How to Safely Share a Password With Family

The default way households share passwords is a text message, usually followed by “don’t tell anyone”. The problem is not trust. It is that the message now exists in two message histories, two cloud backups, and any laptop where either of you reads messages — and it stays there indefinitely, long after the reason for sharing has passed.

There are better routes, and for most of the accounts people share there is an official one that avoids sharing a password at all.

First, decide whether you should be sharing a password

Many of the things households share have a proper mechanism, and using it is better on every axis. Each person gets their own login, their own recommendations and their own settings, and removing someone later does not inconvenience everyone else.

Two of these deserve emphasis.

Never share your main email password. Whoever holds it can reset the password on nearly everything else you own. If someone needs to read your mail, Gmail’s delegation feature grants reading and sending without the password or the ability to change account settings.

Never share banking credentials. Beyond the obvious risk, most banks’ terms make you liable for losses arising from disclosed credentials, which converts a family disagreement into a financial one. A proper joint account exists for this.

The good routes, in order

A password manager’s sharing feature

The best option by a clear margin. Every major manager has either a shared folder, a family vault, or per-item sharing.

What makes it better than any other method:

• The other person’s app fills the password without displaying it, so it never gets written down or memorised.
• You can revoke it in one click, and their copy stops working.
• Changing the password updates everyone automatically, which removes the real-world failure where you change it and three relatives are locked out.
• The 2FA code travels with it if the manager stores TOTP, which is the only tidy answer to sharing a protected account.

Family plans typically cover five or six people and are the normal reason households end up on a paid tier. If you are choosing one, the comparison with browser-saved passwords covers what else you get.

The service’s own family feature

Apple Family Sharing, Google Family Group, Microsoft Family, and the equivalents on streaming and shopping services all share entitlement rather than credentials. Purchases, subscriptions and storage are shared; logins are not.

This is better than password sharing in a way that is easy to undersell: there is no shared secret to leak, no coordination when a password changes, and removing someone takes one setting.

It is also easier to get a reluctant relative to accept, because it asks nothing of them except setting up their own account.

Platform credential sharing

Apple devices can share a saved password or Wi-Fi password with a nearby device over AirDrop, and iOS supports shared password groups in the Passwords app. Android and Chrome have comparable sharing within a family group. These are convenient and secure for the moment of transfer, though they generally give the other person the actual password rather than hiding it.

If you have to send one directly

Sometimes a relative will not install anything and the service has no family feature. Reduce the damage rather than pretending it is fine.

• Say it out loud, in person or on a phone call. No written copy exists afterwards. This is genuinely the best of the low-tech options.
• Split it across two channels. Half by text, half by voice. Neither intercepted channel is sufficient on its own.
• Use a self-destructing note service that generates a one-time link. The content is destroyed after the first view, so even someone reading the message later finds nothing.
• If you must text it, delete it from both devices afterwards — yours and theirs. Copies in cloud backup may persist regardless, which is the point.

What to avoid entirely: email, because it sits in two mailboxes and both providers’ backups indefinitely; shared notes documents, which sync everywhere and get forgotten; a photo of a handwritten list, which lands in a photo library that is probably synced; and group chats, where the audience is larger than you remember.

Shared passwords need maintenance

The thing nobody plans for is the end of the arrangement. A password shared with a flatmate in 2021 is still valid in 2026 unless someone acted.

Do this periodically:

• Change passwords when someone leaves the household, the relationship or the job. Not because they will misuse it, but because the sharing was for a situation that no longer exists.
• Keep a list of what is shared with whom. A shared-folder structure in a manager does this for you; a text-message habit does not, which is how people end up unable to answer the question.
• Check for a device list after any change. The old password being gone does not necessarily end an active session, so reviewing signed-in devices is the step that actually ends access.
• Set up emergency access. Most managers let a nominated person request the vault and receive it after a delay you choose. Apple has Legacy Contacts, Google has Inactive Account Manager. Configure one; it is the version of this problem that is certain to arrive eventually.

Realistic expectations

A family password manager takes an evening to set up and a fortnight of mild nagging for everyone to use it. After that it removes an entire recurring irritation, because nobody is ever asking for a password again.

If that is not going to happen in your household, the realistic improvement is narrower and still worth doing: move the streaming and shopping accounts onto their proper family plans, keep email and banking entirely unshared, and say any remaining password out loud rather than typing it. That combination removes most of the exposure without asking anyone to change how they use their phone.