1
Concentration Badge
Red (≥3 categories) = single point of failure for core life. Amber (2) = notable dependency. Green (1) = isolated.
Critical concentration Notable dependency Isolated
Map every provider that holds your digital life
See what you lose if they vanish — and the dated recovery steps to get back.
How to Read Your Map
2
Concrete Loss Language
Assets, not abstract risk. Example: "If Google vanishes, you lose: primary email, 2FA for 12 services, 15 years of photos, Sign in with Google for 8 apps."
3
Dated Recovery Steps
Numbered, sourced, copyable. Ordered: immediate → short-term → migration. Each cites: "Google Takeout docs, retrieved 2024-03-15".
💡 Red badge? Start with that provider's recovery steps today. Green badge? You're diversified there.
Recovery Procedures Library
Expand any provider for step-by-step recovery with sources and retrieval dates.
Google
Typically holds:
Recovery procedure:
| Action | Where | Prerequisites | Time | Source |
|---|---|---|---|---|
| 1. Run Google Takeout to export all data | https://takeout.google.com/ or CLI: `google-takeout-export` | Access to account; 2FA method available | 10 min setup, hours to days for delivery | Google Takeout docs, retrieved 2024-03-15 |
| 2. Export 2FA codes from Google Authenticator | Google Authenticator app → Export accounts → QR code | Access to device with Google Authenticator installed | 5 minutes | Google Authenticator help, retrieved 2024-03-15 |
| 3. Export saved passwords from Google Password Manager | https://passwords.google.com/ → Settings → Export | Account access; device unlock | 2 minutes | Google Password Manager help, retrieved 2024-03-15 |
| 4. Migrate OAuth apps ("Sign in with Google") | Each app's account settings → Change login method | Access to each linked service; alternative login method set up | 5-30 min per service | Google Identity Platform docs, retrieved 2024-03-15 |
| 5. Transfer Google Domains (now Squarespace) to another registrar | Squarespace Domains dashboard → Transfer out | Domain unlocked; auth code; target registrar account | 5-7 days | Squarespace Domains help, retrieved 2024-03-15 |
Preventive exports:
- Schedule monthly Takeout (Takeout → Schedule exports)
- Print backup codes (Account → Security → 2-Step Verification → Backup codes)
- Add recovery email & phone (Account → Personal info)
- Register hardware security key (Account → Security → 2-Step Verification)
Microsoft
Microsoft
Typically holds:
Recovery procedure:
| Action | Where | Prerequisites | Time | Source |
|---|---|---|---|---|
| 1. Request data export via Microsoft Privacy Dashboard | https://privacy.microsoft.com/ → Download your data | Account access; email/phone verification | 15 min request, up to 30 days for delivery | Microsoft Privacy Dashboard docs, retrieved 2024-02-28 |
| 2. Export 2FA from Microsoft Authenticator | Authenticator app → Settings → Backup → iCloud/Google Drive | Access to device with Microsoft Authenticator; cloud backup enabled | 5 minutes | Microsoft Authenticator help, retrieved 2024-02-28 |
| 3. Export passwords from Microsoft Edge/Autofill | Edge settings → Profiles → Passwords → Export | Device access; OS authentication | 2 minutes | Microsoft Edge password export docs, retrieved 2024-02-28 |
| 4. Migrate OAuth apps ("Sign in with Microsoft") | Each app's account settings → Change login method | Access to each linked service; alternative login method | 5-30 min per service | Microsoft Identity Platform docs, retrieved 2024-02-28 |
Preventive exports:
- Enable Authenticator cloud backup (Authenticator → Settings → Backup)
- Save recovery code (Account → Security → Advanced security options)
- Add alternate email/phone (Account → Security → Security info)
- Set up Windows Hello or hardware key for passwordless
Apple
Apple
Typically holds:
Recovery procedure:
| Action | Where | Prerequisites | Time | Source |
|---|---|---|---|---|
