Passwords, Password Managers and Emergency Access

Every digital estate plan runs into the same tension. Anything that makes it easy for your family to get into your accounts also makes it easier for a thief, and anything that keeps thieves out can lock your family out too. This chapter shows how to resolve that tension with a few tools that already exist: a password manager with emergency access, a sealed backup of the one password that opens it, and recovery codes for the accounts that matter most. It also explains the limits: having access is not the same as having authority, and the plan should respect both.

Your email and your phone are the master keys

Before thinking about any individual password, look at the two things nearly every account depends on.

• Your main email address. Almost every service resets a forgotten password by sending a link to your email. Whoever can read that inbox can usually take over everything else.
• Your mobile number. Many services confirm a login or a reset with a code sent by text message. If the number stops working, those codes stop arriving.

That second point produces one of the most common and avoidable problems in settling an estate: a family cancels the phone plan in the first weeks to save money, and with it disappears the only way to receive login codes for dozens of accounts. Write a plain instruction into your plan: keep my mobile number active until the estate is settled. Many carriers let a family keep or transfer a number on request.

Protect these two accounts best of all, with a strong unique password and multi-factor authentication, and make sure your recovery information on each is current.

One password manager, one source of truth

A password manager stores a different strong password for every site behind one master password. It solves your security problem while you are alive and gives your family a single, organized place to look later. Most also hold secure notes, which makes them a natural home for the instructions in your inventory from Chapter 1.

Current federal guidance on passwords, from the National Institute of Standards and Technology, is worth knowing because it overturns some old habits:

• Length beats complexity. A long passphrase of several unrelated words is stronger and easier to remember than a short string of symbols.
• Never reuse a password. When one site is breached, reused passwords let attackers into the others.
• Change a password when there is a reason, such as a breach or a suspicion, not on a fixed schedule. Forced periodic changes tend to produce weaker, predictable passwords.
• Add a second factor wherever it is offered, ideally an authenticator app, a passkey or a hardware security key rather than a text message.

Passkeys deserve a note. They replace passwords on many sites and are stored in your phone's or password manager's sync account. That makes them strong, and it also means that whoever can get into that sync account can use them. Plan access to that one account and the passkeys follow.

Emergency access: the built-in inheritance feature

Several password managers offer an emergency-access feature, and it is the closest thing the industry has to a proper inheritance mechanism. It usually works like this:

1. You name one or more trusted people and choose a waiting period.
2. In an emergency, your contact requests access.
3. You are notified and can refuse during the waiting period.
4. If you do not refuse, because you cannot, access is granted when the period ends.

The waiting period is the main choice. A short one gets your family in quickly if you are suddenly incapacitated, but gives you little time to stop a request you did not expect. A longer one protects you better and leaves your family waiting. Many people choose a period of days to a few weeks, and name a second contact in case the first is unavailable.

Some managers have no such feature and rely instead on a shared family vault or on a printed recovery sheet. A shared vault, in which you and your partner each keep a folder the other can open, works well for a couple and also helps during life, when one partner handles a bill the other usually pays.

Backing up the master password and the recovery codes

Every arrangement above depends on one thing that must never be lost: the master password, plus, for some managers, a secret key or recovery code that the company cannot reset for you.

A sensible backup is a single sheet of paper containing:

• the master password and any secret key or recovery code for the password manager;
• the recovery codes for your main email account, which most providers let you print;
• where any hardware security key is kept. Register a second key, and store it with the sheet.

Seal it in an envelope and keep it somewhere secure that your executor can actually reach: a home safe whose combination they know, or with your attorney. A bank safe deposit box is less suitable for this than people assume. After a death the box may only be opened under the state's rules, sometimes after the executor is appointed, so it can be slow to reach exactly when the sheet is most needed. State rules on opening a box differ.

Re-seal the envelope whenever the master password changes, and date it, so nobody wonders which copy is current.

Access is not authority

Chapter 2 explained that logging in as someone else can breach a service's terms, and that federal privacy law protects the content of messages. A password manager does not change that. It makes good uses easy and should not be treated as permission for every use.

Reasonable uses for your executor include finding out what exists, downloading records and photos, securing an account that is at risk, and using a service's own closure or memorial process. Moving money by logging in as you is a different matter. A power of attorney ends at death, banks expect the formal process, and transactions made in a dead person's name can create legal and tax problems for the person who made them. Financial accounts should pass through the estate or through a named beneficiary.

Say this in your instructions, so your family knows the line you intended.

Digital vault services

Some companies sell a "digital vault" that stores documents, account lists and instructions, and releases them to named people after a death. They can be useful, especially for someone who wants one place for everything. Before relying on one, check three things: how it confirms a death before releasing anything, whether you can export everything if the company changes or closes, and whether it simply duplicates what your password manager and your attorney already hold. A vault that only you know about solves nothing.

YOUR NEXT STEPSDo this now

1. Choose a password manager if you do not use one, and move your main email account and your financial logins into it first.
2. Turn on emergency access, or set up a shared vault, naming a main contact and a backup, with a waiting period you are comfortable with.
3. Print the recovery codes for your email and your password manager, seal them with the master password, date the envelope, and tell your executor where it is.
4. Add a line to your instructions asking your family to keep your mobile number active until the estate is settled.
5. Ask your emergency contact to make a test request so you both see how the process works, then cancel it.