Account Recovery Priority Map
Mark the recovery channels and affected accounts. The map places primary email, mobile service and password management before accounts that depend on them, helping you close reset paths before changing lower-priority logins.
Private working space: entries stay in this page. Do not enter passwords, complete account numbers, identity numbers or confidential documents.
Which recovery routes are affected?
Map controlling accounts before downstream services. Use category names only, never an email address, password or recovery code.
How to use this tool responsibly
Recovery roots control the sequence
A primary inbox, mobile number or password manager may be able to reset many other services. Securing a downstream account first can be temporary if the attacker still controls the route used to recover it.
A password change is only one control
Unknown sessions, forwarding rules, app passwords, recovery contacts and connected applications can preserve access. Use each provider's security review instead of assuming one new password removes every route.
The map avoids sensitive input
The tool asks only for account categories. Keep usernames, recovery codes, passwords and identity documents out of it. Complete the actual recovery on a trusted device through each service's official page.
Questions about this working tool
Should I secure my bank before email?
If email can reset the bank login, secure the email and mobile recovery path first or in coordination with the bank's fraud team.
Does the map save account names?
No. It uses broad categories and does not require account names or credentials.
Official references behind the workflow
The workspace organizes a task. These primary sources explain the reporting and recovery processes that take over afterward.
Continue with the matching action guide
Use the account-takeover guide, the hacked-email recovery guide, or the SIM-swap response.
This workspace does not contact a provider
Use it to prepare a private working note, then complete the real report through a bank, issuer, government authority, insurer or service provider's independently verified channel. An output is not proof that a report was received, an account was secured or a claim was accepted.