Password Policy Generator

Password policy

Safety rule: this policy was generated from preferences only. Do not add real passwords, recovery keys, backup codes, security answers, or private account details unless the file is stored inside a private vault.

Scope: Personal
Risk level: Elevated
2FA coverage: Mixed
Sharing: Some sharing
Recovery: Partial
Rotation: Breach-only

Policy:
1. Use unique passwords for every account. Minimum length: 14+ characters, or 5+ random words for memorized passphrases.
2. Store generated passwords in a private password manager. Do not store passwords in chats, email, screenshots, spreadsheets, or unencrypted notes.
3. Never reuse the password manager master password anywhere else.
4. Use passkeys, hardware keys, or authenticator apps for primary email, password manager, banking, work, device, and cloud accounts.
5. Keep recovery email, backup codes, trusted devices, and emergency access documented outside this page.
6. Rotate passwords after breach alerts, suspected compromise, password reuse, account sharing changes, employee or vendor access changes, and recovery changes.
7. Upgrade weak 2FA. Prefer passkeys, hardware keys, or authenticator apps over SMS for important accounts.
8. Share through a password manager shared vault, not copied messages. Name an owner for every shared account and remove access when it is no longer needed.
9. Verify recovery before changing critical passwords. Start with primary email, password manager, device ecosystem, banking, work, and cloud accounts.

Implementation checklist:
1. Publish the policy somewhere private and easy to find.
2. Confirm no one is asked to paste passwords, recovery keys, backup codes, security answers, or account names into policy tools.
3. Create or verify the password manager vault before changing important passwords.
4. Start with accounts that reset other accounts: email, password manager, device ecosystem, banking, work, and cloud.
5. Enable strong 2FA before removing old recovery paths.
6. Review recovery options after every critical password change.
7. Move shared credentials into shared vaults with named owners and removal dates.

Generated locally by https://passlock.to/tools/password-policy-generator