Password Manager After Death: How to Access a Deceased Person's Vault

Why the Password Manager Is the First Thing to Crack

A password manager holds the keys to everything else — email, banking, social media, cryptocurrency exchanges, subscriptions. If you can access the vault, you skip the months-long process of recovering accounts one by one. If you can't, every subsequent account recovery becomes a standalone battle with its own documentation requirements.

Emergency Access by Platform

Each major password manager handles posthumous access differently. Whether it works depends on the account plan, available recovery options, and what was configured before death.

Bitwarden

Bitwarden's Emergency Access feature lets the account holder designate trusted contacts who can request vault access after a waiting period of 1 to 90 days. If a request goes unanswered (because the account holder is deceased), access is automatically granted.

Two access levels: View (read-only access to vault entries) and Takeover (full control of the vault, including the ability to change the master password).

Requirements: the account holder must have had a Premium, Family, or Enterprise plan. Free accounts don't have Emergency Access. The trusted contact must also have a Bitwarden account.

LastPass

LastPass Emergency Access works similarly. A designated contact sends an access request, and if the account holder doesn't respond within the pre-set delay period, the contact gets full vault access.

The vault decrypts locally on the contact's device using an asymmetric key exchange — LastPass itself never sees the data.

Requirements: Premium or Families plan for the account holder.

1Password

1Password takes a different approach. There's no automated timer system. Its Emergency Kit is a printed PDF containing the Secret Key, Setup QR Code, and a space to write the Master Password.

If the deceased printed and stored their Emergency Kit somewhere findable (a safe, a filing cabinet, a safe deposit box), it can help you sign in. If they didn't, a family organizer or team administrator may be able to recover the account; an individual or family account may also have a recovery code. 1Password support cannot decrypt or reset a vault on its own.

Keeper

Keeper allows up to five trusted contacts through its Account Emergency Access feature. It works like Bitwarden: the contact requests access, a user-configured delay passes, and if the request isn't denied, the vault decrypts on the contact's device.

Requirements: Keeper Password Manager or Family plan for the account holder.

Dashlane

Dashlane does not offer automated posthumous access. It relies on pre-mortem vault sharing — the account holder must have manually shared individual entries or groups with another Dashlane user before death. Alternatively, the account holder can export an encrypted DASH backup file and store it somewhere accessible; the file password must be shared separately.

If neither was done and no recovery method or accessible signed-in session is available, the vault may be inaccessible.

What If No Emergency Access Was Set Up

This is the most common scenario. Most people use password managers but never configure emergency access.

Check for a master password written down. Search the deceased's home office, safe deposit box, filing cabinet, and wallet. Many people write their master password on a card or Post-it stored separately from their computer.

Check the browser. If the deceased also saved passwords in Chrome, Firefox, or Safari, those browser-stored passwords may be accessible if you can log in to the device. Chrome passwords sync with the Google account; Safari passwords sync with iCloud Keychain.

Check for a local vault file. Some password managers (KeePass, KeePassXC) store the vault as a local file rather than in the cloud. Search the computer for .kdbx files.

Contact the provider. Support cannot bypass a zero-knowledge vault, but configured emergency access, family or team account recovery, a recovery key, or an accessible export may provide a route. Providers may also close the account or confirm account details (email address, plan type) with proper legal documentation.

Setting Up Emergency Access Now

If you use a password manager and haven't configured emergency access:

1. Add at least one trusted contact through your password manager's emergency access feature
2. Set a waiting period that gives you time to deny an accidental request (for example, 7 to 14 days)
3. Tell your contact that they've been designated and explain the process
4. If your password manager doesn't support emergency access (Dashlane, KeePass), print or share your master password through a secure offline method

The Digital Estate Toolkit includes the full recovery protocol for every major password manager, plus a structured checklist for the two-dozen account types that typically live inside a vault.