Set up trusted and recovery contacts for a parent's accounts

01

Begin with the job, not the person#

"Make me your trusted contact" sounds simple, but it can describe several unrelated permissions. Before changing a setting, finish this sentence: "I want this person to be able to..." The answer might be receive an emergency call, help recover an account, view one shared calendar, manage a bill, or receive selected data after death.

Choose one built-in role for one stated job. Do not turn general family trust into permanent access to email, photos, location, finances, health information, and every other account. Broad access increases the harm caused by a lost phone, compromised relative, family disagreement, or simple mistake.

A trusted person is not automatically an authorized user, legal agent, health care proxy, account owner, or beneficiary.

02

Separate the four roles families confuse#

Use different names in the family plan so everyone knows which permission exists and when it applies.

• Emergency contact: someone responders or a device may notify during an emergency. This does not grant access to the person's accounts.
• Recovery contact or recovery method: a person, phone, email, key, or provider process used to help the owner regain an account. Its power varies by provider.
• Authorized helper or delegate: someone allowed to perform a defined task, such as viewing a shared calendar or managing a service through an official role.
• Legacy or inactive-account contact: someone selected for a provider's process after death or a defined period of inactivity. This is not day-to-day access.

If a setting does not clearly say what the other person can see, change, download, or delete, stop and read the provider's current documentation before enabling it.

03

Choose a contact who can do the actual job#

The closest relative is not always the right contact. Choose someone who will answer, follow instructions, respect limits, protect their own devices, and tell the parent when the role is used. For time-sensitive roles, add a second person only if the provider supports it and responsibility remains clear.

Ask before adding anyone. Explain what notification they will receive, what they may need to do, and what they will not be able to access. Record the role, not a password, in the family plan. Review the contact after a move, phone-number change, family conflict, death, loss of capacity, or a change in the helper's availability.

04

Protect the email and phone that recover everything else#

The primary email account and mobile number often sit underneath other accounts. Password-reset links, sign-in prompts, and verification codes may arrive there. Secure these first with a unique password, multifactor authentication, current recovery details, and a device lock the parent can use reliably.

CISA recommends long, random, unique passwords, a password manager, multifactor authentication, phishing awareness, and current software. A password manager can reduce reuse, but the family should understand its master-password and recovery model before depending on it. Do not create a shared vault that gives every helper every credential by default.

Keep a simple inventory that names the account, owner, recovery method, trusted role, and last review date. Do not write the password, device passcode, one-time code, security answer, recovery key, or full financial information in that inventory.

05

On Apple, use separate accounts and the exact role#

Apple says each family member should use their own Apple Account. Family Sharing can share eligible subscriptions and content while each person keeps a separate, more private account. Sharing one Apple Account can mix messages, call history, purchases, health details, and other personal information.

Apple's current tools solve different problems:

• Medical ID emergency contact: added in the Health app. When Show When Locked is enabled, emergency information and contacts can be available from the Lock Screen. Availability and emergency sharing vary by country or region.
• Apple Account recovery contact: someone the owner selects to provide a recovery code if the owner is locked out. Apple says this contact does not gain access to the account.
• Family Sharing member: a separate Apple Account invited to share eligible services or content. Location sharing is a separate choice and can be changed.
• Legacy Contact: someone selected to request access to certain Apple Account data after the owner's death. An access key and documentation of the death are required; the document requirements vary by country or region. iCloud Keychain passwords, passkeys and some purchased content are excluded.

An Apple recovery contact code should be generated only through the documented recovery flow and provided directly to the account owner who initiated it. It is not an everyday sign-in code and does not reveal the password.

06

On Google, keep recovery and future access separate#

Google's recovery phone is intended to help the account owner regain access. Google advises using a text-capable mobile phone that belongs only to the owner, is used regularly, and stays with them. A recovery email should be used regularly and be different from the address used to sign in.

