Quick Answer
To share passwords safely with family, use individual or delegated accounts wherever the service supports them. When a shared login is necessary, share only that item through a trusted password manager or a supported family-sharing feature. Keep your master password, private email and unrelated logins to yourself.
The important distinction is whether you are sharing a managed item or sending someone a copy. A copy can remain usable after you stop sharing, and changing access in a password manager does not necessarily end a session at the original website.
Choose the Right Kind of Access
- Individual accounts or delegated access: usually the clearest choice when each person needs their own permissions or activity history. Check whether the service offers a household member, authorised user or other suitable role.
- A shared vault: useful for recurring household logins when the manager lets you limit membership and maintain a shared item. Check how edits and permissions work.
- A family password-sharing feature: convenient, but some features send a copy rather than maintain one shared record.
- A temporary sharing link: potentially useful for a one-off need if your provider supports it. Expiry controls the link, not information a recipient already viewed or saved.
Check the account provider’s sharing rules. Sharing a streaming login, a utility account and a bank login are different decisions. For sensitive services, use their own authorised-access process where available rather than assuming password sharing is appropriate.
Prepare the Account Before You Share It
- Confirm that the recipient needs access and agrees to receive it. Do not use family sharing to monitor another adult’s private accounts without permission.
- Give the shared account a unique password. If its password is reused elsewhere, replace it before sharing.
- Check which email address, phone number and recovery methods control the account. Sharing the password may not be enough to sign in, and sharing a recovery code may grant much broader control.
- Choose the narrowest useful set of recipients and permissions. Explain who can edit, delete or reshare the item.
- Keep everyone’s own password manager account and device protected. A shared account can be exposed through any authorised member’s compromised device or account.
If your household has not yet chosen a shared-vault structure, start with our family password manager setup guide.
How Shared Vaults Work in 1Password Families
In 1Password Families, moving a login into a shared vault makes it available to the people who can access that vault. The built-in Shared vault is intended for the family group; create a separate vault with selected members when only some people need a particular login.
Before moving the item, check the destination vault’s membership. Then ask the intended recipient to find the login in their own account and test it on the correct service. Keep personal logins in private storage. Removing a person’s vault access cannot erase a password they already copied.
How Apple Shared Password Groups Differ
Apple’s shared password and passkey groups require compatible software: iOS 17, iPadOS 17 or macOS Sonoma 14 or later. The exact interface depends on the installed version.
The group owner controls who joins or leaves, but members can add, view, edit and delete passwords in the group. Do not treat this as a read-only vault for children. Select a group whose members should all have that level of access, and explain the consequences of changing or deleting a shared item.
Use a dedicated group for the relevant household accounts rather than adding unrelated personal passwords. Check that every intended member’s device can access the group before relying on it.
How Google Password Manager Family Sharing Works
Google Password Manager lets you share saved passwords with members of your Google family group. Crucially, Google describes the recipient’s saved password as a copy. Do not rely on this method to keep everyone’s saved password updated automatically or to withdraw a copy remotely.
Using Google’s current computer instructions:
- Open Chrome and choose More, then Passwords and autofill, then Google Password Manager.
- Select the saved password you want to share and choose Share.
- Select the intended family member or members, then confirm Share.
- Ask the recipient to check the copied login in their Google Password Manager and test it on the correct site.
If you later change the account password, coordinate the update with everyone who still needs access. This is different from maintaining one shared vault item. Menu labels and availability can differ on other devices, so use the instructions for the platform in front of you.
Know What an Expiring Sharing Link Actually Contains
A sharing link can be useful for a limited task, but it may expose a snapshot rather than the live item. 1Password’s item-sharing guidance says it shares a copy: you choose expiry and whether anyone with the link or only specified recipients may view it. If you change the original item, you must share a new link for the changes to reach that shared copy.
Check the recipient setting every time, especially if the app remembers a previous sharing preference. Use the narrowest suitable audience, verify the recipient through details you already trust, and choose an expiry appropriate to the task. An expiry is a limit on the link, not a promise that a password, attachment or note disappears from someone who already saved it. For repeated household use, a suitable shared vault may be easier to maintain than a series of snapshots.
Check the Whole Item Before Sending It
A saved login can include notes, attachments, custom fields, verification-code secrets and recovery details as well as the password. Review what the selected method exposes. If the recipient needs only a guest Wi-Fi password, do not share a router-administration record containing reset instructions and unrelated credentials. Prefer the service’s limited guest or member access when it can provide the required permission without disclosing the main credential.