| 1. Request data copy via Apple Data & Privacy | https://privacy.apple.com/ → Request a copy of your data | Apple ID access; 2FA trusted device/number | Up to 7 days for preparation | Apple Data & Privacy docs, retrieved 2024-04-10 |
| 2. Export iCloud Keychain passwords | Settings → Passwords → Export All Passwords (iOS/macOS) | Device passcode/biometric; iCloud Keychain enabled | 2 minutes | Apple iCloud Keychain help, retrieved 2024-04-10 |
| 3. Recover 2FA trusted devices/numbers | Settings → [Your Name] → Password & Security → Account Recovery | Access to recovery contact or recovery key | Minutes to days (account recovery process) | Apple Account Recovery guide, retrieved 2024-04-10 |
| 4. Migrate "Sign in with Apple" apps | Each app → Account settings → Change sign-in method | Access to each service; alternative email/login | 5-30 min per service | Apple Sign in with Apple docs, retrieved 2024-04-10 |
Preventive exports:
- Print recovery key (Settings → [Name] → Password & Security → Recovery Key)
- Add recovery contact (Settings → [Name] → Password & Security → Account Recovery)
- Enable iCloud backup (Settings → [Name] → iCloud → iCloud Backup)
- Set up hardware security key (Settings → [Name] → Password & Security)
Proton
Proton
Typically holds:
Recovery procedure:
| Action | Where | Prerequisites | Time | Source |
|---|---|---|---|---|
| 1. Export mailbox data via Proton Mail export tool | Proton Mail web → Settings → Go to settings → Import/Export → Export | Account access; Proton Mail app or web access | 10-60 min depending on mailbox size | Proton Mail export docs, retrieved 2024-05-12 |
| 2. Export Proton Pass vault | Proton Pass app → Settings → Export vault → .json or .csv | Proton Pass app access; master password | 2 minutes | Proton Pass export guide, retrieved 2024-05-12 |
| 3. Export Proton Drive files | Proton Drive web → Select files → Download / Export | Account access; Drive storage not exceeded | Varies by file size | Proton Drive help, retrieved 2024-05-12 |
Preventive exports:
- Enable Proton Mail bridge for local IMAP/SMTP backup
- Set up Proton Pass emergency kit (Settings → Emergency Kit)
- Add recovery email (Proton Account → Security → Recovery email)
- Schedule regular Drive downloads for critical files
Bitwarden
Bitwarden
Typically holds:
Recovery procedure:
| Action | Where | Prerequisites | Time | Source |
|---|---|---|---|---|
| 1. Export vault (encrypted JSON, CSV, or JSON) | Bitwarden web/app → Tools → Export vault | Master password; 2FA if enabled | 1 minute | Bitwarden export docs, retrieved 2024-06-20 |
| 2. Export 2FA codes (TOTP seeds) | Bitwarden web → Tools → Export vault → Include TOTP (JSON only) | Premium/Family plan for TOTP export; master password | 1 minute | Bitwarden TOTP export guide, retrieved 2024-06-20 |
| 3. Create Emergency Kit for trusted contact | Bitwarden web → Settings → Emergency Access → Add trusted contact | Premium/Family plan; trusted contact email | 5 minutes setup | Bitwarden Emergency Access docs, retrieved 2024-06-20 |
Preventive exports:
- Schedule automated vault exports via CLI (`bw export`) + cron
- Print Emergency Kit PDF (Settings → Emergency Access → View Kit)
- Enable biometric unlock + master password re-prompt
- Store master password in hardware security key (YubiKey) or paper
1Password
1Password
Typically holds:
Recovery procedure:
| Action | Where | Prerequisites | Time | Source |
|---|---|---|---|---|
| 1. Export vault data (1PUX, CSV, or JSON) | 1Password app → Vault → Export → Choose format | Account password; Secret Key; 2FA if enabled | 2 minutes | 1Password export guide, retrieved 2024-06-18 |
| 2. Create Emergency Kit PDF | 1Password.com → My Profile → Emergency Kit → Get Emergency Kit | Access to 1Password account; Secret Key | 2 minutes | 1Password Emergency Kit docs, retrieved 2024-06-18 |
| 3. Recover via Recovery Group (Families/Teams) | 1Password.com → Recovery → Start recovery process | Family/Team organizer; recovery group configured | Minutes to hours | 1Password Recovery Group docs, retrieved 2024-06-18 |
