How to Leave Passwords When You Die Without Creating a Security Disaster
A password plan should let an authorized person find the right door without leaving every key in plain sight. The safest approach is a password manager with a strong master password, multifactor authentication, a tested recovery plan, and clearly documented emergency-access instructions.
DO NOT PUT PASSWORDS IN THE BINDER
A printed organizer can name the password manager, the primary email account, the devices that matter, and the location of secure access instructions. It should not contain passwords, PINs, recovery codes, seed phrases, private keys, full Social Security numbers, or device unlock codes.
CHOOSE THE PERSON BEFORE THE TOOL
Decide who is authorized to act and what they may do. Legal authority and technical access are different problems. An executor, trustee, agent under power of attorney, or digital executor may have duties that vary by state and by platform. Accessing an account with a password does not automatically make the access lawful.
USE A PASSWORD MANAGER
A reputable password manager can hold unique passwords, secure notes, passkeys where appropriate, and recovery information. Review its emergency-access or account-recovery features. Know whether access transfers immediately, after a waiting period, or only with specific documentation.
PLAN FOR THE PRIMARY EMAIL ACCOUNT
Email often controls password resets for everything else. Record the account provider, address, recovery methods, and where authorized access instructions are stored. Review phone numbers and backup email addresses so recovery does not depend on an old device.
ACCOUNT FOR MULTIFACTOR AUTHENTICATION
Passwords may not be enough. Inventory authenticator apps, security keys, backup codes, trusted devices, and the phone number used for text verification. Keep recovery material protected and separate from the everyday organizer.
USE PLATFORM LEGACY TOOLS
Some services let you name a legacy contact, inactive-account manager, or memorialization preference. These rules change. Review each important platform directly, document the choice, and revisit it annually.
DON’T FORGET DEVICES AND ENCRYPTION
List phones, computers, tablets, external drives, and encrypted backups. Note who owns them, what matters on them, and where lawful access instructions are stored. A family may know a cloud account exists but still be unable to unlock the only device holding a recovery key.
TEST THE RECOVERY PATH
Once a year, confirm that your chosen person still knows where the map is, that emergency access is configured, and that recovery contacts are current. Do not send them your master password in ordinary email or text.
THE SIMPLE RULE
Keep the map here. Keep the keys somewhere safer. The Death Happens Workbook is designed around that distinction.
