Editorial note: This is general information, not professional advice. Check the linked sources and current local guidance before acting.

Sharing a household login is often a practical need: a partner needs the utility account, a parent needs the streaming service, or someone has to access the family photo storage while you are away. The risky part is not the relationship. It is turning one reusable secret into a copy that may remain in a chat history, screenshot, browser, notebook or old phone.

The safer pattern is to share access through a password manager’s vault or a short-lived sharing feature. The person receives access to the selected item without the family having to maintain a list of passwords in messages. This guide is a decision aid, not a recommendation for one provider. Feature names and family-plan limits change, so check the service’s current documentation before paying or moving your data.

1. Decide whether the login should be shared at all

Start with the account owner and the actual task. A shared grocery-delivery account may need a household member to sign in; a personal email, health portal or financial account may have a better “authorized user,” delegation or household-access option. Do not share credentials merely because it is convenient if the provider offers separate access.

For a bank, insurance service, workplace account or government portal, check the rules first. A separate user can preserve an activity trail and make removal straightforward. A shared login can make it difficult to tell who changed a setting or initiated a transaction, and it may violate the provider’s terms.

2. Give every person their own vault account

Do not create one family password-manager login and pass its master password around. Each person should have a separate account, their own strong master credential and multi-factor authentication where the service supports it. CISA recommends long, unique passwords and MFA because a password alone is a weak single point of failure.

This separation is what makes access reversible. If a family member loses a phone, stops using the service or no longer needs a login, you can remove that person’s membership or vault permission without rebuilding the household’s entire password system.

3. Create a small shared vault

Make one vault or collection for genuinely shared accounts. Keep personal email, private documents, recovery codes and unrelated work credentials in private storage. Name the shared area plainly, such as Household, and add a note describing who should use it and when it should be reviewed.

Start with one low-consequence service and test the workflow. Confirm that the other person can sign in without seeing items that were not intended for them. A shared vault is a permission boundary, not a dumping ground.

4. Share the smallest useful permission

Share the one login needed for the task, not the whole vault. If the manager offers view, use, edit or administration permissions, choose the least powerful option that still works. Someone who only needs to use a streaming service does not need permission to invite members, export the vault or change billing details.

Apple’s current Passwords guidance similarly separates trusted people into a group and lets the owner choose which passwords and passkeys belong there. That is a useful mental model even when your provider uses different labels: choose the people first, then the items, then review the result.

5. Prefer a vault or expiring link over ordinary messages

Never paste a reusable password into a family group chat, email thread or shared document. Those copies are easy to forward and hard to recall. If a password manager offers a one-time or expiring link, check its recipient and expiry settings before sending it. For a permanent household relationship, a shared vault is usually easier to review and revoke.

If you must handle a one-off credential outside a manager, use a private channel, send the username and secret separately, and remove the message when the service supports reliable deletion. Treat this as a compromise, not the family standard.

6. Protect the shared account itself

Use a unique password for every shared service. Turn on MFA for the account when available, and store recovery codes where the people responsible for recovery can reach them without putting them in the same casual chat as the password. Keep the password manager updated and lock devices with a screen password, PIN or biometric control.

Avoid sharing the password-manager master credential, MFA code or recovery key “just in case.” Instead, agree on a recovery plan: who can contact the provider, where emergency information is kept, and how access is restored if a phone is lost. A recovery plan should not become a second unprotected vault.

7. Review access after real-life changes

Put a short review on the household calendar every few months and after a move, breakup, lost device, new caregiver or change in responsibility. Check shared members, shared items, active sessions, passkeys, recovery addresses and MFA devices. Remove old invitations and rotate any credential that was copied into a place you no longer control.

The review does not need to be dramatic. Ask: Who can access this? What can they do? Do they still need it? Can the provider give them a separate account instead? Those four questions prevent most accidental over-sharing.

A simple household rule

Share access, not secrets. Use separate manager accounts, a small shared vault, the narrowest permission and MFA. For sensitive services, use delegated access instead of a shared login. If a password has already been pasted into a message or screenshot, treat it as exposed: change it, update the vault and remove the old copy where you can.

The strong-password guide explains how to replace weak or reused credentials, while the password-manager setup guide covers the first installation. For household files that need shared access rather than a login, the Google Drive organization guide is a better fit.

Sources

• Apple Support: Share passwords and passkeys with people you trust
• CISA: Use Strong Passwords
• NIST: Digital Identity Guidelines, Authentication and Lifecycle Management
• Bitwarden: What is the right way to share passwords?

Sources

• Apple Support: Share passwords and passkeys with people you trust
• CISA: Use Strong Passwords
• NIST: Digital Identity Guidelines, Authentication and Lifecycle Management
• Bitwarden: What is the right way to share passwords?

Frequently Asked Questions

What is the safest way to share a password with family?

Use a reputable password manager's shared vault or an expiring, single-use sharing link when available. Give each person their own account and share only the specific login they need; do not send a reusable password in a group chat or ordinary email.

Should family members share one password-manager account?

Usually no. Separate accounts make it possible to remove one person's access without changing every shared login and let the service apply each person's own sign-in protections. Use the manager's family or organization-sharing feature instead.

What should I do when someone leaves the household?

Remove their access from shared vaults, review shared logins and rotate any password that was exposed outside the vault. Also review recovery email addresses, passkeys, trusted devices and multi-factor authentication methods.

Can I share a bank password with a family member?

Check the institution's terms and look for delegated access or additional-user features first. Sharing credentials can defeat account activity records and violate terms; a separate authorized user is usually easier to revoke and audit.