Save First, Then Change (I Locked Myself Out Once)
Okay so. We've found your reused passwords, we've found your weak ones, and now comes the part where we actually go fix them. Which sounds simple. Go into the account, change the password, done.
Here's the thing though... there's a specific order you have to do this in, and I learned it the hard way.
The mistake, so you don't make it
A while back I was cleaning up my own accounts, feeling pretty proud of myself, moving fast. I went into one account, generated a new strong password in my password manager, changed it on the website... and then got distracted by something before I actually hit save in the app.
So the account had a new password. The app still had the old one. And I had neither of them in my head, because that's the whole point of using a manager, you're not supposed to memorize this stuff anymore.
Forty minutes. That's how long it took me to get back in. Password reset emails, security questions I barely remembered the answers to, the whole ordeal. For an account that took me thirty seconds to lock myself out of.
So now I teach it as a rule: save first, then change. The new password goes into the app, you confirm it's actually sitting there, and only then do you go change it on the website. Not the other way around, even though changing it on the website feels like the "real" step and saving it feels like the paperwork. The paperwork is the part that saves you.
The actual steps
Here's how we do it, one account at a time:
- Open your password manager first. Find the entry for the account you're updating.
- Generate the new password inside the app. Most managers have a "generate password" button right there when you're editing an entry. Use it. Don't make one up in your head, that's the whole habit we're trying to break.
- Save that new password in the app. Actually save it. Close the entry and reopen it if you want to double check it stuck— I do that every time, it takes two seconds and it's saved me from my own mistake more than once.
- Copy the new password from the app.
- Go to the website, log in with your OLD password (you'll still have that saved too, or you'll remember it, either way), find the change-password screen.
- Paste the new password in. Don't retype it. Paste it, so you know it's exactly what the app has.
- Confirm the change went through on the website.
- Only then, move to the next account.
Slower than just changing it, yes. But it's the difference between a boring five minutes and a rough forty.
One more small thing: if the site logs you out everywhere when you change a password (a lot of banks do this on purpose), that's normal. Don't panic when your phone app suddenly asks you to sign in again. That's the system working, not breaking.
Do this for your weak and reused ones first
You don't need to march through every single account today. Start with the list we built last lesson, the reused ones and the weak ones. Those are the ones actually putting you at risk. The account you use once a year for a newsletter can wait.
And go slow on your email account and your bank. Those are the ones where getting locked out actually hurts, so go extra careful there, save first, then change, no shortcuts.
An opinion while we're here
A password manager is safer than your brain, full stop. I know changing passwords feels like it should be simple enough to just do off the top of your head, especially once you've got a system going. But the whole reason we're doing this the slow way is that your brain forgets, and the app doesn't, if you actually let it do its job before you make the change. Trust the app over your memory every time. That's the deal.
A text at 10 p.m.
I'll tell you why I care about this being easy to actually finish, not just easy to start. A while back I sent a text to our ward group chat around 10 p.m., just offering to help anybody get their old photos organized before a family reunion coming up. Had four people say yes by morning. Did three of them that Saturday, back to back, sitting at their kitchen tables with their laptops open.
The fourth person never followed up. Which, honestly, tracks. That's most people with any project like this. The interest is real, the first step even happens sometimes, and then life gets in the way and it just... stops.
That's why we go slow here and build the habit into something you can actually keep doing without me standing over your shoulder. Save first, then change. Every time, no exceptions, even when you're in a hurry. Especially when you're in a hurry, actually, that's usually when I skip a step.
Does that make sense so far... good. 👍
Before next time
Pick three accounts off your reused-or-weak list and change them using the save-first order above. If you get locked out anyway, don't panic, it happens to the best of us, just start the account recovery process and give it some time.