01 / THE BLUEPRINT
The problem to investigate
A person may not remember which email address or provider is connected to an important service. Ask about this organisational problem without collecting actual account details. A family spreadsheet containing everyone’s credentials would create a different and more serious problem.
02 / THE BLUEPRINT
A possible solution
Offer a locally completed worksheet listing service names, the account owner and a pointer to official recovery information. Let users mark where they keep their own secure records without putting the secrets themselves into the worksheet.
03 / THE BLUEPRINT
Start without an app
A printed checklist stored privately may be the best product. Encourage users to consult official provider guidance rather than follow a universal recovery recipe. The service can be a workshop instead of another cloud account.
04 / THE BLUEPRINT
Technology that could help
A browser-only form that exports locally could support the worksheet without sending responses to a server. Use clearly labelled fields and minimise analytics. Any optional sync feature would require a separate security design and review.
05 / THE BLUEPRINT
Your first experiment
- Draft a worksheet using fictional service names and accounts.
- Ask adult volunteers whether each field is understandable and necessary.
- Test printing and local export without entering real credentials.
- Have a security reviewer examine the design before a public workshop.
06 / THE BLUEPRINT
People, resources and cost drivers
You need clear writing, accessible materials and competent security review. Workshop facilitation, translations and ongoing provider-link checks are costs. Keeping data out of the service can reduce both operational burden and exposure.
07 / THE BLUEPRINT
What to validate — and when to stop
Check whether users understand exactly what must not be entered. Remove any field that encourages secret sharing. Stop the trial if users treat the inventory as authority to access somebody else’s account.
08 / HYPOTHESIS TO TEST
Potential impact and how to measure it
The proposed benefit is better awareness of account ownership and recovery routes. Measure completion with fictional examples and understanding of boundaries. Do not promise successful recovery, protection from fraud or access after an owner’s death.
09 / THE BLUEPRINT
Risks and safeguards
Never ask for passwords, one-time codes, recovery keys or identity documents. Do not facilitate account takeover or bypass provider checks. Sensitive family and estate questions require appropriate professional guidance and the account owner’s consent.
10 / THE BLUEPRINT
Who might pay or maintain it
A digital inclusion programme could offer the worksheet and training. A paid workshop should charge for education, not recovery guarantees. Avoid monetising household account information or making a cloud upload necessary to use the resource.