. In the ButterflyMX admin dashboard (log in through a browser at butterflymx.com), the Administrators tab lists everyone with administrator access.
  2. Check the names. Look for anyone who is no longer connected to your building.
  3. Ask for removal. ButterflyMX says that to add or delete an administrator, you contact your client success manager.
  4. Check passes. The Active Visitor Access tab shows active visitor passes sent by tenants and administrators. Look for any that shouldn't be active. ButterflyMX's own guidance is to review active passes regularly and delete the ones that are no longer needed.
  5. Tenant emails. If a tenant's email needs to change, ButterflyMX says to contact support@butterflymx.com.

What to do after you check

  • Change shared passwords for your Alarm.com, Brivo, Eagle Eye and ButterflyMX logins if the old vendor may have known them. Leave camera, recorder and panel passwords to a technician.
  • Remove old users and administrators, but first make sure at least one current administrator you control can log in on that platform.
  • Make sure each platform has at least two current administrators, using mailboxes your company controls.
  • Write down who holds each administrator role. Don't write passwords.
  • Remove old vendor credentials, fobs and codes. Our guides to vendor access and who has access to your building cover the rest.

What you can't check from the dashboard

Some access is on the equipment itself, such as local logins on a recorder, camera or panel. You shouldn't change those yourself, and no reset is a safe shortcut. If you think the old vendor may still hold one of these, call us and we will help.

If you'd rather not do it alone

If you find a login you don't recognize, can't tell which account it belongs to, or can't remove it yourself, call PAX at (855) 440-5353 or email info@paxsecurity.com. You can also reach us through https://paxsecurity.com/contact-us. Our System Takeover page explains how we assess what's there and plan the transition to minimize disruption.

Sources

Frequently Asked Questions

Does the old vendor still having a login mean something is wrong?

Not necessarily. Installers often add themselves so they can service a system. It's still worth removing once they're no longer your vendor.

Will removing the old vendor's access turn anything off?

Removing a login is not the same as removing equipment. Still, make one change at a time, so you can tell what caused any surprise, and don't cancel service while you do it.

Can I see everything a vendor can access?

Not always. The vendors we read don't say they show every kind of dealer or reseller access. That's why we say "check" rather than "guaranteed."

Who should do this?

Someone with administrator access on each platform. If nobody does, start with what to do when you have no admin login.

Not sure what your property needs?

PAX Security designs and installs security cameras, access control, intercom, and cabling systems for commercial and multifamily properties across New York City. Tell us about your building and we will give you a straight answer.

Call UsGet a Quote