Somewhere in your house there is a password written on the back of an old receipt. Another lives in a group chat from years ago. A third is the same as your email password, which is the same as the Wi-Fi password. Nobody planned it; it simply accumulated. A family password manager cleans this up in one sitting, and it does not require anyone to memorise a random string of characters or hand over the keys to their entire digital life.

The goal is not secrecy for its own sake. It is knowing that if you are in hospital, on a plane, or just asleep, the right person can still pay the electricity bill, cancel a subscription, or get into the school portal.

Choose a manager that understands households

A single-user app with one shared login defeats the purpose. The moment someone moves out, changes their mind, or forgets the password, everyone has to change everything, and nobody can tell who did what. Look for a product built around separate people rather than one account with a long list inside it.

• Individual accounts under a family plan. Each person gets their own login and their own master password.
• Shared folders or vaults. Sometimes called collections or shared items, depending on the brand.
• Emergency access. A way for a nominated person to request access if you are unreachable.
• Apps for the devices you actually own. Windows, macOS, Android, iOS, and browser extensions for Chrome, Safari, Edge or Firefox.
• Two-factor authentication. Ideally with an authenticator app or a hardware key, not just SMS.
• Export and recovery options. You want a way out if you ever switch products.

Before you commit, ask two questions: can a family member recover their own account if they forget their master password, and does the app work offline on a phone? Both matter more than the interface polish.

Set up the household in the first ten minutes

Create your own account before you invite anyone. That way you control the family group and the billing, and you are not troubleshooting someone else's setup halfway through.

1. Install the app on your phone and in your main browser, then sign in.
2. Create a master password as a passphrase: four or five unrelated words, memorable but not guessable. Never reuse it anywhere.
3. Turn on two-factor authentication immediately, and save the backup codes somewhere offline.
4. Open the family or admin section and send invitations. Each person accepts, sets their own master password, and keeps it private, including from you.
5. Print the recovery kit each person is offered, or store the recovery codes in a fireproof box or safe. Digital copies inside the vault are useless if the vault is the thing you cannot open.

Very young children probably do not need their own account. A single shared vault for kids' services is usually enough, with the understanding that it gets reviewed as they get older.

Build one shared vault, and decide what stays out

Agree on the boundary before you start moving entries. The cleanest rule: if two people in the house genuinely both need to log in, it belongs in the shared vault. If it is a record of who you are rather than a tool you operate together, it stays private.

Good candidates for sharing

• Streaming and music subscriptions
• Utilities, broadband and the router admin login
• School and nursery portals
• Home alarm, smart thermostat and doorbell accounts
• Household insurance and the family travel bookings account

Keep these private

• Banking, payment apps and anything that moves money
• Personal email and social media
• Work accounts, which usually belong to your employer anyway
• Medical portals and anything sensitive you would not want read aloud at dinner

Write the list down and put it in the shared vault as a note. It sounds fussy; it prevents the same argument every few months.

Grant emergency access without sharing master passwords

This is the part most families skip, and it is the part that matters when something goes wrong. Rather than writing your master password on a card and hiding it, use the built-in emergency access feature. The usual pattern: you nominate a trusted contact. If you are unresponsive for a set period, typically a few hours to several days, they can request access, and the account releases a copy to them. Some setups require your approval first; others have a waiting period you can cancel from your phone.

Three practical points:

• Emergency access is usually account-wide. A contact you grant it to can typically see what you can see, so keep genuinely sensitive items in a separate vault and be deliberate about who gets what.
• Pick someone who is not in the same car as you. If the scenario is "both parents are in hospital", the emergency contact should be an adult sibling, a grown-up child, or a close friend, not the other parent.
• Choose two contacts if the product allows it. One person is a single point of failure, and circumstances change.

For wills, property, medical instructions and anything with legal weight, a password manager is a starting point rather than a plan. Speak to a solicitor or financial adviser about how those documents should be held and who should be able to reach them.

Onboard the family in one sitting

Do it together, ideally with everyone in the same room and phones on the table. Fifteen minutes is enough if you keep it narrow.

1. Each person installs the app, signs in, and turns on biometric unlock so daily use is not a chore.
2. Turn on autofill in the browser and on the phone keyboard.
3. Import saved logins from the browser password store, then delete them from the browser.
4. Add the ten most-used household accounts to the shared vault. Ignore the rest for now.
5. Each person tests one real login end to end, so nobody leaves unsure whether it works.
6. Delete one sticky note or one note in a phone memos app, and agree that new passwords go straight into the vault from now on.

A ten-minute habit that keeps it working

Every three months, open the vault and do a short pass: remove access for anyone who has left the household or no longer needs it, check that your emergency contacts still agree to the role, clear out dead subscriptions, and confirm the printed recovery kits are still where you think they are. If the manager offers breach alerts, read them and change the affected passwords that week rather than "at some point".

Your 30-minute plan

1. Minutes 0–5: Pick your manager, create your account, set a passphrase, switch on two-factor authentication.
2. Minutes 5–10: Invite family members. Each person sets their own master password and prints a recovery kit.
3. Minutes 10–18: Create the shared vault, add the top ten household accounts, and record the rules in a note.
4. Minutes 18–24: Set emergency access with one or two trusted contacts and agree on the waiting period.
5. Minutes 24–30: Everyone installs the app, enables autofill, verifies one login, and deletes one old written password.

That is the whole job. What you end up with is not just a list of logins, but a shared understanding of who can reach what, and when. The software is the easy part; the conversation is the one that keeps a bad week from turning into a much worse one.

Photo: sasint / Pixabay