What is the safest way to share passwords with family after death?

For most people: keep passwords in a reputable password manager, then use its emergency access or recovery feature, or store the master password and recovery details (such as an Emergency Kit) in a sealed place that a trusted person knows about. Avoid emailing passwords or keeping an unencrypted list.

How does Bitwarden Emergency Access work?

A Bitwarden Premium user (or a member of a paid organization) can name trusted contacts who have a Bitwarden account. The contact can request access; if the owner does not reject the request within a wait time the owner chose, the contact gets either View access (read-only) or Takeover access (they set a new master password).

Does 1Password have an emergency access feature?

1Password's main approach is the Emergency Kit, a PDF with your sign-in address, email, Secret Key and space to write your account password, which 1Password suggests storing safely or giving to someone in your will. In 1Password Families, organizers can start account recovery for members who are locked out.

Should I put my passwords in a message delivered after death?

It depends on how that service stores data. Final Saying encrypts messages at rest, but the key is held on its server, so it is not zero-knowledge. A safer pattern is to send instructions and the location of your Emergency Kit or sealed envelope rather than the master password itself.

How to share passwords with your family in case you die

Good security and good succession planning pull in opposite directions. Everything that keeps a stranger out of your accounts, such as a strong master password, two-factor codes on your phone and a locked device, also keeps your family out when they genuinely need in. The goal is not to weaken your security. It is to build one deliberate, well-guarded way through it that only works for the right people at the right time.

This guide walks through the main options, what each one does well, and where each one falls short. Product details are correct at the time of writing (October 2026); check each vendor's help page before relying on them.

What not to do

Do not email passwords, to yourself or to anyone else. Email sits in multiple inboxes and backups for years.
Do not keep a plain list in a notes app or spreadsheet. If it syncs to the cloud, it is only as safe as that account.
Be careful with a full paper list in a drawer. Paper is not wrong, and it is better than nothing, but a complete list of every password is a single object that anyone in the house can read, and it goes out of date within months.

The underlying idea: your family does not need every password. They need a way into the one place where the passwords are kept, plus the second factors that guard it.

Option 1: a password manager with emergency access

Bitwarden Emergency Access

Bitwarden has a dedicated feature for this. According to Bitwarden's help page "Emergency Access":

It is available to Premium users and members of paid organizations (Families, Teams, Enterprise). The trusted contact only needs a Bitwarden account, which can be free.
You choose a wait time. When a contact requests access, you can reject it; if you do not respond within that time, access is granted automatically. This is, in effect, a small dead man's switch for your vault.
You choose the level: View gives read-only access to vault items, while Takeover lets the contact set a new master password and take over the account.
The exchange uses public-key encryption, so Bitwarden itself does not see the vault contents.

The main limitation is practical: your contact has to create a Bitwarden account and accept the invitation while you are alive, and they need to know the feature exists. Tell them.

1Password: Emergency Kit and family recovery

1Password takes a different approach. Its help page "Get to know your Emergency Kit" describes a PDF containing your sign-in address, email address, Secret Key and a space to write your account password. 1Password suggests storing a printed copy somewhere safe, such as with other important documents, and mentions giving a copy to a trusted person or to "someone in your will".

In 1Password Families, a family organizer can start account recovery for a member who has forgotten their password or lost their Secret Key (see also "Family organizer"). That feature is designed for a living member who is locked out, not as an after-death handover, so for estate planning the Emergency Kit is the more direct tool.

Other password managers have their own versions of these features. Whichever you use, look for the vendor's official documentation on emergency access or account recovery.

Option 2: the sealed-envelope approach

If your password manager has no emergency access feature, or you prefer something simpler, a common pattern is:

Write down only the master password and the recovery details (for example a printed Emergency Kit or recovery codes).
Seal it and store it with your will, in a home safe, with a solicitor or notary, or in a bank safe-deposit box. Note that safe-deposit boxes can themselves be hard to open after death in some countries.
Tell one or two trusted people that it exists and where it is, without giving them the contents.
Update it whenever you change the master password, and write the date on the envelope.

Do not forget the second factors

A master password alone is often not enough. If your password manager or email account uses two-factor authentication, your family will also need one of these:

Recovery codes for the accounts that matter most, printed and kept with the master password.
Your phone passcode, if codes arrive by SMS or an authenticator app on that phone. A locked phone can block everything else.
Hardware keys, if you use them, and where the backup key is kept.

Use the platforms' own legacy tools too

Big platforms have their own after-death features, and they work independently of your password manager:

Apple Legacy Contact lets a person you choose request access to data in your Apple Account using an access key and a death certificate. It does not include iCloud Keychain passwords or passkeys. See Apple's "How to add a Legacy Contact for your Apple Account" and our guide on what happens to your Apple ID when you die.
Google Inactive Account Manager lets you choose up to 10 people to be notified, and optionally share data, after a period of inactivity you set. See Google's "About Inactive Account Manager" and what happens to your Google account when you die.

Because Apple's Legacy Contact excludes Keychain, people who rely on iCloud Keychain for passwords need a separate plan for those.

What to leave out

Passwords your family does not need. Old forums, shopping sites and abandoned accounts can simply lapse.
Accounts you would rather were closed unread. Say so explicitly; a clear wish is easier for family to respect than silence.
Anything that duplicates your will. Instructions about who inherits what belong in a legal document, not a password list. See digital will vs legal will.

Where Final Saying fits, and where it does not

Final Saying is not a password manager, and we would not suggest using it as one. What it does well is the part password managers do not: making sure a message reaches the right person if you stop responding. You write the message now; we send a check-in email on day 0 and reminders on days 7, 12 and 15 (Premium users also get a WhatsApp reminder on day 16), and only on day 17, and only if the final reminder was actually sent, is the message delivered.

Be clear about how it stores data. Messages are encrypted at rest with AES-256-GCM, but the encryption key is held on our server so that the service can deliver them. That means it is not zero-knowledge or end-to-end encrypted, unlike Bitwarden or 1Password vaults. Our security page explains exactly who holds the key. For that reason, we recommend not storing a raw master password in a message unless you have read that page and accept the trade-off. A better pattern is a message like: "My passwords are in Bitwarden. You are my emergency contact; request access from the app. The recovery codes are in the sealed envelope in the blue folder in the desk."

To pull all of this together, use our free digital legacy checklist, and see digital legacy planning for the wider picture, including what happens to bank accounts.