Give a household account a unique password before sharing so the recipient cannot use the same secret to enter private accounts elsewhere. Decide how the required second factor will work without depending on repeatedly forwarding unsolicited codes. A recovery code or trusted-device approval can give broader access than the routine task needs. Use individual accounts with their own factors where the service supports them.
Keep Updates and Access Changes Coordinated
When changing a shared password, first use the account’s genuine settings and confirm the new value works. Update the intended shared record or send the supported replacement copy, then ask the authorised recipients to verify access. A manager’s successful Save message does not itself change the password at the website. Conversely, changing the website password while everyone retains an old copied record can create avoidable lockouts.
If a person no longer needs access, remove the relevant share and review the underlying service’s sign-in methods. Check active sessions, registered passkeys and recovery or delegated access where appropriate. A copied password cannot be withdrawn remotely, and an expired sharing link does not terminate an existing website session. Keep another authorised user’s working access available while making controlled changes.
Treat a surprising sharing request as something to verify, even when it appears to come from family. Confirm the person’s need independently if the message asks for a master password, recovery bundle or urgent account approval. Household trust is a reason to make permissions understandable, not a substitute for checking which account and item a request concerns.
Avoid Sharing More Than the Login Requires
Do not send your vault’s master password, a full password export or your personal account-recovery bundle just to share one household login. Those materials can expose many more accounts than intended.
Some messaging services use end-to-end encryption, so it is inaccurate to describe all messages as unencrypted. The practical problem is that a message still creates another copy, with its own history, backups and recipient access. It also lacks the permission and update controls you may get from a shared vault.
Be especially deliberate with one-time codes and recovery codes. A recovery code can let someone bypass a normal sign-in step, and an authenticator code stored alongside a password changes how those factors are separated. Prefer a service’s individual member access when that solves the need without passing codes around.
How to Stop Sharing Safely
When someone should no longer have access, work through both the password manager and the original service. Removing a shared item alone may be insufficient.
- Remove the person from the relevant vault or group, or disable the sharing link.
- Change the shared account password if they may know or have saved it. Save the new credential only where the remaining authorised people can access it.
- Review the service’s signed-in devices and sessions. Use its sign-out or session-revocation controls where available.
- Check other access routes, including passkeys, recovery contacts, recovery codes, linked accounts and delegated users. Remove access that is no longer authorised.
- Test the updated login with the people who should retain access.
Changing a password does not universally revoke every existing session or sign-in method. Follow the account provider’s own security controls and avoid promising an immediate, complete lockout based only on a vault change.
Keep Emergency Access Separate
Everyday household sharing is different from arranging access if you become unavailable. A trusted person may need an emergency plan without having routine access to all your accounts now. See how password manager emergency access works for waiting periods, permissions and recovery alternatives.
Keep the household arrangement transparent and proportionate. Share what people need, review it when circumstances change, and use our password manager safety guide to understand the risks that remain.
Choose Limited Access You Can Maintain
Use individual service accounts where possible, and otherwise share only the household items that are genuinely needed. Choose a method whose updates and permissions everyone understands. When access ends, address the service’s credentials and sessions as well as the sharing tool.
Frequently Asked Questions
Can I revoke a password after sharing it?
You can remove access to a shared vault or link, but you cannot reliably erase a password someone has already copied. Change the credential and review sessions and other sign-in methods at the original service when access needs to end.
Does Google family password sharing stay updated automatically?
Google describes the shared password as a copy saved in the recipient’s account. Treat it as a separate copy and coordinate later changes rather than assuming it behaves like a shared vault item.
Is it safe to share my password manager’s master password?
Avoid doing so for ordinary family sharing. It can expose your private vault and other account controls. Use a shared item or a vault with selected members instead.
Do changes to a 1Password item update an existing sharing link?
No. 1Password’s link-sharing feature shares a copy. Update the original and share a new link if the recipient needs changed details. Sharing through a family vault is a different workflow.
Should I share a whole login record for one small task?
Review its notes, attachments, custom fields and recovery information first. Share only what the task requires, and prefer a service’s guest or delegated access when that avoids exposing the main account credential.
Sources and Image Credits
Sources: 1Password family vault sharing; item-sharing links and copies; Google Password Manager sharing; Apple shared password and passkey groups.
Illustrations: Impulsec.
Share this article
Stuart Kerr Spindlow is Impulsec’s Publisher, Chief Editor and Lead Reviewer. He writes and maintains coverage of consumer cybersecurity and digital-safety software, with a focus on practical suitability, limitations and the evidence behind product claims. Read Stuart’s full profile.