Key Takeaways
- Weak or reused passwords are one of the most common ways accounts get compromised.
- Two-factor authentication adds a critical layer of protection beyond just a password.
- Old app permissions and forgotten accounts are quiet security risks worth cleaning up.
- Reviewing device and software settings once a year keeps your defenses current.
- You don't need technical expertise to complete a meaningful digital security audit.
Summary
22 items · 45–90 minutes
Why an Annual Digital Audit Matters
Your digital life accumulates clutter the same way a closet does — old accounts you forgot about, apps you gave permission to years ago, and passwords you've been recycling across dozens of sites. None of these feel urgent until something goes wrong.
The good news: a yearly check-in takes less than two hours and doesn't require any technical background. Think of it as a health checkup for your online life. Just as you might review your credit health annually to catch financial problems early, reviewing your digital security on a regular schedule helps you catch vulnerabilities before they become real incidents.
This checklist walks you through four key areas: passwords and accounts, two-factor authentication, app permissions, and device settings. Work through each group at your own pace — you can tackle it all in one sitting or spread it across a weekend.
Don't Skip the Old Accounts Step
Dormant accounts are low-hanging fruit for attackers — they often have weak passwords and no 2FA, and you won't notice unusual activity because you've stopped checking them. Even accounts on long-defunct services can hold personal information that gets exposed in breaches. If you no longer use an account, deleting it is almost always better than leaving it inactive.
What You'll Need Before You Start
Gather a few things before diving in so the process stays smooth. You'll want access to your primary email inbox, your phone, and any devices you use regularly. Having a password manager available — or deciding to set one up during this audit — will make the password section much easier.
Password Manager
Generates and stores unique, complex passwords for every account so you never have to reuse one.
Authenticator App
Provides time-based one-time codes for two-factor authentication, more secure than SMS codes.
Breach-Checking Tool (e.g., Have I Been Pwned)
Lets you check whether your email address has appeared in a known public data breach.
Cloud Backup Service
Keeps a secure copy of your important files and photos in case a device is lost, stolen, or fails.
External Hard Drive
Provides an offline backup option for sensitive documents and files as a complement to cloud storage.
If you're not sure whether your habits are quietly creating vulnerabilities, it's worth reading about common behaviors that make accounts easy to hack before you begin. Awareness of the patterns makes the checklist steps feel more purposeful.
The Annual Security Audit Checklist
Work through each group below. Check off items as you go — even partially completing a category leaves you more secure than when you started.
Passwords & Login Credentials
Two-Factor Authentication (2FA)
App Permissions & Connected Services
Old Accounts & Digital Footprint
Device & Software Security
Your Email Account Is the Master Key
Nearly every other account you own can be accessed by someone who controls your email — because 'forgot password' links go there first. Securing your primary email with a strong, unique password and two-factor authentication is the single highest-impact step in this entire checklist. Do this one before anything else if you haven't already.
For a broader view of how all these pieces connect — from passwords to privacy settings to recognizing scams — the complete digital safety overview is a useful companion resource to keep bookmarked.
And if you discover during this audit that something already looks wrong — unexpected logins, missing emails, or access that seems off — read up on how to recognize and respond to a compromised account right away.