What to do if…
you are locked out of your payroll or HR system before a deadline
Short answer
Raise an urgent IT incident by phone and tell your payroll or HR lead in writing immediately. Ask for the approved emergency access route or payroll contingency so pay, approvals, and any required HMRC reporting are protected without unsafe shortcuts.
Do not do these things
- Do not share passwords, MFA codes, recovery links, or ask someone to log in as you.
- Do not send payroll or HR personal data over personal email, messaging apps, or unapproved file-sharing.
- Do not keep trying random passwords until the account hard-locks or triggers a security block.
- Do not create unapproved accounts, shadow spreadsheets, or manual files that bypass payroll controls.
- Do not wait silently because the deadline feels embarrassing; late notice makes the risk harder to manage.
- Do not promise employees a payment time or workaround unless payroll leadership has authorised it.
What to do now
-
Write down the essential facts. Note the time, system name, username or work email affected, error message, device or VPN status, and the deadline at risk, such as payroll cutoff today, pay day tomorrow, timesheet approval, or HMRC RTI filing. Take screenshots if you can do so without exposing unnecessary personal data.
-
Try the approved reset route once. Use your employer’s normal SSO, password, MFA, VPN, or service desk reset route carefully. If it fails, or if the deadline is close, stop guessing and escalate.
-
Call IT or the service desk, not just email. Ask them to log it as time-critical because payroll, HR approval, employee pay, or HMRC reporting may be affected. Ask for the incident number, priority level, and the team or person owning the fix.
-
Ask for the approved emergency access route. Use clear wording: “Is there a break-glass, emergency access, delegated approver, or payroll-critical access process? Who can authorise it now?” If there is no emergency access route, ask what documented payroll contingency should be used instead.
-
Tell payroll or HR leadership in writing immediately. Send a short message with the deadline, affected system, IT incident number, what you cannot do, and the decision needed. Ask whether they want to reassign approvals, activate a manual payroll contingency, extend an internal cutoff, or use another approved route.
-
If pay day or the pay run is at risk, ask payroll to trigger the contingency now. Ask the payroll owner to confirm in writing what approved process will be used if access is not restored in time, such as an emergency payment process, reassigned approval, or documented alternative payroll process. Do not use “last known data” or estimates unless your organisation’s process allows it and a senior owner authorises it.
-
Send only the minimum critical payroll inputs through approved channels. If payroll needs timesheets, starter or leaver changes, overtime approvals, or absence information that only you hold, send the minimum necessary through the secure work channel your organisation approves. Keep a record of what you sent, when, and to whom.
-
If an HMRC RTI submission may be late, preserve the incident record. Ask the payroll lead to keep the ticket, timestamps, screenshots, and access notes. If a Full Payment Submission has to be sent after payday, the payroll process should use the official late reporting reason options in the payroll software or HMRC process rather than invented wording.
-
If you are an employee worried your own pay may be affected, put it plainly in writing. Email payroll, HR, or your manager: “I am locked out of the system and I am concerned this may affect my pay on the usual pay day. Please confirm when I will be paid and whether an emergency payment process is available.” Keep a copy.
What can wait
- You do not need to decide who is at fault right now.
- You do not need to write a long explanation; a short record of who, what, when, and the deadline is enough.
- You do not need to reinstall apps, change devices repeatedly, or try multiple fixes unless IT asks you to.
- You do not need to start a formal grievance or dispute route unless pay is actually missed and your employer does not resolve it.
- You do not need to redesign payroll access controls during the deadline; that can be reviewed after the immediate risk is handled.
Important reassurance
Payroll and HR lockouts are stressful because they happen against fixed cutoffs. The safest move is fast escalation, written handover to the right owner, and a clean record of what happened. That protects people better than risky shortcuts.
Scope note
These are first steps to stabilise the immediate access and deadline risk. Later decisions about payroll correction, HR process, IT security, tax reporting, or employment rights may need specialist help from the right internal team or an external adviser.
Important note
This guide is general information, not legal, HR, tax, IT security, financial, therapeutic, or professional advice. Follow your employer’s security and payroll procedures, and get proper authorisation before using emergency access or manual payroll processing.
Additional Resources
- GOV.UK — What happens if you do not report payroll information on time
- GOV.UK — Running payroll: Sending an FPS after payday
- Acas — Checking your wages - If wages are not paid
- Acas — Handling unpaid wages - If wages are not paid
- Acas — Raising an issue with your employer - If wages are not paid
- National Cyber Security Centre — Password policy: updating your approach
About this guide
This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.