Family password managers: what to share and what to keep private

01

Start with the help your parent actually wants#

A family password manager can make a small job easier: helping a parent reconnect a tablet to Wi-Fi, for example, without asking them to read a password down an international phone line. Its value depends on clear boundaries. Paying for the subscription does not settle who should see a parent's email, photographs or financial information.

Start with one agreed task and let your parent choose the helper. Ask what may be shared now, what should stay private and what should happen if they cannot respond. Record those choices in ordinary language, with a review date. Someone may want help organising passwords while continuing to enter them privately. That is a workable arrangement.

This guide uses 1Password Families and Bitwarden emergency access to explain different permission designs. It is based on official documentation checked on 9 September 2026; it is not a hands-on comparison or a recommendation of a winner.

02

Separate membership, sharing and recovery#

Think of three separate decisions. Membership determines who belongs to a subscription. Sharing determines which saved items another person can access. Recovery determines who can help after a lockout, or gain access under an emergency arrangement. A family should be able to describe all three without using the vague phrase 'they have my passwords'.

In About 1Password Families, 1Password describes separate account passwords for family members, a built-in Private vault and a Shared vault. The family organiser manages the account and the vaults people can access. Being the organiser is therefore a position of trust, even when the immediate job is paying the bill.

Do not assume that every product's 'family', 'owner' or 'emergency contact' label means the same thing. Check the documented powers for the role being granted. A person who needs one household login may need sharing access; that alone is not a reason to give them responsibility for other people's recovery.

03

Make private storage the starting point#

Use the parent's own Private vault for information they want to keep to themselves. 1Password's Families guide identifies this as the place for personal email and other unshared logins. Family membership does not automatically put those items in the family's Shared vault. Treat organisers as trusted administrators, however: they manage vault access. Do not rely on a custom vault's name, such as 'Mum private', to establish who can access it.

Review items individually. Personal messages, identity documents and recovery material deserve an explicit decision rather than a bulk move. A useful household note might contain a provider's name, an account reference and its support number without containing a password at all.

For a bank or health service, ask the provider which official arrangements it offers for a helper before sharing a login. A password manager cannot tell you whether the provider permits someone else to use the account. Keep that decision separate from the software setup.

04

Choose a shared vault or a single shared item#

1Password's Share passwords with your family explains that the included Shared vault is available across the family account. For a smaller audience, it supports additional vaults shared with selected relatives. A household Wi-Fi password and an account used only by a parent and one helper need not have the same audience.

Permissions still need checking. Create and share vaults says people with vault access can view, print and copy its items; newly shared access also initially includes editing and deleting items. Permission to manage a vault is separate from permission to view or edit its contents. Review each person's permissions after setup.

For a one-off handover, Securely share 1Password items with anyone describes an expiring link to a copy of an item, optionally restricted to specified people. That copy does not receive later updates automatically. Use the shortest practical expiry and verify the recipient. Ending a link or removing vault access cannot make someone forget information they have already copied.

05

Understand what organiser recovery actually changes#

According to 1Password's Recover accounts for family or team members, an organiser starts recovery, the member follows an email workflow and creates a new account password, and the organiser completes the process. The member receives a new Secret Key, retains their previous data and must sign in again on their devices. The documentation explicitly says their two-factor authentication is reset.

This is a process for restoring the member's access, not a routine view of their Private vault. Plan for the parent to reach their email during recovery, and for both people to be available to finish the steps. Afterward, save the new Emergency Kit, replace outdated recovery instructions and check that two-factor authentication is set up again.

1Password recommends another family organiser so help remains available if the first organiser is locked out. Choose that person with your parent's agreement. A recovery plan that depends entirely on one relative, one phone and one email inbox deserves another look.

06

Bitwarden emergency access grants a different kind of access#

Bitwarden's About Emergency Access describes a contact appointed in advance. Its View option reveals all items in the individual's vault, including passwords and attachments. It is broader than sharing one selected login. Takeover lets the contact set a replacement master password for ongoing read and write access and removes existing two-step login methods.

Request & Grant Emergency Access explains that the contact requests access and the owner receives an email. The owner can approve or reject it; access is otherwise granted after the configured waiting period. Agree what circumstances justify a request and choose a delay that accounts for travel, time zones and how often the parent reads email.

Do not describe either option as equivalent to 1Password organiser recovery. One helps a member restore their sign-in; the other deliberately enables a contact to access vault information. Discuss the full scope before enabling it, and do not assume an individual-vault emergency arrangement covers every separately shared resource.

07

Check the subscription and server before invitations#

Before paying or inviting anyone, check the required plan, member allowance, renewal arrangements, supported devices and account region. Write down who handles billing and how the family will notice a failed renewal. Check the current checkout for currency, taxes and any subscription terms that matter to relatives living in different countries.

Bitwarden's emergency-access documentation says appointing a contact requires premium access, including through paid Families membership. The contact can have a free or premium account but must use the same Bitwarden server. Its Server Regions documentation explains that US and EU accounts are separate; an account exists in the region where it was created.

For relatives abroad, compare the actual sign-in server before troubleshooting an invitation. Where people live and where their accounts were created are different details. Record the relevant sign-in address in the family instructions, alongside the product name.

08

Rehearse with harmless information#

Schedule a short session while your parent has working access and enough time to stop comfortably. Let them operate their device. If you are helping remotely, agree when screen sharing should pause so they can enter private information without showing it.

Create a clearly labelled practice note containing no real credentials. Share it with the intended helper and confirm what they can read or change. Check the selected vault, edit the note and verify that the helper sees the expected result. Then review how its access can be removed.

Walk through the recovery instructions without deliberately locking the parent out or triggering a real takeover. Identify where the emails would arrive, which person acts next, where current recovery material is kept and how authentication would be restored. A Bitwarden takeover changes credentials and authentication settings, so it is unsuitable as a casual practice button.

Finish by having your parent explain how to find the app, locate the shared item and contact the helper. Simplify the written instructions if that explanation is difficult.

09

Plan for a lost phone and a helper leaving#

For a lost phone, start with the provider's current recovery guidance and another device or recovery method already available to the owner. Keep essential instructions accessible without needing the missing phone. Once access returns, review the lost device's access, refresh affected recovery material and check authentication settings.

For a planned departure, arrange the parent's continuing account access before changing membership. 1Password's Add and remove family members currently says removal ends access to shared items and allows 30 days to migrate personal items; unshared personal items remaining afterward are permanently deleted. Confirm the current procedure with the parent before anyone removes their membership.

Emergency access needs its own review. Bitwarden says granted View access continues until revoked. After Takeover, its documented return-of-control process requires the owner to obtain the new master password, sign in and change it again. Revisit emergency contacts separately from family membership, and change previously shared credentials when continued knowledge of them would be inappropriate.

10

A checklist for the next family session#

Keep this short record with your setup instructions and revisit it after a new device, changed helper, move or subscription change.

• Agree the specific task and the parent's consent to each shared item.
• Check the actual audience and permissions of every shared vault.
• Keep owner-only information in the intended private storage.
• Name the recovery helper and an alternative way to reach them.
• Record the sign-in server, billing owner and review date.
• Check access to recovery email and securely stored recovery material.
• Rehearse ordinary sharing with a harmless practice note.
• Write down how the parent keeps access when a helper leaves.