Back to Password management

To keep a copy, print this page or save it as a PDF from your browser.

Salmini Checklist1 page

Account Security · Password management

Password management checklist

Who leads Whoever looks after digital security Name

Use it when

you're moving the team onto a password manager, or checking it's still in use.

Set it up

One manager for the whole team, chosen together.
A passphrase of at least six words for the manager, picked by its generator.
Two-factor on the manager, if it keeps passwords online.
The password file backed up, if it’s an offline manager.
The browser’s saved passwords deleted, once they’re in the manager.
Made-up answers to security questions, saved in the manager.

Leaks and recovery

Addresses checked on Have I Been Pwned. Change a leaked password everywhere it was used.
Recovery email and phone current for every account.
A way back into the manager: an emergency contact, or a locked-away paper copy.

Bring the team with you

Go first, with your director, for a week or two.
Set it up in a short session, email password first.
Check in a week later, and help anyone stuck one to one.

Notes

Take care: Nobody can reset a forgotten main password, not even the company. Plan the way back before you need it.

Started Done Review again