Threat Lab Repair Kit

Close the reset doors your score found.

This is the actual repair board for main email, password reuse, SMS recovery, backup codes, old sessions, and family scam rules.

No hacker theaterPlain-language securityFinish the first ten

Open checklists Run Threat Lab first

Shield 01

Main email master-key hardening

Confirm your main email has a unique password. Add authenticator app, passkey, or security key. Avoid SMS-only if possible. Review recovery phone/email and remove anything old. Generate backup codes and store them offline or in password manager notes. Review active sessions/devices and sign out of unknown devices.

Why first:

Your email can reset banking, shopping, social, cloud, and password-manager accounts. It is not an inbox; it is the master key.

Shield 02

Top 10 account migration

AccountUnique password?MFA typeSMS recovery?Done

Main emailY / NApp / passkey / SMSY / N□

BankY / NApp / passkey / SMSY / N□

Password managerY / NApp / passkey / keyY / N□

Phone carrierY / NPIN / app / SMSY / N□

Cloud storageY / NApp / passkey / SMSY / N□

Shield 03

Family scam callback card

House rule:

“If anyone calls or messages with urgency about money, codes, account access, gift cards, crypto, bail, hospital, delivery, tax, or bank support: stop, hang up, and verify through a saved official number or a known family number.”

ScenarioRuleSafe channelFamily phrase

Bank/support callHang upOfficial app/number________

Family emergency textCall backKnown number________

Code requestNever shareAccount app only________

Recovery vault

Backup-code storage plan

Generate

Email, bank, password manager, cloud, phone carrier, socials.

Store

Password manager secure note + printed sealed copy if appropriate.

Test

Confirm you can find codes without exposing them in screenshots or chats.

Review

Quarterly: remove old devices and regenerate codes after major changes.