Use this as the handoff worksheet
Fill this out with the trusted person. The goal is clarity: what they hold, what they should refuse, what they may approve, and what happens in an emergency.
People
Rules
Devices covered
| Device | Daily account | Admin/owner account | Controls enabled | Who holds recovery? |
|---|---|---|---|---|
Accounts and recovery
| Item | Account/login | Recovery email/phone | 2FA/backup codes | Stored where? |
|---|---|---|---|---|
| Apple / Screen Time | ||||
| Google / Family Link | ||||
| Microsoft / Family Safety | ||||
| Router / mesh / ISP | ||||
| DNS provider / Pi-hole / AdGuard | ||||
| Password manager | ||||
| Third-party blocker |
Handoff checklist
Refusal script for the trusted person
I am not going to give you the password, passcode, recovery key, router login, or admin approval right now. We agreed that changes happen only during the maintenance window or for a real emergency. Step away from the device for 10 minutes and message me after that.More guides
Use these when you need a checklist, a specific bypass closed, or a clearer handoff plan.
Test your setup
Browser, DNS, mobile data, recovery, and reset-path tests.
Setup recipes
Direct paths for phones, laptops, technical users, and whole-home setups.
Recovery audit
Find passwords, backup codes, router logins, and reset paths.
Browser policy
Chrome, Edge, and Firefox policy examples.
Mobile data
Close cellular, Private DNS, VPN, and hotspot gaps.
Apps and platforms
Search, YouTube, social apps, app stores, TVs, and in-app browsers.
Router recipes
DNS enforcement, guest networks, IPv6, Pi-hole, and AdGuard Home.
Urge plan
What to do before trying to bypass.
Trusted handoff worksheet
Printable inventory for passcodes, recovery paths, and refusal rules.
Glossary
Plain-language definitions for DNS, DoH, VPNs, MDM, recovery keys, and more.