Audit Your Old Messages for Leaked Secrets (90-Minute Sweep)

What you’re hunting for

Passwords, recovery codes, API keys, banking details, Wi-Fi credentials—anything that shouldn’t live in email or chat history.

Phase 1 (30 min): quick searches

• Search email/chats for terms like password, passcode, recovery code, API key, token, secret, Wi-Fi, IBAN, routing.
• Filter by attachments and common file types (.txt, .csv, .pdf, .docx) and look for “credentials,” “login,” or “.env”.
• Flag anything sensitive; don’t delete yet—rotate first.

Phase 2 (30 min): rotate & replace

• Change passwords to strong, unique ones (manager-generated). Need a memorable master? Create Strong Passphrases.
• Regenerate tokens/keys that ever appeared in threads.
• Re-share safely via one-time, expiring links with split channels. How-to: The Safe Way to Share Passwords in 2025 (No Email).

Phase 3 (30 min): clean & harden

• Delete old messages that contained secrets (after rotation).
• Set retention on chats/labels where sensitive topics appear.
• Enable MFA on all critical accounts and verify authenticators/recovery codes. Phishing safeguards: Verify Links Like a Pro.

If you spot signs of misuse

• Run an incident response (revoke sessions, rotate, audit, notify): The Simple Incident Playbook for Leaked Passwords.

Team checklist (print-friendly)

• [ ] Search threads/mailboxes for secret keywords
• [ ] Rotate exposed passwords/tokens; re-share via one-time links
• [ ] Delete legacy messages and set retention rules
• [ ] Enable MFA; verify recovery codes are stored properly
• [ ] Train link verification habit for everyone

Related reading

The Safe Way to Share Passwords in 2025 (No Email)

How to Create Strong Passphrases You’ll Actually Remember

The Beginner’s Guide to Zero-Knowledge Sharing

Stop Phishing at the Source: Verify Links Like a Pro

The Simple Incident Playbook for Leaked Passwords

Bottom line

A short, focused sweep replaces risky archives with strong, rotated secrets—and a cleaner, safer inbox.

Secure One-Time Messages - Send confidential messages that self-destruct after being read once. Your privacy is our priority. →.