How to Share Passwords With Family Safely (Including Emergency Access)

Most families share passwords one way or another: the Wi-Fi code on the fridge, the streaming login texted to a teenager, the bank details “in that notebook in the drawer”. It works until it does not, either because a password leaks or because the one person who knew it is suddenly unavailable.

There are really two problems here, and they need slightly different solutions:

1. Everyday sharing: accounts several people use now, like streaming, utilities or the household shopping account.
2. Emergency access: accounts only you use now, which someone else would need if you were seriously ill or died.

This guide covers both, and the habits that make either approach safe.

What not to do

It is worth being explicit about the common methods and why they are risky:

Method	Problem
Text message or chat app	Sits in message history on several devices indefinitely, often backed up unencrypted
Email	Stored on servers, searchable, a prime target if the inbox is compromised
Shared spreadsheet or note	Rarely encrypted, easy to forward, easy to forget about
Sticky note or notebook	Fine for one or two low-risk codes at home; poor for anything financial
Reusing one “family password”	One leak exposes every account that uses it

None of these are catastrophic for a Wi-Fi password. All of them are a problem for email, banking or your password manager itself.

The foundation: a password manager

A password manager stores your credentials in an encrypted vault protected by one strong master password (and ideally two-factor authentication). Reputable managers are designed so that the provider cannot read your vault contents.

For families, this changes the question from “how do I share this password?” to “how do I share access to this vault entry?”, which is a much easier problem to solve safely.

If you do not use one yet, choosing one is the single most useful step in this article. Most major options support some form of family plan, and many offer the features described below. Feature names and plan requirements change, so check each provider’s current documentation before you decide.

Everyday sharing

Shared vaults or folders

Most family plans let you create a shared vault or folder. Put household logins in it (streaming, utilities, the council or local government account, the home insurance portal) and give each family member access. When you change a password, everyone gets the update automatically.

Keep personal accounts in personal vaults. Your teenager does not need access to the joint bank account.

Built-in device options

If your household all uses the same platform, there may be a sharing feature built in:

• Apple devices support shared password groups, letting you share selected passwords and passkeys with people you choose.
• Google Password Manager lets you share passwords with members of your Google family group.

These are convenient for a few household logins. A dedicated password manager tends to be more flexible across mixed devices.

One person, one login, where possible

Many services allow separate profiles or member accounts. Giving each person their own login is better than sharing one, because it is easier to remove someone later and you can see who did what.

Emergency access

Everyday sharing does nothing for the accounts only you use. For those, look at emergency access features.

How emergency access usually works

Several password managers, including Bitwarden, Keeper and LastPass, offer a feature along these lines:

1. You nominate one or more trusted contacts.
2. In an emergency, a contact requests access.
3. A waiting period you chose in advance begins, for example 48 hours or 7 days.
4. You are notified and can decline. If you do not respond before the waiting period ends, access is granted.

Some tools let you choose whether the contact can only view your vault or can take it over. This is essentially a dead man’s switch built into the password manager, and it is one of the most useful features you can enable.

When there is no emergency access feature

Some managers handle this differently. 1Password, for example, provides an Emergency Kit, a document with your account details and Secret Key that you print and store safely, and family plan organisers can help recover other members’ accounts. In that model the plan is: print the kit, add your master password by hand if you choose, and store it where a trusted person can reach it (a home safe, or with your will).

Platform legacy features

Device and account providers have their own tools, which complement your password manager:

• Apple Legacy Contact gives a nominated person an access key which, together with a death certificate, can be used to request access to much of your iCloud data. Keychain passwords are not included, which is another reason to set up your password manager’s emergency access.
• Google Inactive Account Manager notifies chosen contacts, and can share selected data with them, after a period of inactivity you set.

Turn these on as well. They take a few minutes each.

Habits that make sharing safe

Use two-factor authentication everywhere, and plan for it. Two-factor codes are excellent protection and a common obstacle for families. Note how your two-factor works (an authenticator app, a hardware key, SMS to a specific phone) and store backup codes somewhere your emergency contact can reach.

Protect the master password like the house deeds. If you write it down, keep it somewhere physically secure. Never store it in the same place as the vault it unlocks.

Remove access promptly. When relationships change, review who has access to shared vaults and who is an emergency contact.

Tell your emergency contacts. They should know they are nominated, which tool you use, and what to do. A request they never think to make helps nobody.

Test it. Many emergency access features let you run a request with a short waiting period. Try it with your contact so you both know it works.

Passwords are only part of the picture

Credentials get someone into an account. They do not tell them which accounts exist, what each one is for, or what you would want done with it. That broader context belongs in a digital legacy plan or an in case of emergency document.

That is the gap InCase is meant to fill. Rather than replacing your password manager, it is designed to hold the surrounding information: which accounts matter, where the paperwork is, your wishes and your letters, released to trusted contacts if you stop checking in. It is still in development; your password manager’s emergency access feature is worth setting up today regardless.

Also remember that having a password does not necessarily mean someone is legally allowed to use it after a death. Many services’ terms prohibit others from logging in as you, and rules about access to a deceased person’s accounts vary by jurisdiction. Your executor may need to go through each provider’s formal process.

The short version

Stop sharing passwords by text and email. Use a password manager with a shared family vault for household logins, keep personal accounts private, and turn on emergency access with a waiting period for the accounts only you use. Add Apple’s Legacy Contact or Google’s Inactive Account Manager where relevant, plan for two-factor authentication, and make sure your trusted contacts know what to do.