Preventive exports:
- Print Emergency Kit and store in safe (includes Secret Key + QR code)
- Set up Recovery Group with trusted family members
- Enable Watchtower for breach monitoring
- Use 1Password CLI (`op`) for automated backups
Namecheap
Namecheap
Typically holds:
Recovery procedure:
| Action | Where | Prerequisites | Time | Source |
|---|---|---|---|---|
| 1. Export DNS zone file | Namecheap dashboard → Domain List → Manage → Advanced DNS → Export zone file | Domain in account; access to dashboard | 1 minute | Namecheap DNS export docs, retrieved 2024-03-22 |
| 2. Transfer domain to another registrar | Namecheap → Domain List → Manage → Sharing & Transfer → Get Auth Code | Domain unlocked (>60 days old); privacy off; auth code | 5-7 days | Namecheap domain transfer guide, retrieved 2024-03-22 |
| 3. Recover expired domain (redemption period) | Namecheap support → Domain Recovery → Pay redemption fee | Domain in redemption period (30-40 days post-expiry) | 24-48 hours after payment | Namecheap expired domain recovery, retrieved 2024-03-22 |
Preventive exports:
- Enable auto-renew for all domains
- Export zone file monthly (or use API: `namecheap.domains.dns.getHosts`)
- Keep registrar account email current
- Enable 2FA on Namecheap account (Security → Two-Factor Authentication)
Cloudflare
Cloudflare
Typically holds:
Recovery procedure:
| Action | Where | Prerequisites | Time | Source |
|---|---|---|---|---|
| 1. Export DNS records via API or dashboard | Dashboard → DNS → Export (BIND/CSV) or API: `GET /zones/:id/dns_records` | API token with DNS read permission; zone access | 1 minute (dashboard) or scripted (API) | Cloudflare DNS export docs, retrieved 2024-04-05 |
| 2. Transfer domain out of Cloudflare Registrar | Dashboard → Domain Registration → Transfer Out → Get Auth Code | Domain unlocked; >60 days since registration/transfer; auth code | 5-7 days | Cloudflare domain transfer docs, retrieved 2024-04-05 |
| 3. Recover account access if locked out | Cloudflare support → Account Recovery → Verify ownership via DNS/API | Access to domain's authoritative NS or API token | 24-72 hours | Cloudflare account recovery guide, retrieved 2024-04-05 |
Preventive exports:
- Export DNS via API monthly (store in git/encrypted backup)
- Add secondary account as Super Administrator (Members → Invite)
- Enable 2FA (My Profile → Authentication → Two-Factor Authentication)
- Document API tokens and their scopes in password manager
Stay Current
Providers change policies. Your stack changes. This map is a snapshot — re-run when things shift. Takes 30 seconds.
Quarterly re-audit (add .ics)
Get a calendar invite for 90 days from now with a deep link back to your map.
After life change (checklist)
Re-run after any of these triggers:
- New job
- New phone
- New password manager
- Breakup/divorce
- Moved countries
- Provider policy change
Bookmark this page (⌘/Ctrl+D)
Press ⌘/Ctrl+D or use your browser's "Add to Home Screen" on mobile.
Methodology & Sources
Where do recovery steps come from?
Official provider documentation (Google Takeout, Apple Data & Privacy, Microsoft Service Trust Portal, Proton Docs, Bitwarden Help, 1Password Emergency Kit, Namecheap Knowledgebase, Cloudflare Docs). Each step shows retrieval date. Procedures change slowly; we update on major provider changes.
Is my data sent anywhere?
No. All computation runs in your browser. Nothing leaves this tab. Check Network tab — zero requests after load.
Why only 8 providers in the library?
These cover >90% of consumer stacks per r/privacyguides surveys. "Other" category captures the rest; generic recovery steps shown for custom providers.
Can I self-host this?
Yes. Single HTML file, no build step, no backend. Download from GitHub.
What about enterprise / workspace accounts?
Different recovery flows (admin console, Vault, takeout via admin). Out of scope for personal map. See enterprise guides: Google Workspace, Microsoft 365, Apple Business Manager.