Setting up a family password manager — the setup decisions that matter

Setting up a password manager for a family is not just setting up an individual password manager for multiple people. It introduces questions that don't exist in single-user setups: which credentials should be shared across all family members, which should remain private, how do you help a non-technical family member who gets confused, and what happens to vault access if the person who manages the account is incapacitated.

The shared vault and the individual vaults are not the same thing and shouldn't be conflated. The shared vault is for household credentials — streaming services, utility accounts, shared financial accounts, Wi-Fi passwords. Each person's individual vault is for their own accounts. Most family password manager setups that fail do so because this separation wasn't established clearly at the beginning.

Emergency access configuration — designating another family member as a trusted contact with vault access in case of incapacitation or death — is the setup decision most people defer and should do first.

The assumption 'family plan means one shared vault' is incorrect. Family plans typically provide each member with an individual vault plus a shared organisation vault. Individual vaults are private; the shared vault is accessible to all plan members. The distinction matters for both privacy (banking credentials shouldn't go in the shared vault) and security (a compromise of one member's account shouldn't expose all family credentials).

A second assumption is that all family members need equivalent technical comfort with the manager. In practice, most family setups have one person who manages the configuration and several who primarily use autofill. Designing for the least technical member — reliable autofill, simple mobile unlock, clear recovery options — is more important than optimising for the most technical one.

A third assumption is that setting up the family plan is a one-time event. In practice, new accounts are added continuously, shared passwords change when streaming services cycle credentials, and family members change devices and need re-setup. The person managing the plan should expect ongoing maintenance rather than a completed project.

Recommended setup sequence: (1) Choose a provider with a family plan that includes individual vaults plus shared vault. (2) Set the master password strategy for non-technical members — passphrase, written on paper stored somewhere safe, biometric unlock for daily use. (3) Configure emergency access: designate one family member as trusted contact for another's account, with a waiting period and view-only or full access. Do this before moving on. (4) Establish the shared vault structure: one collection for streaming, one for utilities, one for financial (or by category that makes sense to your household). (5) Import existing credentials — use the browser export process to bring in saved passwords.

The technical family member managing the plan should configure emergency access for themselves first, then help others configure it. If the manager is incapacitated, access to the shared vault and their individual vault should not be locked to them alone.

For non-technical family members: biometric unlock (fingerprint or Face ID) removes daily friction. The master password becomes the setup step and the 'something went wrong' step, not the daily authentication. Configure biometric unlock on every family member's phone before considering the setup complete.

This guide assumes family members who want to use the manager. Setting up a password manager for a family member who doesn't want to use one is a different challenge — habit formation and ongoing support are the primary constraints, not the technical setup.