My preparation checklist

What an ordinary person should actually do and Device minimization and border crossings in Asia list what to do, but nothing keeps track of how far you got. This page gathers those headings into one list. A tick is encrypted and stored on this device with your passkey as the key, and one fingerprint next time brings your progress back. Nothing reaches the site; it cannot even tell whether you have a list.

No passkey yet? Create one on Passkey as your key first, or create one right here; both routes end the same way, and if unsure follow the steps on the key page. What a passkey is and where its limits are: What is a passkey?.

For what comes after the ticking, see walking a new colleague through a device review.

How it works

• Ticks are encrypted and kept in the browser's IndexedDB; the "stash" on the buttons is this ciphertext. The key lives in your passkey and only exists in memory while unlocked; leaving this page drops it. That is why every item link opens in a new tab: keep this page open and you do not need to unlock again. After 5 idle minutes it locks by itself, saving your ticks first. Still press "Lock" before you walk away.
• If the passkey lives somewhere that syncs (iCloud, Google, Bitwarden), the other device already has it and nothing needs doing. What moves is the data on this device: export the ciphertext and import it there, unlocking with the same passkey, or press "Send to another device" and the QR frame stream plays it for the other device to scan; once complete that page offers "Import into my preparation checklist". The two devices need no shared network.
• The list only records what you ticked and on which day. If the passkey is lost and the list will not open, tick again; there is no backup key step here.
• Renaming an article heading does not affect existing ticks. Ticks follow the item's internal id.
• The yearly review group holds the nine questions from the baseline article. Anything untouched for over a year gets flagged, the filter narrows the list to those, and "Checked today" resets the date.
• When the passkey did not sync to another device (say a phone on the iCloud Keychain and a computer on Windows Hello), unlock here and press Enrol another device: a QR code and a string appear for one minute. On the other device press Enrol this device with a key from another, photograph or paste it, and that device gets a passkey with the same key. The data is still on the original device afterwards; move it with "Send to another device". The string is the data key itself, so use it only between your own two devices. Once photographed it cannot be recalled and cannot be rotated; the only remedy is to clear the stash and create a new passkey.
• The encryption here is only as strong as the place that keeps the passkey: someone who can reach this device and knows the unlock code or the password manager's master password sees what you ticked. In that situation read digital preparation for survivors of domestic abuse first, and consider leaving no trace of your preparation on this device at all. If the person you guard against is a partner you live with, law enforcement or a state, do not create a key or save the list on this device. This page has no view-only mode; the items themselves are all in the two scenario articles above, so just read them there. How to tell: Nothing is saved by default on the threat model checklist.
• Threat model checklist is the other list-shaped tool here. It asks what you protect and from whom, and stores nothing. This page records how far you have got.