Which mistakes are common when working with passwords and access keys?

Use a long unique passphrase and keep a recovery key away from the encrypted data. The developer cannot recover a forgotten secret. The usual causes are rushing, no verified backup, and losing the secret. Keep a short written procedure.

Yes. After a system update, restarting and running a brief test is a sensible sequence.