- Effort
- an evening
- What changes
- Account takeover
When to tickThe manager is in use and every active account has its own generated password.
Create a password →Checklist
Fifteen steps, and most of them close tonight.
A list of things to do, with the ticks stored in this browser. Work through it in any order.
0 / 15
15 to go. Work in any order.
Access to essential accounts
- Effort
- 10 min
- What changes
- Vault access
When to tickThe master phrase is long, unique, and not stored beside the vault.
Build a passphrase →- Effort
- 15 min
- What changes
- Mail account takeover
When to tickSigning into primary mail requires a second factor that does not depend on SMS.
15 min- Effort
- 10 min
- What changes
- Account recovery
When to tickCurrent backup codes are offline and reachable if the second factor is lost.
10 min- Effort
- 30 min
- What changes
- Credential reuse
When to tickOld passwords were checked and every breached one was replaced with a unique value.
Check →Devices and recovery
- Effort
- 20 min
- What changes
- Data on a lost device
When to tickFull-device encryption is on for laptop and phone, with the recovery key stored separately.
20 min- Effort
- an evening
- What changes
- Data loss
When to tickThree copies exist on two media types, one off-site, and a test restore succeeded.
an evening- Effort
- 30 min
- What changes
- DNS metadata
When to tickDevices use the chosen trusted or self-run resolver and the setting has been verified.
Test →- Effort
- 5 min
- What changes
- Known vulnerabilities
When to tickAutomatic updates are enabled for the operating system and primary browser.
5 minBrowser and sharing
- Effort
- 10 min
- What changes
- Visit linkability
When to tickThe local report was reviewed and unusual settings were understood or simplified.
Open the report →- Effort
- 30 min
- What changes
- Secrets in chat history
When to tickActive secrets were removed from pinned threads and moved to an appropriate vault.
Keys →- Effort
- 10 min
- What changes
- Secrets in transit
When to tickSensitive transfers use an encrypted artifact and the passphrase travels over another channel.
Seal →Minimization and continuity
- Effort
- an evening
- What changes
- Unneeded copies of data
When to tickUnused accounts were listed, needed data was retrieved, and the accounts were deleted or anonymized.
an evening- Effort
- an evening
- What changes
- System recovery
When to tickA short current map identifies devices, storage, backups, and who can restore them.
an evening- Effort
- an evening
- What changes
- Continuity of access
When to tickA trusted person knows where to find usable instructions for access to the essentials.
an eveningOnly versions, stable IDs of completed items, and the update time are stored.Two profiles, separate progress on each site.
Why this order
The list starts with what removes the most risk per hour spent.
- 01
Passwords and second factor first
Most losses start with a reused password. One evening with a manager removes that whole class of trouble.
- 02
Then backups and encryption
These decide what happens when hardware is lost or breaks — the ordinary case, not the dramatic one.
- 03
Then the network and the contour
Own resolver, own storage, own model. This is where privacy stops being a setting and becomes ownership.
Terracotta lines lead to tools
Items that close with something on this site link straight to it: passwords, keys, sealing, the fingerprint report, the resolver test.
The company profile swaps the whole list: a team fails in different places than a person.
Where are the ticks stored
In localStorage for the current site, separately for both profiles. Another subdomain or device starts with its own state; clearing site data removes it.
Can I take the list with me
Copy it as text with the ticks in place, print it, or export its state as JSON. Imports are fully validated before they replace the current ticks.
Fifteen items feels short
A list you finish beats a list you admire. These are the items that actually change the outcome; everything else is a project, and projects deserve their own plan.
The last items ask for a contour of your own.
Mail, files, knowledge and AI on hardware you control. We plan it, build it and hand over the keys.