Password Manager Emergency Access: How It Works

Password manager emergency access lets a trusted person request access to your vault under rules you set beforehand. It can help if you are unavailable or unable to sign in, but the scope, delay and account requirements vary. Set it up while you can still unlock your account, and check exactly what the contact would receive.

For everyday household logins, a limited shared vault is usually the better starting point. Emergency access can expose much more information. If you are already locked out, start with our forgotten master password guide to identify recovery options you may already have.

Choose the Right Kind of Backup

• Shared access: another person can already use selected household items. This is useful for routine tasks, not just emergencies.
• Emergency access: an appointed contact requests access, often subject to a waiting period and an opportunity for you to refuse.
• Account recovery: a supported process restores your own access. It may require saved recovery material, email verification or help from an organiser.
• Emergency documents: stored instructions and sign-in material can help a trusted person, but possession may allow immediate access if all required factors are included.

These options are not interchangeable. A recovery contact may only help you regain access rather than be able to read your vault. A shared folder may contain only a handful of items, while emergency access can cover your personal vault.

How Provider Options Differ

Bitwarden documents two access levels: view access to individual vault items, including passwords and attachments, or takeover access that replaces your master password and removes existing two-step login methods. Adding contacts requires premium access, including qualifying paid organisation membership; the contact can use a free account on the same server.

Choose takeover only when you intend to give that level of control. View access still reveals secrets that can be copied or used on the underlying websites. Neither setting should be treated as a limited household folder.

Keeper’s emergency access feature allows up to five trusted contacts and a configurable delay. Its documented access is read-only: contacts cannot edit, move, delete or export vault contents through that feature. Contacts need a Keeper account and an established sharing relationship. Read-only does not prevent someone remembering or manually recording information they can see.

1Password’s Emergency Kit is a different mechanism. It includes your sign-in details and Secret Key, plus a space for your account password. The password is not automatically filled in for you. A kit without the required password and additional authentication arrangements is not a complete emergency sign-in plan. Its family organiser recovery is also distinct from a timed request to read someone’s vault.

Set Up Bitwarden Emergency Access

The web-app sequence below follows Bitwarden’s current setup instructions. Both people must finish their part; sending an invitation alone is insufficient.

1. Open the Bitwarden web app and go to Settings > Emergency access.
2. Choose Add emergency contact, enter the intended person’s account email, and select the access level and waiting period. Verify the address directly with them.
3. Ask the contact to accept the invitation using their own Bitwarden account on the same server.
4. Return to Emergency access. When the contact needs confirmation, choose Confirm and compare the displayed fingerprint phrase with them.
5. Check the completed contact entry and explain how they would request access. Confirm you can receive the notification emails.

An access request can be approved or denied by you. If you do not respond, the configured delay determines when access is granted. Choose a delay that balances urgent needs with the time you realistically need to notice and challenge an unexpected request.

Check the Plan Without Triggering a Takeover

Walk through the process together while you are both available. Verify the contact can find the correct account, understands the agreed circumstances and knows how to reach you independently. If you practise a request, read its consequences first and deny or cancel it before access is granted. Do not complete a takeover merely to test notifications.

• Check what happens if your subscription lapses. Do not assume every provider disables or retains existing contacts in the same way.
• Confirm whether shared or organisation-owned items are included. Do not assume personal-vault access covers everything.
• Keep the contact’s own account protected with a unique password and appropriate additional authentication.
• Review contacts after a change in relationships, email accounts or password-manager provider. Remove obsolete arrangements.

If someone has already viewed a password, removing emergency access cannot make them forget it. Where access should end, review the underlying service, change exposed credentials and revoke sessions or other sign-in methods as appropriate.

Prepare Instructions Your Contact Can Use

Keep a short account inventory with provider names, the location of the emergency instructions and priorities such as essential household bills. Keep that inventory separate from a broadly shared document full of passwords. A sealed copy in a secure location can be useful if the intended person knows how to obtain it.

Do not assume having a password authorises every action. For banking, work systems or a deceased person’s accounts, use the institution’s authorised representative or bereavement process and seek appropriate advice. Technical access does not replace those requirements.

For day-to-day arrangements, follow our family password-sharing guide. Separate ordinary shared logins from the broader information someone might need in an emergency.

Frequently Asked Questions

Share this article

WhatsAppLinkedInRedditFacebookX