A secure digital life can still be a fragile one

One of the questions behind Fallback, a personal digital resilience tool now in beta, is deliberately ordinary: if you lost your phone today, what would you actually do next?

It’s a different question from whether your accounts are well protected.

Someone might use strong passwords and two-factor authentication, yet have very little idea how to recover access without the device they normally rely on. Some recovery steps may depend on another account, a phone number or a trusted device. If those routes depend on the thing that has just become unavailable, what looked like several layers of protection can become a difficult circle to get out of.

What interests me is how little of this is visible during normal use. Everything works, so there is no particular reason to examine the dependencies.

That is why the starting point is a scenario rather than a checklist. “What would I do next?” makes the problem concrete. You can follow the steps, notice where you stop knowing the answer and decide whether that gap matters. It also gives the exercise a manageable boundary.

But there is a real tension here. Convenience is valuable, and simplicity helps people maintain good habits. A collection of backup accounts, devices and instructions can become another complicated system to look after. A recovery plan that nobody understands or keeps current may offer very little reassurance when it is needed.

My working view is that resilience should start with understanding the few dependencies that matter most. I’d rather be able to explain how I would recover from one plausible disruption than have a long list of precautions whose purpose I’ve forgotten.

In the beta, I’m testing how to make that preparation useful without making everyday technology feel more burdensome.

What is the smallest amount of preparation that meaningfully improves someone’s ability to recover when something goes wrong?