- 01
Your primary email account is properly securedYour email is often the recovery point for everything else. If someone gains access to it, they can potentially reset passwords across many services.
- 02
Multi-factor authentication (MFA) is enabled on important accountsUse MFA on email, Apple/Google accounts, banking, password managers, and social platforms to reduce the risk of account takeover. Where available, passkeys can provide a simpler and more phishing-resistant alternative to passwords.
- 03
Recovery details stay currentCheck recovery phone numbers, backup email addresses, and recovery codes regularly so accounts can still be recovered if devices change or are lost.
- 04
Important accounts have clear ownership and recovery accessImportant accounts like Apple IDs, Google accounts, mobile contracts, and family subscriptions should have clear ownership so your family knows who manages them, where recovery access goes, and how critical services could be recovered if needed.
- 05
Critical accounts are not dependent on a single person, device, or inboxAvoid situations where one forgotten password, broken phone, or inaccessible email account locks the whole family out of important services.
- 06
Old devices and sessions are removedReview trusted devices and active sessions occasionally and remove anything no longer used, shared, sold, or lost.
- 07
Separate high-trust and low-trust accountsUse secondary or disposable email addresses for shopping, newsletters, and temporary services so your primary account details aren’t exposed everywhere long term. Gradually retire older or heavily exposed addresses where practical to reduce spam, phishing, and breach exposure.