Playbook
Security Fundamentals
Do the ONE most critical thing first. Then work outward.
← All playbooksThe Expanding Circles Model
Security is overwhelming if you try to do everything at once. Don't. Start at the center — the ONE thing that matters most right now — and expand outward in circles.
Each circle you complete makes you meaningfully more secure. Perfect is the enemy of good. Progress beats paralysis.
Circle 1: Your Email
Start here. This is the ONE thing.
Your email is the skeleton key to your digital life. Password resets for banking, cloud services, social media — they all go to your email. Compromise your email, compromise everything.
Action items
- Use a strong, unique password — 16+ characters, randomly generated. Not your dog's name plus some numbers.
- Enable 2FA — Use an authenticator app, not SMS. Hardware keys (YubiKey) are even better.
- Check your recovery options — Is your recovery email also secured? Is your phone number up to date?
- Review connected apps — Revoke access for anything you don't recognize or no longer use.
Which email accounts?
Prioritize the ones where password resets go for:
- Banking and financial services
- Cloud providers (AWS, Google Cloud, etc.)
- Domain registrars
- Password managers
- Business-critical SaaS
Circle 2: Coming Soon
Password managers, critical accounts, and the next layer of defense.
Circle 3: Coming Soon
Device security, network hygiene, and operational awareness.