Get Your Whole Family On A Password Manager Tonight

Block out three hours on a weeknight. That's what this takes, start to finish, including the part where your wife's laptop needs a restart and your fourteen-year-old claims his account is "already secure" because he uses a different password for Discord.

Pick the software first, because that decision stalls people for weeks and it shouldn't. 1Password Families runs about $60 a year and covers five people, with more added free. Bitwarden Families is roughly $40 a year for six. Both are good. 1Password is smoother for people who don't like computers, which is the actual constraint in most houses. Bitwarden is cheaper and open source, and the apps are a half-step clunkier. If your entire family lives on iPhones and Macs with no exceptions, Apple's built-in Passwords app is free, it does shared groups now, and it's genuinely fine. The moment one person has an Android phone or a Windows laptop at work, buy the cross-platform one.

Don't agonize. The worst option on that list beats what you're doing now.

The twenty-minute setup nobody does correctly

Install it on your own devices first. Browser extension on every browser you actually use, app on your phone, app on your laptop. Then create your master password.

This is the one password you'll memorize for the rest of your life, so make it a sentence. Four or five unrelated words with a number wedged in the middle. Something you can say out loud while you type it. Not a name, not a birthday, not the dog.

Now write it on paper. Actually write it. Most managers generate an emergency kit or recovery code PDF at signup, and it's the single most important file in the whole system, because if you forget the master password there's no support line that can get you back in. That's the point of the design. Print the kit, write the master password on it by hand, and put it somewhere a fire wouldn't reach it. A safe, a safe deposit box, a sealed envelope taped inside a filing cabinet.

Do the same for your spouse, separately. Her kit, her password, her envelope.

Importing is where it gets ugly

Export your saved passwords out of Chrome or Safari and import them. The manager walks you through it. Then brace yourself, because you're about to see what fourteen years of internet looks like.

Mine came in at just under 400 entries. Maybe sixty mattered. The rest were dead forums, a defunct airline, six duplicate Amazon logins from different devices, and a login for a printer I no longer own. Don't try to clean all of it tonight. You'll burn ninety minutes and quit.

Instead, sort by whatever "last used" field your manager offers and delete anything you don't recognize from the last two years. Then move on.

One thing you must do before closing the browser: turn off Chrome's own password saving. Settings, Autofill, Passwords, kill the "Offer to save" toggle. If you skip this you'll have two competing sets of passwords within a week and autofill will start guessing wrong, and that's the exact frustration that makes people abandon the whole project by Thursday.

Change twelve passwords, not three hundred

Every guide tells you to reset everything. Nobody does it, so they do nothing.

Change these, tonight, in this order:

• Your primary email. Everything else resets through it, which makes it the master key to your entire life.
• Your spouse's primary email.
• Your bank and any brokerage.
• Apple ID or Google account.
• Your phone carrier account. This is the one people miss, and it's how SIM-swap attacks start.
• Amazon, because your card is saved there.

Let the manager generate each one. Twenty characters, random, you'll never see it again. Then turn on two-factor authentication on all six while you're already sitting in the settings page, and choose an app or a security key over text messages if the site offers the choice.

The rest of your logins can update slowly, whenever you happen to sign in. That's fine. Reused passwords on a sandwich shop loyalty account aren't the threat.

Now bring in the family

A password manager only you use isn't a family plan. It's a hobby.

Send the invites from your account. Sit next to each person while they set their master password, because this is the step where somebody quietly types "Kitchen2019" and you'd never know. Make them create it, make them write it down, make them put the paper somewhere you both agree on.

Then set up the vaults. There are three kinds and the distinction matters more than it sounds:

Shared with everyone. Netflix, Disney+, the Wi-Fi password, the pizza place account, the Costco login. Anything where a kid asking you for the password is a weekly annoyance.

Shared between the two adults. Banking, insurance, mortgage servicer, utilities, the pediatric portal, tax software. Your spouse should be able to pay the electric bill from a hotel room without calling you.

Private. Everybody gets one, including teenagers. Don't take that away. A kid who knows his personal vault is his own will actually use the system instead of routing around it.

The part that saves you later

Turn on emergency access. 1Password calls it recovery, Bitwarden calls it emergency access, and the idea is the same: a trusted person can request access to your vault, and if you don't decline within a set waiting period, they get in.

Set your spouse as yours. Set yourself as hers. Choose the waiting period on purpose. Two days if you want it usable in a hospital parking lot, seven if that makes you more comfortable.

Then tell one other adult that the system exists and where the paper kits live. A brother, a grown child, whoever would be handling things if a truck slid through an intersection. They don't need the passwords. They need to know there's a system and it isn't a notebook in a kitchen drawer.

What will go wrong in week one

Autofill will fail inside two or three mobile apps and you'll have to copy and paste. Some bank sites still block paste in the password field, which is user-hostile nonsense, and the workaround is typing the generated password by hand once and then never again.

Somebody will save a new password to Chrome by reflex. Fix the toggle on their machine.

And your teenager will lose his master password within a month. Count on it. That's why you wrote it down, and it's why you set yourself as his recovery contact while you were sitting there.

Give it two weeks. By then, nobody in the house texts a login to anybody, the Wi-Fi password lives in one place, and you've stopped being the family IT department.

Six months from now, somebody's phone goes into a lake. You'll reinstall one app, type one sentence you memorized in October, and everything comes back.