Recovery is a bad week. Prevention is twenty minutes. Here is the setup that makes a forgotten Windows password an inconvenience instead of a disaster.
Every page in this set exists because of one bad week in somebody's life. This page is how you make sure it is never yours. None of it is exotic: your passwords should live in more than one honest place, every account should have its recovery options set before they are needed, and the one master secret you must never lose should be written down somewhere physical. Twenty minutes of setup today replaces the entire recovery ordeal — permanently.
👆 Five boxes. Tick them once and this whole problem class retires from your life.
A browser is a fine place to use passwords and a fragile place to keep the only copy — one profile, one Windows account, one DPAPI chain between you and lockout. A standalone password manager (Bitwarden is the well-known free-tier example; there are several respectable ones) keeps an independent, encrypted vault that follows you across PCs and phones and survives any single machine's death. The discipline is one sentence: new password goes in the manager first, browser second. The manager's own master password then becomes the one secret that matters — which is exactly why the next habits exist.
Security folklore says never write a password down. For the one master password that guards your manager and your main account, the honest household advice is different: a strong master password that exists only in your memory is a single point of failure shaped like a person. Write it on paper, seal it, and keep it somewhere physically safe at home — a drawer, a file of important documents, with a trusted family member knowing where it is. A burglar with your notebook is a smaller and rarer risk than you, locked out of your own life, forever. Round it out with a quarterly export of the vault into an encrypted archive, and the story this whole set of pages tells can never be told about you.
Watch the video for the complete recovery story — and tick this page's checklist while it is fresh.
▶️ Watch Full VideoIt solves a different problem. The browser's DPAPI protection is strong against thieves but chains everything to one Windows account. A manager's vault is independent of any machine or Windows sign-in, syncs to your phone, and survives a dead PC — which is precisely the failure this whole topic is about. Use both: manager as the master copy, browser for daily convenience.
For most households it is the safest option available. The realistic threats to a home user are forgetting, a dead PC, and a lost phone — not a burglar who knows which envelope matters. A sealed note in a safe place at home defeats all three realistic threats; memory alone defeats none of them reliably.
A quarterly export into an encrypted archive is a good rhythm — often enough that little is missing, rare enough that you will actually do it. Store it like the paper note: private, labelled with its date, and delete the plain-text CSV the export creates as soon as it is safely inside the encrypted archive.