The FIRM Guide

The Passwords and Passkeys Module

The mechanisms that protect everything else — the password manager, MFA methods, backup codes, and passkeys. One entry per tool.

Download template Nothing is entered on this page — you fill the template in privately.

Text file — the flexible one. Use it as-is, open it in any editor, or paste it into an AI tool to reshape the blank form to fit your family: rename a field, add a row, drop one you don't need.

Print / PDF — the ready-to-use one. Print it and fill it in by hand, or choose Save as PDF and complete it in your own offline PDF app. Either way it stays with you — the finished Secure Guide template goes inside your Vault.

One rule: only ever give an AI tool the blank template. Never paste your real information — passwords, account numbers, anything you'd keep secret — into an AI tool, an online service, or anywhere outside your own Vault. Customizing an empty form is fine; filling it in happens privately, offline. That's the same rule this site follows: nothing sensitive ever leaves your hands.

Secure Guide Starter Template

Store this inside your Vault. Create one entry per security mechanism. Update at the semi-annual review.

e.g., "password manager — Family", "Hardware Key — Primary", "Passkeys — Master List".
Passwords and Passkeys; family-guide; System
Password manager, hardware key, authenticator app, passkey inventory.
Which accounts or systems this mechanism protects.
The fallback if this fails — or an explicit NONE, recorded deliberately.
Where recovery codes live, by reference. The codes themselves are high-friction — password manager or sealed with recovery materials.
Optional, for hardware tokens.
Yes/No + location for anything physical.
The steps a trusted person follows — or a plain statement that no recovery exists.
Semi-annual review date.

Family Guide Starter Template

This template contains no sensitive information. It can be stored with household documents.

One sentence (e.g., "Our password manager contains the credentials for the accounts listed in the Secure Guide").
Pointer only — access instructions are in the physical Vault; a backup hardware key exists, location with recovery materials.
Owner and review cadence; emergency access configured with a waiting period.
What not to do, then the path — don't reset accounts one by one; start with emergency access.

← Back to System modules