Account list
The accounts that matter, ranked, with where each password is kept, whether it is used anywhere else, two-step sign-in, backup codes and the date you checked recovery.
Essential on a first pass (Your starting list, with columns filled in Getting back in, Passwords and Two-step sign-in and passkeys). At minimum it holds the main email, the phone company and the money accounts, with three marked most important. The rest of your accounts can be added as you use them.
Never type a password, PIN, passcode, backup code, security answer, full card or account number or Social Security number into these sheets. Write where a thing is kept, not the thing. The sheets are saved in this browser and printed on paper, so treat them like your other important papers.
Accounts
Essential on a first pass (Your starting list, Getting back in, Passwords and Two-step sign-in and passkeys). One row per account. Mark the three that matter most. "Password kept in" names a place, never the password. Never type a password, PIN, passcode, backup code, security answer, full card or account number or Social Security number here. Write where a thing is kept, not the thing.
How to use this sheet
- Main email first. Whoever controls it can reset most other passwords, so it is the first row and the first account each chapter works on (Your starting list).
- Rank, then work down. Email, money, phone company, the Apple, Google or Microsoft account your devices use, then the rest. The ranking is ours, built on the agencies' email-first advice. Our convention
- "Password kept in" names a place. "Password manager" or "password book", never the password (Passwords).
- Two-step and backup codes come from Two-step sign-in and passkeys; "recovery checked" from Getting back in.
The example row is Ruth Alvarez's Gmail after Getting back in, Passwords and Two-step sign-in and passkeys: kept in her password book, used nowhere else, Google prompts on and ten backup codes printed. Names and details are invented.
The list names accounts and settings; it opens nothing. Someone who reads it learns which accounts you have, not how to get into them, which is why it never holds a password. It does not say an account is secure; it records what you turned on and when.