Minutes 1–3: find the routes

Search your password manager and inbox for the accounts connected to this area. Note which ones use maximum secrecy everywhere, which have proportionate address choices, and which no longer have a clear owner or purpose.

Minutes 4–6: find the weak link

Treating every signup as equally dangerous creates a system nobody maintains. Look first for public addresses used for recovery, temporary routes attached to durable accounts, reused passwords and aliases that receive unrelated mail.

Minutes 7–9: make one repair

  • Name what matters
  • Estimate likely harm
  • Choose a proportionate route
  • Review when circumstances change

Choose the highest-consequence problem, not the longest list. Confirm the replacement before disabling anything.

Minute 10: leave a note

Choose controls according to recovery need, exposure, impact and effort. Record what changed and set the next review for a natural event. The strongest theoretical setup fails if it is too complicated to use.

A ten-minute audit is successful when tomorrow is simpler.

Give the next relationship its own route.

Create an MXDuck alias