Your Password Manager Is Not an Estate Plan

If you use a password manager, you are already ahead of most people. Unique passwords, one vault, everything protected by a key that only you know.

That last part is the problem.

A password manager is engineered to make it impossible for anyone other than you to open your vault. The company that makes it usually cannot open it either, by design. That is the correct design for a security product, and it is exactly the wrong property for an estate plan, because the whole point of an estate plan is that someone else uses it after you cannot.

The story that repeats

A version of this appears on forums with grim regularity. Someone dies suddenly. They were careful about privacy and used a password manager well. The family knows the vault exists. Nobody knows the master password, nobody has the recovery kit, and nobody can find it.

The house gets searched. Drawers, safes, filing cabinets, the backs of picture frames. The information is right there, protected exactly as intended, and completely out of reach.

Good security worked perfectly. That was the problem.

Turn on emergency access first

Every major password manager offers a mechanism for exactly this, and almost nobody switches it on.

The names differ. 1Password has an Emergency Kit and account recovery through a family or team organizer. Bitwarden has Emergency Access. Dashlane has Emergency Contacts. Apple's Passwords and iCloud use the Legacy Contact system. Check your own, because the specifics change.

The general shape is the same: you nominate a trusted person, they request access, a waiting period runs during which you can decline, and if you do not decline, they are let in.

Go and configure it now. It takes ten minutes. Then tell the person you named, because a designated contact who does not know they are one will not think to request access.

If your manager offers no such feature, print the recovery kit or write the master password down, seal it in an envelope, and put it somewhere physically secure that a trusted person can reach. Analogue, but it works, and it is far better than the common alternative of nothing.

The three things it still will not do

Even perfectly configured, a password manager solves one problem out of four.

It does not solve discovery. Your vault contains logins for accounts you use. It does not contain the pension from a job you left in 2004, the small bank account you have not logged into in years, the paper savings bonds in the safe, the life insurance policy your employer provides, or the property you own jointly with a sibling.

Your executor needs a list of what exists. The vault is a list of what you log into, which is a different and smaller list.

It does not solve authority. A login is not permission. Using someone's credentials after their death, even with the best intentions, sits in awkward legal territory, and institutions generally require documentation rather than a password. Your executor needs letters testamentary and a death certificate to actually settle an account. Being able to see a balance is not the same as being able to move it.

It does not solve instruction. The vault says an account exists at a particular bank. It does not say the account is for the property taxes, that it is jointly held with your brother, that the balance is earmarked for your grandchild's tuition, or that you have been meaning to close it. Context lives in your head and dies with you.

What actually works: two tools, two jobs

The password manager holds access. Credentials, with emergency access configured, and a named contact who knows they are named. That is its whole job and it does it well.

A separate record holds the map. What exists, where, why, and who to call. Institutions and last four digits, not passwords. Beneficiaries. Property and where the documents are. Debts. Key contacts. Your executor's instructions.

Keep them apart deliberately. The record can be shared, printed, kept with your will, and handed to an attorney without exposing a single credential. The vault stays locked and shared with exactly one person under controlled conditions.

Merging them is a mistake in both directions. A record containing passwords becomes too dangerous to store anywhere useful. A vault expected to serve as an inventory will always be incomplete, because you only store logins for things that have logins.

Three things to do this week

Configure emergency access, and tell the person. Ten minutes, and the single highest-value item on this list.

Set up your email legacy contact separately. Google's Inactive Account Manager and Apple's Legacy Contact both handle this. Email is the recovery path for everything else, which makes it the account that matters most.

Write the inventory. One page. Every institution you hold anything with. No passwords.

Do those three and your family goes from locked out to organized. The technology for this already exists, is already installed, and is already free. It is just switched off.

Estatey helps you record what you own and where it is, so the people who need that information can find it. Estatey is not a law firm and does not provide legal, tax, or investment advice. For advice about your own situation, speak to a qualified professional in your state.