My spouse couldn’t get into our utility account when I was stuck at work. The login was in a notebook in my desk drawer, but the entry was outdated. What’s a secure way to leave my family a password list just in case, while keeping it current and inaccessible to anyone else?
A backup password list will only be useful if updating it happens automatically. A paper notebook usually fails for exactly the reason you found: changing the account password does not update the notebook.
Use a free password manager such as Bitwarden, and give your spouse a separate login. Put utility, insurance, banking contact, and other household credentials in a shared vault while keeping personal accounts private. That way either of you can update an entry, and the other sees the current version without passing around a master password.
Keep a sealed recovery sheet in a locked safe with instructions for accessing the vault, two-factor recovery codes, and any device PIN they may need. Test the setup together once, including from a different device. The commonly missed detail is two-factor authentication: a perfectly current password is still useless if the only verification method is your phone.
11 Likes
Expect shared passwords to solve less than you think if the account legally belongs only to you. For utilities, insurance, and similar services, add your spouse as an authorized user or joint account holder so they can get help even when the login or two-factor code fails.
A password list is the wrong document.
What your family really needs is a household access guide. A page full of passwords becomes stale and exposes everything at once. An access guide can stay useful even when a password changes because it tells them what exists, who owns it, where the current login is stored, and what to do if normal access fails.
For each important account, record:
- Provider and account purpose
- Name of the legal account holder
- Account or customer number
- Billing phone number
- Whether it uses autopay
- Where the credential is stored in your password manager
- Which phone, email address, or authenticator receives verification codes
- Whether your spouse is authorized to speak to support
- Any unusual recovery instructions
That is far more useful than writing “electric company: oldpassword123” in a drawer. It also gives your spouse enough information to call the provider if the website is down or the login gets locked.
I would split access into two levels. Household accounts can go in a shared vault because both people need them routinely. Personal email, work accounts, medical portals, and financial logins should not automatically become shared just because they are important. For those, use an emergency-access arrangement if your password manager supports one, or leave sealed recovery instructions that are only opened when necessary. A waiting period on emergency access is safer than giving someone permanent access to every personal account.
@zack’s authorized-user point matters here. Access to a username is not the same as authority over the account. Banks and insurance companies may still refuse changes or disclose very little. Fixing ownership and authorization now is more reliable than expecting a password to bypass their procedures later.
The comparison is basically this: paper is dependable but quickly outdated, while a password manager stays current but depends on devices, recovery methods, and someone knowing how to use it. A practical setup uses both. Keep the live credentials digitally, then store a short printed access guide and recovery envelope in a locked place. Put a date on the printed material and check it every six months, especially after changing phones or email addresses.
Finally, test only the boring account first. Have your spouse sign into the utility account from another device without you prompting them. That usually exposes the real problem, whether it is a missing vault login, an unknown device PIN, verification codes going to the wrong phone, or instructions that made sense only to the person who wrote them.
Do not put the vault password, email password, device PIN, and every recovery code on one sheet in an ordinary home safe. Anyone who finds that sheet may have everything needed to take over your accounts, and a fire or burglary could remove your only backup at the same time.
I’d separate routine household access from true emergency access. Your spouse should already have normal access to utilities, insurance, subscriptions, and anything else they may need while you are merely unavailable. That information belongs in a shared password-manager area under their own login, as others described. It should not require opening a sealed packet every time the internet bill needs attention.
The emergency material can be split into two envelopes. The first contains the password-manager account name, recovery instructions, and enough explanation that your spouse knows what to do. The second contains the sensitive secret needed to finish access, such as the master-password recovery information or two-factor backup codes. Keep them in separate secure places, and clearly mark who may open them and under what circumstances. This is less convenient, but it avoids creating a single piece of paper that grants immediate access to your whole digital life.
I agree with @shadowrouter3448edge that an account guide is more useful than pages of copied passwords, but I would include a short device section too. Families often assume that knowing the vault password solves everything. It may not if the only working computer has full-disk encryption, the authenticator is on a locked phone, or the recovery email itself requires a code sent to that same phone. Record which device is needed, how it is unlocked, where charging cables are kept, and what can still be accessed if the device is lost or broken.
Be careful with email in particular. It is often the reset path for dozens of other accounts, so sharing an email password casually can expose far more than the utility login. If possible, use a separate household email address for bills and shared services. Keep personal email under the emergency arrangement rather than making it permanently available.
Finally, set a calendar reminder to inspect the setup after any major change, especially replacing a phone, changing the vault master password, switching authenticator apps, or moving recovery codes. Put a revision date on each envelope. A yearly check is better than nothing, but checking after those specific events is what prevents the emergency packet from becoming another outdated notebook.
Write down where the physical keys and safe combos live before you worry about digital passwords. Half the emergency plans I’ve seen assume the spouse can even open the drawer or safe holding the recovery envelope, and nobody checks that until it matters.
On the emergency-access idea @primevision and @shadowrouter3448edge raised: the waiting period cuts both ways. Bitwarden’s emergency access is genuinely handy, but if you set a long delay and then get hospitalized for a week, your spouse is locked out during the exact window they need in. I’d keep the routine household stuff instantly available under their own login and only put the truly sensitive personal accounts behind a delay. Match the delay length to how fast someone would actually need that account, not to how paranoid you feel setting it up.
The weak point is not the password list. It is making your spouse depend on an email address or phone number that only you control. Even a current shared-vault entry can fail if the reset link goes to your personal inbox or the security code goes to your locked phone.
Move household accounts to a shared billing email, add your spouse’s number as an approved verification method where possible, and make sure they can access that email independently. Then test a password reset, not merely a normal login. That catches the circular setups where accessing the utility requires the email, but accessing the email requires your phone.