Password Ready

Build a password and account recovery system that keeps your logins secure, your recovery methods current, and your access available when it...
1 joined
Profile picture
Yvonne DorrityProfile picture@calmshriek·May 19

Locked Out Right Now? Do These 6 Things Before You Do Anything Else

You just tried to log in. Wrong password. Reset link isn't arriving. Recovery phone number doesn't look right. You're locked out.


Most people immediately start guessing old passwords, clicking every link on the page, and getting increasingly frustrated. That makes things worse. Here's what to do instead.


1. Stop trying to log in.


Most platforms have attempt limits. After 5-10 failed tries, many services will temporarily lock your account, add a cooldown timer, or flag your IP. Every wrong guess makes the situation harder. Step away from the login screen.


2. Check your email — all of them.


The reset link might have gone to a recovery address you forgot about. Check your primary email, but also check spam/junk folders, old email accounts, and any address you might have used when you created the account. Search for the platform's name.


3. Check if you're still logged in somewhere else.


Your phone, a tablet, an old laptop, a work computer, a browser you don't usually use. If you're still logged in on any device, you can usually change your password from inside the account without needing the reset flow at all.


4. Look for backup codes.


If the account uses two-factor authentication, you were given backup codes when you set it up. Check your notes app, your downloads folder (search for "backup" or "recovery"), your photos (people screenshot these), or any password manager you use.


5. Use the platform's official account recovery — not the password reset.


Most major services (Google, Apple, Microsoft, Facebook, Instagram) have a separate account recovery process that's different from "forgot password." It usually involves verifying your identity through previously trusted devices, ID verification, or security questions. Search for "[platform name] account recovery" — not "password reset."


6. Document what happened.


Write down: which account, what error you saw, what recovery options were offered, what email/phone the reset was sent to. If you end up contacting support, having this ready will cut the back-and-forth in half.


What NOT to do:

  • Don't pay for third-party "account recovery" services. Most are scams.

  • Don't create a brand new account and abandon the old one — you'll lose purchase history, contacts, and data.

  • Don't call a random phone number from a Google search claiming to be support. Go directly to the platform's website and find their help page.


This is crisis management. It gets you through the immediate problem.


What it doesn't do is prevent the next one. If you want a system that makes sure you never end up here again — recovery emails verified, backup codes stored, every account mapped and maintained — that's what The Password Reset Readiness Framework is built for.

Profile picture
Yvonne DorrityProfile picture@calmshriek·May 19

Your Recovery Email Is Probably a Liability — Here's How to Check

There's a single point of failure behind almost every account lockout story: a recovery email that no longer works.


You set it years ago. Maybe it was a university address. Maybe a work email from two jobs ago. Maybe a Hotmail account you haven't logged into since 2016.


And you won't discover the problem until you're locked out of something important and the "we sent a reset link" message disappears into an inbox you can't access.


Here's how to check your top 5 accounts in about 10 minutes:


Go to the security or account settings for each of these:

  • Your primary email (Gmail, Outlook, iCloud Mail)

  • Your bank or main payment app

  • Your Apple ID or Google account

  • Your most-used social media account

  • Any account that stores payment information


For each one, look at the recovery email and ask:


→ Can I log into that recovery email right now?

→ Is it an address I check regularly, or could a reset link sit there for days?

→ If that recovery email itself got compromised, would I lose access to everything chained to it?


The chain problem is the one people miss. If your bank recovery email is your Gmail, and your Gmail recovery email is an old Yahoo account you can't access — you don't have a recovery path. You have a house of cards.


What to do if you find a dead recovery email:


  1. Don't panic. You're finding this now, not during an emergency.

  2. Update it to an email you actively use and can access from multiple devices.

  3. If possible, add a recovery phone number as a backup — a second path in is always better than one.

  4. Write down which accounts point to which recovery addresses. Most people have no idea how their accounts are connected until they map it out.


That last step — mapping your full account recovery chain — is one of the first things covered in The Password Reset Readiness Framework. But even if you just fix your top 5 today, you're ahead of 90% of people.

Profile picture
Yvonne DorrityProfile picture@calmshriek·May 19
Pinned post

The 5-Minute Account Recovery Check You Should Do Right Now

Most people don't realize they're locked out of an account until they need it urgently — and by then, it's too late to fix calmly.


Here's a quick check you can do in 5 minutes that will tell you exactly how prepared (or unprepared) you are.


Pick your 3 most important accounts. For most people, that's:

  • Your primary email (Gmail, Outlook, iCloud)

  • Your main bank or payment app

  • Your phone/device account (Apple ID or Google account)


For each one, answer these 4 questions:


  1. Do you know the password? Not "I think so" — do you actually know it? Could you type it right now?


  1. What's the recovery email? Is it an email address you still have access to? Or is it an old university email, a work address from a previous job, or an email you set up 10 years ago?


  1. What's the recovery phone number? Is it your current number? Have you changed carriers or numbers since you set it up?


  1. Do you have 2FA enabled? If yes — do you know where your backup codes are? If your phone breaks tomorrow, can you still get in?


Score yourself:

  • All 4 answers clear for all 3 accounts = you're in good shape

  • 1-2 gaps = fixable in an afternoon, but do it before you need it

  • 3+ gaps = you're one lost phone away from a serious problem


Most people find at least 2 gaps in accounts they use every single day.


If you found gaps and want a complete system to fix every account you own — not just these 3 — that's exactly what The Password Reset Readiness Framework covers. It's a step-by-step course that takes you from "I think my password is..." to a calm, organized system you maintain on autopilot.