🛠️

Family Security Setup: The 30-Minute Checklist

10 minute read

Sit down together, grab coffee, and run through this checklist. 30 minutes of setup protects someone you love for years.

This isn’t a lecture. It’s a date.

Pick a time when neither of you is rushed. Make coffee. Sit at the kitchen table. Use their device — the phone they actually carry, the computer they actually use. This is something you do together, side by side, not something you do to them.

Thirty minutes. That’s it. And when you’re done, the person you love will be dramatically safer online.

Before You Start

A few things that will make this go well:

  • Use their device. Not yours. They need to know how to use these tools on the thing they pick up every day.
  • Go at their pace. If step 2 takes fifteen minutes, that’s fine. Skip the rest and come back another day.
  • Explain why, not just how. “This protects your email, which is the key to everything else” means more than “click here.”
  • Write things down. They might want a physical note for certain steps. That’s okay. We’ll talk about what to write down and what not to.

Step 1: Set Up a Password Manager Together

Time: 10 minutes

This is the single most impactful thing you can do today.

Why: If they’re like most people, they use the same password for everything or have passwords written on sticky notes. A password manager remembers everything for them, securely.

What to do:

  1. Go to bitwarden.com on their device. Bitwarden is free and works on phones and computers.
  2. Create an account together. Help them pick a strong master password — something long that they can remember. A sentence works well: “My dog Buster loves the park on Sundays” becomes a great password.
  3. Write the master password down on paper and put it somewhere safe — like with their important documents. This is the one password they need to remember.
  4. Install the Bitwarden app on their phone.
  5. Install the browser extension on their computer.
  6. Save one password together so they can see how it works. Their email is a good first one.

What to say: “Now whenever a website asks for your password, Bitwarden will fill it in for you. You just need to remember one password instead of fifty.”

Step 2: Turn On Two-Factor Authentication for Email

Time: 5 minutes

Why: Their email account is the master key to their life. If someone gets into their email, they can reset passwords for banking, shopping, everything. Adding a second layer of protection is critical.

What to do:

For Gmail:

  1. Go to myaccount.google.com on their device
  2. Click “Security” in the left menu
  3. Under “How you sign in to Google,” click “2-Step Verification”
  4. Follow the prompts — text message verification is the simplest option

For Yahoo Mail:

  1. Go to login.yahoo.com, click on their name, then “Account Info”
  2. Click “Account Security”
  3. Turn on “Two-step verification”

For Outlook/Hotmail:

  1. Go to account.microsoft.com
  2. Click “Security,” then “Advanced security options”
  3. Under “Two-step verification,” click “Turn on”

What to say: “This means even if someone guesses your password, they still can’t get in without your phone. It’s like having a deadbolt and a regular lock.”

Important: Make sure they understand they’ll get a text or prompt when they sign in from a new device. That’s normal and expected — it’s the lock doing its job.

Step 3: Check Browser Settings

Time: 3 minutes

Why: A few quick settings can block a lot of junk before it ever reaches them.

What to do:

On their main browser (probably Chrome or Safari):

  1. Pop-up blocker: Make sure it’s on.
    • Chrome: Settings > Privacy and Security > Site Settings > Pop-ups and redirects > “Don’t allow”
    • Safari: Preferences > Websites > Pop-up Windows > “Block and Notify”
  2. Safe browsing: Make sure it’s enabled.
    • Chrome: Settings > Privacy and Security > Security > “Enhanced protection” or “Standard protection”
    • Safari: Preferences > Security > Check “Warn when visiting a fraudulent website”
  3. Bookmark important sites. Open their bank’s website, their email, and any sites they use regularly. Bookmark them. “Use this bookmark instead of searching or clicking email links.”

What to say: “Now your browser is watching out for you. If you land on a dangerous website, it’ll warn you.”

Step 4: Phone Lock Screen

Time: 2 minutes

Why: If their phone is lost or stolen, the lock screen is the first line of defense.

What to do:

  1. Make sure they have a PIN, fingerprint, or face unlock set up. A 6-digit PIN is the minimum.
  2. Set the auto-lock to 2 minutes or less. (Settings > Display > Screen timeout on Android, Settings > Display & Brightness > Auto-Lock on iPhone.)
  3. Turn on “Find My Device” (Android) or “Find My iPhone” (Apple). This lets you locate or wipe the phone if it’s lost.

What to say: “If your phone ever goes missing, this means nobody can get into it, and we can find it or lock it remotely.”

Step 5: Set Up a Family Code Word

Time: 5 minutes

This one is important enough that it has its own guide: Set Up a Family Code Word.

The short version: pick a word that only your family knows. If anyone ever calls claiming to be a family member in an emergency — even if the voice sounds exactly right — ask for the code word. No code word, hang up.

With AI voice cloning, this is no longer paranoia. It’s basic protection.

Do this together, right now. Pick the word. Say it out loud. Make sure everyone knows it.

Step 6: Bookmark the “Is This a Scam?” Page

Time: 1 minute

What to do:

  1. Open Is This a Scam? on their device.
  2. Bookmark it. On their phone, add it to their home screen.
  3. Show them what it does: a simple, quick way to check if something is suspicious.

What to say: “If you ever get a weird email, text, or phone call and you’re not sure, check this page. Or just call me. Either way.”

You’re Done

That’s it. Thirty minutes. Coffee’s probably cold by now.

Here’s what you just accomplished:

  • Their passwords are now managed and secure
  • Their most important account (email) has an extra lock on it
  • Their browser is set to warn them about dangerous sites
  • Their phone is locked down
  • Your family has a code word that defeats AI voice scams
  • They have a resource bookmarked for when something feels off

This is genuinely meaningful. Most people never do even one of these steps. You just did all of them, together, in half an hour.

A Few Things to Keep in Mind

Don’t overwhelm them with everything at once. If you only got through steps 1 and 2, that’s still a huge win. Come back for the rest another day.

Check in later. In a week, send a casual text: “Hey, how’s the password manager working? Any trouble?” This shows you care and keeps the door open.

You’re not their IT department. You’re their family. The goal is making them confident, not dependent on you. Every time they successfully use Bitwarden or spot a suspicious email, let them know: “See? You’ve got this.”

What Comes Next

If you haven’t already, set up your Family Code Word. It takes five minutes and it could be the thing that stops someone from losing money to an AI voice clone.

Next up Set Up a Family Code Word