I'm leaving a company I've been with due to the boss reneging on various promises, bonuses, etc. After declining counter-offers and other incentives, the boss started become hostile towards me, and she's now demanding that I hand over account credentials for various company accounts (third-party services for code storage, version control, etc), all of which she can easily reset by logging in as an administrator. She has also demanded that I hand over credentials for my personal email account to make sure I don't have any company emails or IP.
I replied that my personal email is my own property, and that it was never used at the office or for my work. I also noted that the other accounts could simply have their respective passwords reset by using the "administrator tools", and that I will not be providing the logins, as I've already agreed to the legal terms of service for those other websites, which demand I do not share my credentials. I finally noted that she can contact those respective sites for help resetting the passwords, and that there would be no loss of data by doing so.
Did I conduct myself professionally? Are there any circumstances under which I should provide those account credentials (other than my personal email)? Finally, should I just outright tell her "I can't give you those because the only reason you could need them is to impersonate me".
This is in Eastern Canada.