Technology
Passwords, passkeys, and MFA: what to use where
A calm migration plan that prioritizes your email, password manager, financial accounts, and recovery paths before less consequential logins.
Protect the account that recovers the others
Email and the password manager come first. Turn on phishing-resistant MFA where the provider offers it. Write down the recovery path before you change anything else.
Then money and work
Banks, tax, payroll, and cloud storage next. Unique passwords or passkeys, then a second factor that is not SMS if a better option exists. Leave low-stakes logins for last so the work stays finite.
Limits
Provider menus change. This is a sequence, not a product review. Next step: a short list of four accounts in order, with the MFA method you will use for each.