The FIRM Guide

The Identities Module

One entry per family member — legal names, government IDs, controlling email accounts, recovery dependencies, and where original documents live.

Where this Module fits

A-02 Module 2 of 8 in the At-Home area — step 2 of 4 on the dependency ladder (System → At-Home → Financial → Estate).

First of the connected trio — who are we? Everything in the next two modules flows from the identities documented here.

Part 1 of 3 in the connected At-Home trio — work Identities, then Subscriptions and Memberships, then Digital Legacy, in that order. See The Connected Trio for the worked example.

Adds to The Secure Guide: One entry per person — IDs, controlling emails, recovery dependencies, document locations.

Adds to The Family Guide: That identity records exist, where they live, the steward, and who to call.

Every Module adds one section to each guide — that is how the two guides assemble as you work. See what you're building.

Download Text File Nothing is entered on this page — you fill the template in privately.

Text file — the flexible one. Use it as-is, paste it into a spreadsheet, open it in any editor, or paste it into an AI tool to reshape the blank form to fit your family: rename a field, add a row, drop one you don't need.

Print / PDF — the ready-to-use one. Print it and fill it in by hand, or choose Save as PDF and complete it in your own offline PDF app. Either way it stays with you — the finished Secure Guide template goes inside your Vault.

One rule: only ever give an AI tool the blank template. Never paste your real information — passwords, account numbers, anything you'd keep secret — into an AI tool, an online service, or anywhere outside your own Vault. Customizing an empty form is fine; filling it in happens privately, offline. That's the same rule this site follows: nothing sensitive ever leaves your hands.

Secure Guide Starter Template — Identities

Store this inside your Vault. One entry per family member — update at the annual review, or whenever documents or primary accounts change.

This Module answers the trio's first question: who are we? It documents the credentials that establish personhood and enable everything else — the papers and the primary accounts. Children's entries grow with them: an infant's is a birth certificate and where it lives; a teenager's adds the emails that actually matter; at eighteen the entry becomes theirs — ask what they want kept in the family system, and respect the answer. If someone isn't comfortable being cataloged, record what you can (where a document lives, that a license exists) and leave the rest. Partial documentation is better than none.

Two habits make this record worth keeping. Accounts are rarely lost to a guessed password — they are lost through the recovery path, worked by a patient, convincing request. So map the chain (which account resets which), then harden it: retire recovery options that rest on guessable facts or on inboxes no one checks. And treat security-question answers like passwords — random, recorded in the password manager, never factual. A mother's maiden name is public; a deliberately wrong answer only the record knows is not.

Full legal name, including previous legal names — heirs may need the old name to reach accounts that still carry it.
Driver's license, passport, SSN or equivalent, citizenship or naturalization papers — numbers and expiration dates. Numbers belong here in the Vault, never in the Family Guide.
The account that controls the most — and what it controls. Credentials go in your password manager, not here.
What else exists and what it still controls. No need to chase every address from 2009 — mark dead ones "abandoned — inaccessible" and move on.
Which account resets which — the chain, mapped. Include anything reached by "Sign in with…" — those services ride this identity.
Where the originals live (safe, file, safe-deposit box).
What needs attention, flagged honestly — "Location unknown — find this" is a perfectly good entry. Naming the gap is how it gets closed.
Annual — most updates take two minutes; catching them early prevents the last-minute scramble.

These identities are the foundation of the connected trio. Next, the Subscriptions and Memberships Module ties each service to an identity documented here (reference it — don't re-enter it), and the Digital Legacy Module decides what happens to it all. See The Connected Trio page on this site for the worked example.

Identities; secure-guide; family-guide; At-Home

Family Guide Starter Template — Identities

This template contains no sensitive information. It can be stored with household documents.

In the matching Secure Guide section: one entry per person — IDs, controlling emails, recovery dependencies, document locations.

That detail is what makes recovery possible — and it is protected in the Vault, which opens with The Vault Key. The key is never written here, by design. The people listed on this page know how it is kept, and the steward's job is to keep that path current, so this page never leads to a locked door.

Useful on its own, no numbers: which document types exist for whom — "passports for all four, birth certificates, Social Security cards" — and that every email account is cataloged. Types and owners, never values. (Family genealogy research, if any, is documented in the Family Compass Module.)
By place-name, no secrets: the physical originals (“the fireproof safe in the home office”), the catalog (The Secure Guide), the credentials (the password manager) — so a family member knows which door to open before opening any of them.
Steward + cadence (e.g., maintained by one parent; reviewed every January; spouse has full access).
First steps — for a document in the safe, ask the keeper; for account access in an emergency, see the password-manager note in this Guide. Do not guess passwords.

If a request for an identity document, a reset code, or a birthday arrives as a family member — by voice, message, or video — verify it the family way first: call back on a number already in this Guide, or use the family confirmation. A familiar voice is not, by itself, identity.

