Setting up emergency access — the setup that has to happen before you need it

Emergency access — the ability for a trusted contact to access your vault if you are incapacitated or die — is the password manager feature most people configure last and need most urgently. The design constraint is unavoidable: zero-knowledge architecture means that if you haven't configured emergency access before the emergency, your vault is permanently inaccessible. There is no exception, no appeal, and no help desk escalation that changes this.

Most password manager users haven't set this up. The feature is typically a Premium add-on, the configuration requires coordinating with the emergency contact, and the urgency is invisible until it isn't. This guide exists because the right time to configure emergency access is right now, not when someone needs it.

Emergency access also has meaningful differences between providers: which providers offer it, what the recipient needs to use it, and how the waiting period works.

The assumption 'my family can contact customer support to access my account if something happens to me' is incorrect for zero-knowledge password managers. Customer support cannot reset vault access on a zero-knowledge product — there is no server-side key to manipulate. The vault can only be accessed with the master password or through a pre-configured emergency access mechanism. LastPass customer support cannot unlock a vault. Bitwarden customer support cannot unlock a vault. This is by design.

A second assumption is that emergency access is a minor convenience feature. For estate planning, for anyone with dependents, or for any user whose vault contains credentials that others would need — shared accounts, utility logins, insurance information, financial account access — emergency access is a significant practical consideration. A vault that is inaccessible after death may leave a family unable to access services or manage accounts for weeks.

A third assumption is that the emergency contact needs their own account on the same service. For Keeper's Next of Kin feature, this is not true — the recipient does not need a paid Keeper plan. For Bitwarden's Emergency Access, both the vault owner and the emergency contact need Premium. This practical difference matters in real-world estate planning scenarios where the emergency contact may be an elderly parent or non-technical family member.

How Bitwarden Emergency Access works: vault owner designates a trusted contact by email. The contact accepts the invitation in their Bitwarden account (requires Premium on both sides). Owner configures a waiting period (1–90 days) and access type (view-only or full takeover). If the contact requests emergency access, the owner is notified by email and has the waiting period to deny the request. After the waiting period expires without denial, the contact gains the configured level of access.

How Keeper Next of Kin works: similar mechanism — trusted contact designated, configurable waiting period, view-only or full transfer. Key difference: the recipient does not need to hold a paid Keeper plan. This removes a friction point in real-world estate planning.

For providers without emergency access (Dashlane, NordPass, Proton Pass): the recommended practice is maintaining a physical recovery document — a printed or handwritten record of the master password, stored physically securely (sealed envelope with a solicitor, in a safe, or with a trusted family member). This bypasses the automated mechanism entirely. It is less elegant but equally effective if the physical record is genuinely accessible when needed.

Emergency access addresses vault access by a trusted contact. It does not address the legal and estate planning dimensions of digital asset inheritance — which is a separate domain involving wills, digital estate designations, and jurisdictional rules about account access after death. A password manager's emergency access feature is the technical mechanism; legal documentation is the framework within which it operates.