The one-evening digital security cleanup
A password manager running, the ten accounts that matter locked down, and a checklist for the long tail.
The problem
Reused passwords, mystery accounts, and that nagging feeling you would be in trouble if one email got breached.
What you get
A working system with the steps, tools, checkpoints, and expected return made explicit.
- Setup
- 120 minutes
- Back each week
- 0.25 hours
- Difficulty
- assisted
Expected return
The working case
A planning estimate, not a guaranteed result. Measure the first four weeks against your own baseline.
12
hours returned per year
At 0.25 hours/week across 48 working weeks.
8
weeks to earn back setup
Compare the setup estimate with the weekly time returned.
Operating contract
Input
The source material, constraints, and examples a human would need to do this work well.
Checkpoint
A person reviews judgment calls, sensitive content, unfamiliar tools, and irreversible actions.
Success signal
Track time returned, corrections required, and exceptions. Keep it only if the measured result compounds.
Before you start
- ·One free evening
The steps
- 01
Get a prioritized plan instead of a guilt-driven everything-at-once attempt.
Copy this prompt
Design my personal security cleanup evening. I have: reused passwords, no password manager, and 2FA only on banking. Give me: 1) the ordered top-10 accounts to fix first (assume email is the crown jewel), 2) a setup walkthrough outline for a password manager, 3) which 2FA method to prefer and why, 4) a 15-minute-per-week plan for the long tail.
- 02
Install the password manager and fix the top ten in one sitting: email first, then banking, then anything with a card on file.
- 03
Check your email addresses on haveibeenpwned.com and change anything that appears in a breach.
What it runs on
- 1Password
Paid but excellent family plan.
- Bitwarden
The free option that security people respect.
- Have I Been Pwned
Free breach check.
Where this goes wrong
- Never type actual passwords into an AI chat; it plans the process, the password manager holds the secrets.
- SMS 2FA beats nothing, but use an authenticator app where offered.
Definition of done
Run it for four weeks. Then make it earn its place.
- □ Baseline the manual time before launch.
- □ Keep a human approval step for consequential output.
- □ Record corrections and exceptions, not just successes.
- □ Expand, revise, or retire it after the first review.
Build the system around it
Related workflows
If this one stops working, tell us. Three reports in a month and it leaves the library until a person has looked at it again.