Minutes 1–3: find the routes

Search your password manager and inbox for the accounts connected to this area. Note which ones use a widely shared address, which have a quiet recovery route, and which no longer have a clear owner or purpose.

Minutes 4–6: find the weak link

The address that resets important accounts becomes easy to discover and target. Look first for public addresses used for recovery, temporary routes attached to durable accounts, reused passwords and aliases that receive unrelated mail.

Minutes 7–9: make one repair

  • Keep it off public forms
  • Protect it strongly
  • Store backup codes
  • Test recovery annually

Choose the highest-consequence problem, not the longest list. Confirm the replacement before disabling anything.

Minute 10: leave a note

Reserve a durable, strongly protected address for recovery and high-consequence services. Record what changed and set the next review for a natural event. A hidden address still needs a unique password, strong MFA and monitored access.

A ten-minute audit is successful when tomorrow is simpler.

Give the next relationship its own route.

Create an MXDuck alias