Cyber Hygiene Passwords
At your own pace, offline.
An offline worksheet to audit your accounts, identify weak passwords, and plan a security upgrade one account at a time, no technical knowledge needed.
This worksheet is designed to be completed offline, on paper. Don't fill it in on a screen that might be observed. Work through your accounts category by category email first, then banking, then everything else. You don't have to do it all in one sitting.
Go to your email inbox and search for "welcome", "verify your email", or "account". This surfaces most accounts you've ever signed up for. List them in the audit table on pages 34.
Short, common word, or reused across multiple accounts.
810 chars, some variety, but probably reused somewhere.
12+ chars, unique to this account, mix of types.
Generated by a password manager, 16+ chars, completely unique.
Two-factor authentication means even a stolen password can't unlock your account alone. Mark the 2FA column in your audit table. Use an authenticator app (Authy or Google Authenticator) rather than SMS where possible SMS codes can be intercepted.
Fill this in honestly. These are your most important accounts the ones where a breach does real damage. Work through each category before moving on.