Secure Sharing Decision Helper

# Secure Sharing Decision

This plan is generated locally from categories only. Do not paste secrets into this page.

## Inputs
- Item type: Password or passphrase
- Recipient: Trusted person
- Purpose: One-time help
- Access window: Minutes or hours
- Current channel: Not chosen
- Revocation or cleanup: Can rotate
- Selected risk flags: Recipient can forward it

## Recommendation
- Decision: Rotate after sharing
- Risk score: 76/100 (High)
- Rotate after sharing: Yes
- Why: The recipient may need temporary access, but the old secret should not remain valid afterward.
- Method: Share the least privilege version for the shortest window, then rotate the password, key, token, or recovery material.
- Next step: Assign the rotation owner now and do not consider the handoff complete until the old access stops working.

## Decision path
- 1. Share type: Password or passphrase. Risk starts at high.
- 2. Recipient: Trusted person. Recipient category does not block the share by itself.
- 3. Channel: Not chosen. Recommended action: Rotate after sharing.
- 4. Cleanup: rotation or access removal is required after sharing.

## Risk flags
- The recipient may be able to forward, download, or screenshot the material.

## Preparation checklist
- Verify the recipient identity and the request purpose using a separate trusted channel.
- Share only the minimum needed. Remove passwords, recovery codes, personal data, or admin scope that the recipient does not need.
- Name the owner, expiration, removal path, and person responsible for cleanup before sending anything.
- Assign the rotation owner and rotation time before sharing. Do not leave cleanup as a later favor.

## After-sharing steps
- Record what was shared, with whom, why, and when the access should end.
- Confirm the recipient can complete the task without asking for extra secrets.
- Remove temporary files, downloads, drafts, screenshots, and clipboard copies where possible.
- Rotate the password, key, token, backup code set, or recovery path after the handoff is complete.

## Related Passlock tools
- Secure Note Template: https://passlock.to/tools/secure-note-template
- Emergency Access Checklist: https://passlock.to/tools/emergency-access-checklist
- Password Rotation Planner: https://passlock.to/tools/password-rotation-planner
- 2FA Recovery Checklist: https://passlock.to/tools/two-factor-recovery-checklist
- Breach Response Checklist: https://passlock.to/tools/breach-response-checklist
- Password Manager Migration: https://passlock.to/tools/password-manager-migration-checklist

Generated locally by https://passlock.to/tools/secure-sharing-decision-helper

The recipient may need temporary access, but the old secret should not remain valid afterward.

• 1. Share type: Password or passphrase. Risk starts at high.
• 2. Recipient: Trusted person. Recipient category does not block the share by itself.
• 3. Channel: Not chosen. Recommended action: Rotate after sharing.
• 4. Cleanup: rotation or access removal is required after sharing.

• Record what was shared, with whom, why, and when the access should end.
• Confirm the recipient can complete the task without asking for extra secrets.
• Remove temporary files, downloads, drafts, screenshots, and clipboard copies where possible.
• Rotate the password, key, token, backup code set, or recovery path after the handoff is complete.