To share passwords safely with family, use individual or delegated accounts wherever the service supports them. When a shared login is necessary, share only that item through a trusted password manager or a supported family-sharing feature. Keep your master password, private email and unrelated logins to yourself.
The important distinction is whether you are sharing a managed item or sending someone a copy. A copy can remain usable after you stop sharing, and changing access in a password manager does not necessarily end a session at the original website.
Choose the Right Kind of Access
- Individual accounts or delegated access: usually the clearest choice when each person needs their own permissions or activity history. Check whether the service offers a household member, authorised user or other suitable role.
- A shared vault: useful for recurring household logins when the manager lets you limit membership and maintain a shared item. Check how edits and permissions work.
- A family password-sharing feature: convenient, but some features send a copy rather than maintain one shared record.
- A temporary sharing link: potentially useful for a one-off need if your provider supports it. Expiry controls the link, not information a recipient already viewed or saved.
Check the account provider’s sharing rules. Sharing a streaming login, a utility account and a bank login are different decisions. For sensitive services, use their own authorised-access process where available rather than assuming password sharing is appropriate.
Prepare the Account Before You Share It
- Confirm that the recipient needs access and agrees to receive it. Do not use family sharing to monitor another adult’s private accounts without permission.
- Give the shared account a unique password. If its password is reused elsewhere, replace it before sharing.
- Check which email address, phone number and recovery methods control the account. Sharing the password may not be enough to sign in, and sharing a recovery code may grant much broader control.
- Choose the narrowest useful set of recipients and permissions. Explain who can edit, delete or reshare the item.
- Keep everyone’s own password manager account and device protected. A shared account can be exposed through any authorised member’s compromised device or account.
If your household has not yet chosen a shared-vault structure, start with our family password manager setup guide.
How Shared Vaults Work in 1Password Families
In 1Password Families, moving a login into a shared vault makes it available to the people who can access that vault. The built-in Shared vault is intended for the family group; create a separate vault with selected members when only some people need a particular login.
Before moving the item, check the destination vault’s membership. Then ask the intended recipient to find the login in their own account and test it on the correct service. Keep personal logins in private storage. Removing a person’s vault access cannot erase a password they already copied.
How Apple Shared Password Groups Differ
Apple’s shared password and passkey groups require compatible software: iOS 17, iPadOS 17 or macOS Sonoma 14 or later. The exact interface depends on the installed version.
The group owner controls who joins or leaves, but members can add, view, edit and delete passwords in the group. Do not treat this as a read-only vault for children. Select a group whose members should all have that level of access, and explain the consequences of changing or deleting a shared item.
Use a dedicated group for the relevant household accounts rather than adding unrelated personal passwords. Check that every intended member’s device can access the group before relying on it.
How Google Password Manager Family Sharing Works
Google Password Manager lets you share saved passwords with members of your Google family group. Crucially, Google describes the recipient’s saved password as a copy. Do not rely on this method to keep everyone’s saved password updated automatically or to withdraw a copy remotely.
Using Google’s current computer instructions:
- Open Chrome and choose More, then Passwords and autofill, then Google Password Manager.
- Select the saved password you want to share and choose Share.
- Select the intended family member or members, then confirm Share.
- Ask the recipient to check the copied login in their Google Password Manager and test it on the correct site.
If you later change the account password, coordinate the update with everyone who still needs access. This is different from maintaining one shared vault item. Menu labels and availability can differ on other devices, so use the instructions for the platform in front of you.
Avoid Sharing More Than the Login Requires
Do not send your vault’s master password, a full password export or your personal account-recovery bundle just to share one household login. Those materials can expose many more accounts than intended.
Some messaging services use end-to-end encryption, so it is inaccurate to describe all messages as unencrypted. The practical problem is that a message still creates another copy, with its own history, backups and recipient access. It also lacks the permission and update controls you may get from a shared vault.
Be especially deliberate with one-time codes and recovery codes. A recovery code can let someone bypass a normal sign-in step, and an authenticator code stored alongside a password changes how those factors are separated. Prefer a service’s individual member access when that solves the need without passing codes around.
How to Stop Sharing Safely
When someone should no longer have access, work through both the password manager and the original service. Removing a shared item alone may be insufficient.
- Remove the person from the relevant vault or group, or disable the sharing link.
- Change the shared account password if they may know or have saved it. Save the new credential only where the remaining authorised people can access it.
- Review the service’s signed-in devices and sessions. Use its sign-out or session-revocation controls where available.
- Check other access routes, including passkeys, recovery contacts, recovery codes, linked accounts and delegated users. Remove access that is no longer authorised.
- Test the updated login with the people who should retain access.
Changing a password does not universally revoke every existing session or sign-in method. Follow the account provider’s own security controls and avoid promising an immediate, complete lockout based only on a vault change.
Keep Emergency Access Separate
Everyday household sharing is different from arranging access if you become unavailable. A trusted person may need an emergency plan without having routine access to all your accounts now. See how password manager emergency access works for waiting periods, permissions and recovery alternatives.
Keep the household arrangement transparent and proportionate. Share what people need, review it when circumstances change, and use our password manager safety guide to understand the risks that remain.
Frequently Asked Questions
Can I revoke a password after sharing it?
You can remove access to a shared vault or link, but you cannot reliably erase a password someone has already copied. Change the credential and review sessions and other sign-in methods at the original service when access needs to end.
Does Google family password sharing stay updated automatically?
Google describes the shared password as a copy saved in the recipient’s account. Treat it as a separate copy and coordinate later changes rather than assuming it behaves like a shared vault item.
Is it safe to share my password manager’s master password?
Avoid doing so for ordinary family sharing. It can expose your private vault and other account controls. Use a shared item or a vault with selected members instead.
Share this article
Stuart Kerr Spindlow is Impulsec’s Publisher, Chief Editor and Lead Reviewer. He writes and maintains coverage of consumer cybersecurity and digital-safety software, with a focus on practical suitability, limitations and the evidence behind product claims. Read Stuart’s full profile.