Password Manager Emergency Access: What Happens to Your Vault When You Die

September 15, 2026 · 7 min read

There is a particular kind of locked room that digital legacy planning keeps running into. A family knows exactly which accounts matter. They have the death certificate, the will, the patience. What they do not have is the one master password that opens the vault where every other password lives — and a well-built password manager is specifically engineered so that nobody, including the company that made it, can open it for them.

That is not a flaw. Zero-knowledge encryption is the entire product. But it does mean the password manager is the single point in your digital life where good security and good succession planning pull hardest against each other, and it is worth being deliberate about which way you let them settle.

Why the usual routes do not work here

Most platforms have a bereavement path. Google has Inactive Account Manager, Apple and Facebook have legacy contacts, and a persistent executor with the right paperwork can usually get somewhere with a bank. Password managers are different in kind. If the vendor cannot decrypt your vault — and in a zero-knowledge design they genuinely cannot — then no amount of documentation produces the contents. There is no back office that can be escalated to, because there is nothing back there to escalate to.

So the access has to be arranged in advance, by you, using a feature built for exactly this. The good news is that the two most widely used managers both ship one, and they take noticeably different approaches.

Bitwarden: Emergency Access, with a waiting period

Bitwarden has a dedicated Emergency Access feature, available on paid plans. You nominate a trusted contact. That contact can, at any point, *request* access. You then get notified and have a waiting period you choose — commonly somewhere between a week and a month — in which to refuse. If you do not refuse, access is granted automatically.

The waiting period is the clever part, because it is what makes the feature safe to set up while you are perfectly healthy. A contact who requests access prematurely simply gets denied. A contact who requests access because you have died gets it, because nobody is there to press the button.

You also pick what the access means. View lets the contact read the vault. Takeover lets them reset the master password and assume control of the account outright, without ever learning what your original password was. The distinction matters more than it first appears — view is enough for someone tidying up subscriptions, takeover is what an executor who needs to keep an account alive for months will actually want.

1Password: the Emergency Kit, and family accounts

1Password takes a different route. Individual accounts do not have a dial-a-contact mechanism; instead there is the Emergency Kit, a PDF you generate containing your sign-in address, your Secret Key, and a blank line for your account password. Print it, write the password on it, and store it somewhere physically secure. Anyone holding a complete Emergency Kit can get into the account.

That last sentence is the whole security model, and it is worth sitting with. The Emergency Kit is a bearer instrument — like cash, it belongs to whoever is holding it. It is safe in a home safe, a bank deposit box, or with a solicitor. It is not safe in a desk drawer, an email to yourself, or a cloud folder your accounts already grant access to.

On 1Password Families, there is a better option: a second family organiser can recover other members’ accounts. Making your spouse or executor a family organiser turns succession into an account-recovery flow rather than a paper-hunt. Note that in some business deployments, administrators can disable Emergency Kits entirely — so a work vault is not a succession plan.

Choosing who, which is the harder half

The technical setup takes fifteen minutes. Deciding who to name takes longer, and it is where most plans quietly go wrong. A few things worth weighing:

• Competence over closeness. The person you love most is not automatically the person who will calmly work through a vault of four hundred entries. These can be different people, and it is not a betrayal to say so.
• Name someone likely to outlive you, and revisit the choice if that stops being obviously true.
• Consider naming two, where the tool allows it. A single named contact is a single point of failure, and they may be dealing with their own grief at the moment they are needed.
• Make sure the person knows. An emergency-access invitation that lands in an unread inbox has accomplished nothing. Tell them, in words, what they have been given and roughly what is in there.
• Check it against your will. If your will names one digital executor and your vault names somebody else, you have built a conflict that surfaces at the worst possible time.

The parts of the vault nobody thinks about

Two things live in password managers that are easy to forget until they break.

The first is two-factor codes. If you store your TOTP seeds in the same vault, emergency access carries them, and your executor can actually complete logins. If your second factor is a hardware key or an authenticator app on a phone that is now locked, sitting in a drawer, and running down its battery, then vault access alone may not open very much. Worth checking which situation you are in.

The second is recovery codes — those one-time backup codes services hand you when you enable 2FA. Most people download them once and lose them. Stored in the vault, they are frequently the thing that saves an executor weeks.

A short setup you can do this week

1. Open your password manager and find out whether it has an emergency access feature, and whether your plan includes it. Many people are one tier below the feature they assume they have.
2. Set it up. Nominate the contact, choose the waiting period, and choose view versus takeover deliberately rather than accepting the default.
3. If you are on 1Password, generate the Emergency Kit, write the account password on it by hand, and put it somewhere with a lock and an address.
4. Audit what is actually in the vault: are your 2FA seeds there, are your recovery codes there, are the important accounts in it at all?
5. Tell the person. Out loud, not by invitation email alone.
6. Write down where the arrangement lives, and keep that note with your will — the digital legacy planning guide is a reasonable place to start that list.

Access is not the same as being told

Every mechanism here solves one problem: getting the right person through the door. None of them explains anything. An executor who inherits a fully unlocked vault still has no idea which accounts matter, which subscriptions to cancel first, which photographs you would have wanted kept, or what you would have said to any of the people on the other end of those accounts.

That is a separate job, and it is better done separately. Sort the keys with the tools above. Then handle the words on their own terms — whether that is a legacy letter written in advance or messages timed to arrive afterwards. A vault passes on your access. It does not pass on your intent, and it was never built to.