Every household shares something: the Wi-Fi, a streaming service, an insurance login. There are safe and unsafe ways to do it. This guide is part of our guide to passwords for families and digital legacy.

The ways people share, from worst to best

MethodRisk
Reusing the same password for the whole familyOne leak affects everyone
Text or emailStays in histories and backups
Paper on the fridgeSeen by every visitor
Sealed note in a safeFine for emergencies
Shared vault in a password managerThe best everyday option
Separate accounts for each personBest where a service allows it

How a shared vault works

Most password managers have a family plan, covered in free vs paid. You put shared logins in a folder or vault that everyone can use. When someone changes a password, it updates for all. Some let you share a login without revealing it, though a determined person may still be able to see it.

Set up the family vault

  1. Choose a manager with family sharing.
  2. Give each person their own vault and master password.
  3. Create a shared vault for household logins.
  4. Add Wi-Fi, streaming, utilities and shared shopping accounts.
  5. Turn on two-factor login for each person.

What to share and what to keep private

Usually shareUsually keep private
Wi-FiYour personal email
StreamingYour password manager
Utility and insurance accountsPersonal banking
Household shoppingWork accounts
Emergency contactsCrypto recovery phrases

Where a bank offers joint accounts or authorized users, use those instead of sharing a login. Sharing bank passwords may break the bank's terms and affect fraud protection.

When things change

Change shared passwords when someone moves out, a relationship ends, or a child's friend learned the Wi-Fi password. Remove people from the shared vault too. See should couples share passwords? for the emotional side of this.

Teaching the family

Agree on a few rules: nobody shares logins outside the family, and everybody tells the others if something strange happens. Our yearly password check-up is a good moment to review them. Keep a crypto recovery phrase out of all shared systems.