Skip to main content
January 24, 2024

Feature Request: 1Password Access after Death, Legacy Contacts

  • January 24, 2024
  • 150 replies
  • 17576 views

I am not planning to die anytime soon, but sometimes things happen.

Beyond securing my 1Password details in an Escrow account, or with a lawyer, or in a bank lockbox, does 1Password offer any means of allowing one or more designated member of the 1Password Families account to access the 1Password account in case of the primary owner's passing?

Apple now offers the ability to add one or more https://support.apple.com/en-us/102631 so that in case of your untimely demise, an Access Key and a Death Certificate allows Apple to grant the holder of both of these to get a new Apple ID that has access to your Apple ID Account.

It may be something 1Password wants to consider, though I realize that reviewing Death Certificates may not be on the high list of priorities for the team!


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

Pinned Reply By 1P_Dave

Hello folks, 

It’s been a little while since our last update in this thread, and I just wanted to pop in to say that we’re still here and paying close attention to all the feedback being shared. While we don’t have anything new to share about an emergency access feature right now, please know that the feedback and discussion here aren’t going unnoticed.

With 1Password’s end-to-end encryption, there’s no simple “add a recovery email” solution: access requires the keys to unlock your account, and 1Password doesn’t have them. Securely storing those keys on behalf of customers would introduce significant risk and responsibility, so an emergency access feature needs an intuitive way to securely share or safeguard the necessary keys without compromising the security guarantees people rely on.

For the time being, we’ve published guidance for estate planning using 1Password’s current features: The complete guide to digital estate planning

For those exploring how 1Password’s existing features might fit into an emergency-access plan, one possible approach is to generate a recovery code and share it with a trusted family member who may need access in an emergency, and account for any two-factor authentication by making the authenticator app or physical security key available to that person as well. The recovery code should be stored securely, such as in the trusted family member’s 1Password vault or another location they can access independently: Generate and use recovery codes

To make this plan work, you’ll need to also set up your email account provider’s emergency-access or legacy-contact feature so the trusted person can access the email account associated with your 1Password account. Without access to that email account, they won’t be able to use the recovery code. It also prevents premature use of the recovery code, since someone with your recovery code cannot complete recovery without also entering a verification code that is sent to your email address.

I know this isn’t the most elegant solution, and the feature request for a built-in legacy manager or emergency access feature in 1Password remains open. For now, as the simplest option, we recommend storing your Emergency Kit alongside with your will in a secure place, along with clear instructions on how to use it for your executor or trusted contact.

-Dave

150 replies

May 10, 2024

Good point. I actually added my mother to my family account and made sure that she shares all her items in a shared vault. Likewise, I have added both my children to my account and created an item with access details for my account. All manual options so having something automated build in would be great. I do realize that it would need a lot of careful consideration from a security standpoint.

1P_Tommy
1Password Employee
1Password Employee
May 10, 2024

I'm glad you've found some ideas in this topic. I've shared your comments internally.

May 12, 2024

Please add me to the list of people who are interested in a functionality similar to Bitwarden. The solution should not include storing something in a safe, as people might not live close to another

May 12, 2024

This feature has been requested literally for over a decade, so I would not hold my breath. 😊

Here is the oldest thread I could find asking for such a feature, it is from 2011:

https://1password.community/discussion/2278/feature-request-emergency-password-for-family-in-case-of-death

1P_Tommy
1Password Employee
1Password Employee
May 14, 2024

@MerryBit

Yes, it has been requested as you mention. However, 1Password 8 which makes many more things possible did not exist then. The revamp of 1Password.com is underway and recovery codes are in beta. I hope this is something we can bring to light. Many more things are possible now that were not possible back then. I'm not saying it could happen over night but there is a possibility.

May 14, 2024

Recovery codes? How do they work and where can I try them out?

1P_Tommy
1Password Employee
1Password Employee
May 14, 2024

Hey @MerryBit

Assuming you have an individual account they are in beta testing. Other account types should be on the horizon.

https://1password.community/discussion/145444/recovery-codes-for-individuals-beta

May 14, 2024

Thanks @1P_Tommy !

1P_Tommy
1Password Employee
1Password Employee
May 14, 2024

You're most welcome.

thedean
May 17, 2024

I used to have an individual 1Password account. I upgraded to a Family account specifically because of my concern about legacy access. Let me share with the group how I have configured my family account to handle legacy access:

  1. I am a family organizer for my family account.

  2. I made the executor of my will (she is also the successor trustee of my trust, and my designated power of attorney) a second family organizer.

  3. I have shared a vault with her that contains just one entry: my email address and password.

  4. In the event of my incapacity or death, my executor/trustee can use her authority as a family organizer to begin the account recovery process. And since she has access to my email account, she can can use it to reset my master password and secret key, and thereby gain access to all the rest of my vaults. Since I am notified via email of any attempt to begin the recovery process, I feel 99% confident that she will not abuse her family organizer powers while I am still of sound mind. (FYI, while I have 2FA enabled on all my other accounts, it is disabled in 1Password because I don't think it is necessary there, and therefore it does not interfere with this recovery process.)

It's not perfect. But is good enough for me. My master password and secret key are known only to me, and no one else. And it allows me to sleep well at night, knowing that in the event of my incapacity or death, the people with a need to know can get access to everything in all my vaults.

I hope this strategy will help others.