Systems and techniques are provided for security system re-arming. Input invoking restricted credentials may be received. The security system of an environment may be changed from a first mode to a second mode based on the restricted credentials. The restricted credentials used to change the security system to the second mode may be determined to be near expiration based on an expiration condition of the restricted credentials. A notification may be sent to a person associated with the restricted credentials including a reminder to use the restricted credentials to change the security system to the first mode before the restricted credentials expire.