Genuinely curious how common this is right now.

Some companies have a clear, written policy: these AI tools are approved, these aren't, here's what you can and can't feed into them. Others have no policy at all, so people just quietly use whatever tool gets the job done fastest.

Passkeys keep getting pushed by every major platform now, Apple, Google, Microsoft, most banks. In theory they're more secure and easier than passwords. In practice, adoption still feels slow.

Have you actually switched over for your important accounts, or are you sticking with a password manager plus 2FA out of habit, or because passkeys feel confusing to set up across multiple devices?

Not the textbook incident-response checklist, the real, gut-reaction first move.

Do you disconnect from the internet immediately? Change passwords from a different device? Call someone? Just sit there for a minute in denial before doing anything?

Trying to crowdsource a list here, so bear with me.

Every app or service has that one buried privacy setting that's on by default and almost nobody finds it on their own. Things like ad personalization, location history, who can see your "last seen" status, or background app data sharing.

Curious how people here actually handle this, not in theory, in the moment.

Someone sends you a link, maybe in a DM, an email, or a text, and something about it feels slightly off, but you're not sure why. Do you hover and squint at the URL, paste it into a scanner first, ask the sender directly if they meant to send it, or just click it and hope for the best?

I keep noticing people, myself included sometimes, paste things into AI chat tools without a second thought. A contract, a customer email, a snippet of code with an API key still sitting in it.

Do you have an actual personal rule for what you will and won't paste into an AI tool? Or is it more of a "gut feeling in the moment" thing?