Anything this page's reader should know that the sections above didn't ask for — the exceptions, the house quirks, the thing you would say out loud while handing this page over.

Worked example — Frank's family

Frank assumed the identity paperwork was the simple part — until his father passed away unexpectedly and Frank spent three weeks trying to reach the email account that would have unlocked everything else. No idea which address his father used, where a password might be, what accounts existed. His own family would face the same problem. He started here: four weeks, one entry per person. Document numbers and expirations are recorded in Frank's real entries — redacted in this published example; the email addresses shown, like every detail here, are fictional.

All details are fictional and illustrative. The assembled example guides live at the example Secure Guide and the example Family Guide.

Secure Guide — Frank's entry

Four entries in the At-Home folder of Frank's encrypted Secure Guide volume — one per family member — plus the family-history pointer:

Entry 1 — Frank

Franklin A. “Frank” Mercer — no previous legal names
Driver's license (wallet; expires 2029) · Passport — EXPIRED 2024, renewal in progress · SSN card (was in an old tax folder; now in the fire safe)
frank.mercer@gmail.com — controls banking alerts, cloud storage, most subscriptions. Work email is employer-owned: nothing personal rides on it (see Work History Module)
fmercer@oldisp.net (from the 2000s) — “abandoned — inaccessible,” controlled nothing that still matters
Gmail recovery → Frank's phone + sarah.mercer@icloud.com; several services ride “Sign in with Google.” Mapped in one line: lose the Gmail, lose the ride-alongs
Fire safe, home office (originals); scans in the Vault
Passport renewal in progress — flagged week one
2026-01 annual review
Identities; secure-guide; family-guide; At-Home

Entry 2 — Sarah

Sarah E. Mercer — maiden name Keller; two financial accounts still carry it
Driver's license (expires 2027) · Passport (renewal came due this spring — caught early because the expiration was on file)
sarah.mercer@icloud.com — controls her phone backups, photos, and the client-facing side of her business
smercer.backup@gmail.com — rarely checked, flagged in week three: it was the recovery address for the iCloud account. Now forwarding to her primary and checked monthly
iCloud recovery → smercer.backup@gmail.com (once neglected, now monitored) + her phone number
Fire safe, home office
None open
2026-01 annual review
Identities; secure-guide; family-guide; At-Home

Entry 3 — Lily (17)

Lillian “Lily” Mercer
Birth certificate + SSN card (were in the “Important Docs” folder no one had opened in years; now in the fire safe) · State ID (expires at 18 — license upgrade pending)
lily.mercer@icloud.com — tied to her phone, her photos, her social accounts, and the college-application portals
Two outgrown usernames from middle school — recovery attempted, then marked “abandoned — inaccessible”
iCloud recovery → Sarah's iCloud (family setup) until 18; revisit at the transition conversation
Fire safe, home office
At 18: license upgrade, account ownership conversation — what stays in the family system is her call
2026-01 annual review
Identities; secure-guide; family-guide; At-Home

Entry 4 — Jacob (15)

Jacob T. Mercer
Birth certificate + SSN card (fire safe) · No state ID yet — flagged, not urgent
jacob.m@westvale-schools.org (district-issued) — it quietly controls his testing and college-planning accounts, which surprised everyone at the kitchen table
jacob.mercer@gmail.com (gaming — active, low stakes) · One account he'd forgotten entirely — found in week three, marked “abandoned — inaccessible”
School email recovers to Frank's Gmail; gaming email recovers to the school email — a two-link chain nobody had ever drawn
Fire safe, home office
State ID when eligible; school email is district-owned — plan the migration before graduation
2026-01 annual review
Identities; secure-guide; family-guide; At-Home

Six months later the record paid for itself twice: Lily's college applications needed her birth certificate and SSN card — found in under two minutes — and Sarah's passport renewal was flagged before it could become an airport problem.

Family Guide — Frank's entry

This entry sits in the household reference binder. It lists no numbers, no addresses, no account names.

Passports for all four, birth certificates, Social Security cards, and both drivers' licenses — plus every email account — are cataloged in The Secure Guide. Types and owners only; no numbers live on this page. (Family genealogy research is documented in the Family Compass Module.)
The catalog is in The Secure Guide; account credentials are in the password manager; physical originals are in the fireproof safe in the home office.
Frank — reviewed every January with the backup test. Sarah has full access.
For a document in the safe, ask Frank or Sarah. For account access in an emergency, see the password-manager note in this Guide. Do not guess passwords — wrong guesses lock accounts.

House rule, learned the easy way: any request for an ID, a reset code, or “just confirm your birthday” that arrives as a family member gets the family check first — call back on a number in this Guide. A familiar voice is not, by itself, identity.