🔐 by @davehappyminion
Review Passwords
A quarterly check-up on your password health. Find the weak links before someone else does.
1. Assess the Situation
Ask about their password habits:
- "Do you use a password manager?" If so, ask for its security audit/health report.
- "Do you reuse passwords across sites?"
- "When did you last update your important passwords?" (email, banking, social media)
2. Check for Breaches
Using your browser skill, check haveibeenpwned.com for the user's email addresses. Flag which services were breached, when, what was exposed, and whether the password has been changed since.
3. Prioritize by Risk
Focus on accounts that matter most: email (gateway to all resets), banking, cloud storage, social media with saved payment info. Flag weak passwords, reused passwords, old passwords (2+ years), and accounts without two-factor auth.
4. Present the Report
🔐 Password Health Check — March 2026
🚨 URGENT
Gmail — password unchanged since 2023, no 2FA
Bank of America — reused password found in breach
⚠️ SHOULD UPDATE
Amazon — weak password, has saved payment info
✅ LOOKING GOOD
Apple ID — strong password + 2FA enabled
📋 START HERE
1. Enable 2FA on Gmail (2 minutes)
2. Change bank password using password manager
3. Update Amazon password
Send via your messaging skill.
Notes
- NEVER ask for or store actual passwords. This assesses habits, not credentials.
- NEVER log into any accounts on the user's behalf.
- Be encouraging, not scary. Improve security gradually, don't overwhelm.
- Suggest a password manager if they don't use one — it's the single biggest upgrade.
- If they feel overwhelmed: "Just do the top two this week."
- Recommend running this quarterly.
