1. Password Manager Installation & Setup
The expert walks the user through setting up their primary “digital vault” (e.g., Keeper):
-
The Master Password: Guide the user in creating a memorable but cryptographically strong master password or setting up biometric authentication (FaceID/TouchID).
-
Extension & App Deployment: Install the browser extensions and mobile/desktop apps so that automated filling and capturing work seamlessly across all the user’s devices.
-
The Emergency Kit: Ensure the user saves their account recovery keys or emergency access configurations in a safe, physical location.
2. The Digital Footprint Analysis & Migration
This is where the heavy lifting happens. The expert assists the user in consolidating their scattered digital life:
-
Browser Extraction: Safely export insecurely saved credentials from Google Chrome, Safari, or Edge directly into the encrypted vault, and then clear the browser cache to eliminate that attack surface.
-
Vault Triaging: Run a password health audit using tools like Keeper’s BreachWatch to flag reused, weak, or compromised passwords that need immediate rotation.
3. Step-by-Step MFA/2FA Alignment
Instead of relying on insecure SMS text messages for two-factor authentication, the concierge session moves the user toward modern standards:
-
The “Big Three” Security Lockdown: Prioritize securing the client’s most critical gatekeepers first: Email accounts, Financial/Banking apps, and the Password Manager itself.
-
Built-in TOTP Setup: Whenever possible, use the password manager’s built-in authenticator feature. The expert helps the user scan the 2FA QR codes on pertinent sites so that the time-based one-time passwords (TOTP) generate right inside the vault, syncing across devices automatically.
-
Backup Codes Verification: Ensure that when MFA is enabled, the site’s “backup recovery codes” are generated and securely saved as an encrypted note within that specific vault item.