Review both details while the parent is signed in on a familiar device. Do not replace the parent's phone with a relative's number merely for convenience without understanding how that changes control and recovery. Google notes that changes to recovery information may take time to become effective.

Google also offers recovery contacts for eligible accounts. Open Google Account → Security & sign-in → Recovery contacts to invite a trusted person. This role helps the owner recover access; it does not receive their security alerts. Google Workspace and Advanced Protection accounts cannot add recovery contacts. Child accounts cannot add or serve as one.

Set this up before a lockout. The invitation expires after seven days; after acceptance, another seven days must pass before the contact can help. During recovery, the owner gives that previously approved contact a number to match on their own device. The number expires after 15 minutes. Further verification or a security hold may still be required.

Google's Inactive Account Manager serves a different purpose. The owner can choose what happens after a selected period of inactivity, including notifying contacts or sharing selected data with up to ten people. Contacts are not notified during setup. This is future planning, not a way to support the account every week.

A recovery contact, recovery email, recovery phone, two-step method and Inactive Account Manager contact are different roles. Record which one exists and who controls it.

07

For other services, look for delegated access first#

Banks, utilities, health portals, phone carriers, insurance companies, password managers, home-security systems, and subscription services use different roles. Look for terms such as authorized user, delegate, caregiver access, household member, viewer, emergency access, trusted contact, or account manager in the official documentation.

Read what the role can view, change, buy, download, cancel, and delete. Check whether activity is logged, the owner is notified, access can be time-limited, and the role can be removed without closing the owner's account. If the service offers no limited role, ask whether the task can be completed together on the parent's device instead of sharing the password.

For a US brokerage account, a trusted contact is someone the firm may contact in limited circumstances. Naming one does not give them trading authority or make them a power of attorney. Ask the firm about the specific role you need.

Do not treat a website's trusted-contact feature as legal authority. Financial, health, housing, insurance, and estate decisions may require separate documents or regulated processes. Obtain appropriate professional guidance for those arrangements.

08

Never make ordinary verification codes a family habit#

The Federal Trade Commission warns that a verification code can be the second key a scammer needs to enter an account. An unexpected caller who asks for a password or verification code should not receive it, even if they claim to be the bank, a technology company, or a helpful relative.

Stop the conversation and contact the company through its official app, statement, or independently verified website. If a family member helps with a sign-in the parent intentionally started, the parent should enter ordinary sign-in codes on their own device. The helper does not need to receive them. Never read a code to someone who initiated contact unexpectedly.

Use recovery-contact prompts only within the provider's documented process, started by the account owner with a previously approved helper. An Apple recovery contact provides a recovery code to the owner; Google uses number matching. Neither process justifies giving an unexpected caller a password or ordinary sign-in code.

09

Test the permission and the exit#

After setup, confirm that the invited person received the correct role and no broader access. Test one safe, ordinary task without moving money, exposing private records, changing live medical information, or creating an emergency. Confirm that the owner receives expected notifications.

Then find the removal control. The parent should know how to pause or remove the person, and another trusted family member should know that the role exists. For recovery and legacy arrangements, store provider-issued recovery materials according to the provider's instructions and any applicable estate plan, not in the general family communication worksheet.

• Role and purpose confirmed by the parent.
• Helper accepted and understands the limit.
• Owner account and helper account remain separate.
• Multifactor authentication and recovery details tested safely.
• Removal path located and review date recorded.

10

Review the system every three months#

A quarterly review can be short. Confirm that phone numbers and recovery emails still work, invited people still agree, the owner recognizes every device and role, and no former helper retains access. Remove obsolete devices, old recovery methods, and unused permissions through the provider's official settings.

Review sooner after a lost phone, suspicious message, compromised account, death, family dispute, new caregiver, change in legal authority, or major update to the service. If ownership or authority is unclear, pause changes and get appropriate legal, financial, clinical, or privacy guidance.

A good access plan helps without taking the account away from the person it belongs to.