Building Digital Resilience

Nobody plans the day their account gets compromised. It arrives as an email that looks almost right, a login alert from a country they've never visited, a call from someone claiming to be the bank. Whatever gets built to handle it gets built in the panic, because almost nobody builds it before.

The habits that actually hold — the audit, the password manager, the second factor turned on before it's needed — are unglamorous enough that most people put them off until the moment they can't.

The card splits into two columns — six things to try, from running a regular account audit to knowing exactly who to report a suspected cybercrime to, and five research threads for anyone who wants the bigger picture, from the economics of cybercrime to the psychology of what it does to the people it happens to. It's for anyone who's been meaning to sort their passwords out for a while now.

It comes from The Cognitive Crucible, where the fuller argument about the systems shaping our digital lives — and our responsibility inside them — lives. The card stands on its own — you don't need the book to use it.

Print it, pin it somewhere you'll actually see it, or send it to whoever still uses the same password for everything.

Which habit on this list have you been meaning to build, and what's actually stopped you so far?