I got asked if I would be interested in taking over some duties with updating information on a small website from time to time, creating new pages for events, etc. as the last volunteer hasn't done anything since July. It's a word press site and it's somewhat of a mess. There were broken links all over the place either from someone moving files or just outdated. The design is also a hot mess. So I got login details from someone else's account to start with which is a huge red flag and I spent some time fixing broken links and recovering missing PDF files from Internet archive. I fixed some things with contact emails and dates being incorrect, etc. Then the next day I noticed that the original guy is in there making edits and new pages, which have broken links and look horrible like he never checked his work. I also realized that the account I have has no access to create new elements on a page I can only edit things like text, links, and images within existing elements. So now I'm in an awkward situation where it looks like the last guy caught wind of someone new helping out and decided to now get involved again. If I'm going to have my name on this thing I don't want it to look like shit the way it does now, but I already committed. I haven't talked to anybody about it yet, so hopefully it becomes a graceful handover or they take responsibility back so I don't have anything to do with it.
Why does the old person still have access? First of all, change the credentials. ‘cause it sounds like the nonprofit has no concept of cyber security.
It sounds like the old person fell off the map, they let him go, and now he’s trying to keep his position, all the while still failing to communicate with anyone properly.
You need to be the communication they lack and ask them to make a choice. If they say something like “well, he still wanted to work and we couldn’t say no.” just walk away.