Free practical checklist

Your password-cleanup checklist

Secure one important account, then repeat. Use any password manager you trust. No signup, purchase or account details required.

Checkmarks stay in this tab and reset when you reload. No account names, passwords or recovery codes are requested.

1. 1. Choose your first accountsStart with your main email, password manager and important financial or work accounts. Keep account names on your own device, not in this checklist.
2. 2. Replace reused or exposed passwordsOpen the service directly using its known address or app. Set a different, long password for each account and save it in your chosen password manager. If you suspect compromise, also review active sessions and recovery settings; work accounts may need your IT team.
3. 3. Turn on stronger sign-inUse a passkey or multi-factor authentication where available. Follow the service’s setup instructions and keep its recovery codes somewhere safe. A password manager does not replace MFA.
4. 4. Plan recovery before signing outCheck the recovery email and phone number. Learn how your password manager handles recovery, and keep any recovery kit separate from the vault it unlocks.
5. 5. Check shared accessPrefer an individual account for each person. If a shared login is unavoidable, assign an owner, use controlled sharing and remove access when someone no longer needs it. Follow your workplace policy.
6. 6. Verify the changeTest the new sign-in and MFA before ending your existing session. Confirm the saved login works. Repeat for the next account; do not record passwords or recovery codes on this sheet.

Free resource from Protego · protego.me/downloads/password-cleanup · Updated September 17, 2026