Password and Multi-Factor Practice Audit
Check how staff sign in and recover accounts.
Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Audit sign-in practices. Describe the password policy, use of a password manager, second-factor methods, and recovery options across key systems: [SIGNIN_PRACTICES]. Phishing incidents or near misses: [INCIDENTS]. Staff comfort with technology: [STAFF_SKILLS]. Check which systems lack a second factor, reliance on text messages for critical accounts, reused passwords, passwords in documents or chats, recovery questions with guessable answers, and shared mailboxes used for resets. Suggest a rollout that staff will actually follow. Return a table with System, Practice, Risk (red, amber, green) and Fix, a plain-language staff guide of one page, and a 30-day rollout plan. Never ask me to share real credentials. Also suggest which accounts to protect first, such as email, payments and the domain registrar, and how to help staff who struggle with the new steps, so that the policy does not push people to workarounds. Give remediation steps that are safe to try in order, with a rollback note for each, and flag any step that could cause downtime so I can schedule it with the right people.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.