A Password Manager and No Master Password

If your husband kept every password in a password manager and died without telling anyone the master password, the hard truth is that there is usually no back door to get into it. The major password managers are built so that the company itself cannot read your vault and cannot reset the master password for you. That is not a gap in their service; it is the whole point of the design. Without the master password, or something set up in advance to stand in for it, the contents generally cannot be recovered by anyone.

That sounds like a dead end, and for the vault itself it often is. But it is not the end of the story, because the vault is only a container. The accounts inside it — the bank, the email, the pension portal, the utilities — can each still be reached through their own bereavement and account-recovery routes, without ever opening the manager. The realistic task is to work around the vault rather than break into it, and to know which, if any, of the built-in emergency features the person happened to switch on before they died.

This guide explains why there is no master-password reset, how the emergency-access features differ between the managers used most in the UK, and which accounts stay shut for good when none of them was set up.

Why there is no back door

Reputable password managers use what is often called zero-knowledge or end-to-end encryption. Your vault is encrypted and decrypted on your own device, using a key derived from your master password, and only the scrambled version is ever stored on the company's servers. The company never receives your master password and never holds the key, so even if it wanted to — even with a death certificate and a court order in front of it — it has nothing to hand over but an unreadable file.

This is genuinely a security feature, and it is why these tools are recommended. It is also why the usual reassurance — “surely the company can just let us in” — does not apply here. There is no customer-service override, because the architecture was specifically built so that no such override can exist. Understanding that up front saves days of phone calls that were never going to succeed.

It also means the master password is worth searching for as a physical object. Many people who use a manager write the one password they must not lose somewhere deliberate: a sealed envelope, a home safe, a note with the will, a printed recovery sheet from the manager itself. Before concluding the vault is unreachable, look properly for that written record, because it is the one thing that opens it instantly.

Emergency access: the feature that had to be set up first

Several managers offer a way to share a vault after death or incapacity, usually called emergency access or a trusted-contact or legacy feature. The idea is the same across them: while alive, the account holder nominates a trusted person, who can later request access. The request does not grant entry immediately. It starts a waiting period — often several days — during which the account holder is notified and could refuse, on the assumption that a living person would decline a request they did not expect. If the waiting period passes with no refusal, the nominated person is let in.

The catch, and it is the whole catch, is that this only works if it was arranged in advance. Emergency access cannot be added by the family after the death, because adding it would itself require getting into the account. So the first question is not “how do we use emergency access” but “did they ever set it up, and am I the named contact?” If they did, and you are, the route is usually straightforward. If they did not, no amount of proof of death will create it retrospectively.

How the main managers differ

The managers used most in the UK take noticeably different approaches, so it is worth checking which one you are actually dealing with before assuming anything.

Some, such as LastPass, Bitwarden and Dashlane, offer a dedicated emergency-access or trusted-contact feature that works broadly as described above: a nominated person, a waiting period, then access. The exact waiting time and the level of access are set by the account holder and vary between the products, so check the specific manager's own help pages rather than assuming the timing.

Others take a different route. 1Password, for instance, does not use a traditional emergency-access request; instead it relies on an Emergency Kit — a printable sheet containing the account's Secret Key, on which the holder is meant to write the master password — and, for a family account, allows a family organiser to help recover another member's account. In every case the common thread is the same: recovery depends on something the account holder did earlier, whether a printed kit, a named contact or a family plan. There is no manager whose provider can simply verify a death and unlock a stranger's vault.

Because the details genuinely differ and change over time, confirm the current process on the specific provider's own site. The consumer body Which? also publishes plain-English guidance on password managers and digital legacy that can help you work out what a given product offers.

Working around the vault instead of through it

When no emergency access was set up and no written master password can be found, stop trying to open the manager and go after the accounts individually. The vault was only ever a convenient index; the accounts behind it still exist and can each be reached on their own terms.

Start with the email account, because it is the true master key to a digital life: statements, renewal notices and password-reset links all arrive there, and getting into it — or having the provider grant access to the estate — exposes most of what the vault would have listed. From the inbox and from paper bank statements you can rebuild the list of what matters: the bank, the pension, the insurers, the utilities. Then approach each of those providers directly, with the death certificate, through its own bereavement process, rather than trying to log in as the person who died.

It is also worth checking whether passwords were saved somewhere other than the manager. Many people use a dedicated manager and still let their web browser save logins as well, and a browser signed in on a home computer may reveal saved passwords without any master password at all. The same is sometimes true of an already-unlocked laptop or tablet that the person left signed in. None of this is guaranteed, but it costs nothing to look before assuming everything is sealed behind the one vault you cannot open.

Two of the things the vault most often hid are money the family did not know about. Balances held in payment services frequently sit outside any bank, and our guide to the PayPal and Wise balances nobody knew about shows how those are traced and claimed. Regular credits and debits on the statements can point to a pension or salary still moving; if a payment has been clawed back after the death, our guide on the bank taking back a pension payment explains why, and whether wages or a pension can still be paid into a frozen account covers what happens to money still arriving.

The phone is often the real obstacle

Even when you know a password, many accounts now demand a second step — a code from a text message or an authenticator app — and that second step usually lives on the person's phone. A locked handset can therefore block accounts whose passwords you already have, which is why keeping the phone and its number active matters in the first weeks. Do not rush to cancel the mobile contract, because the number may be receiving the very codes you need; our guide on whether you pay an exit fee on a dead person's phone contract weighs that against the cost of keeping it running a little longer.

What stays shut for good

It is kinder to be honest about the limits. Some things genuinely cannot be recovered without the master password or a route set up in advance. A self-custody cryptocurrency wallet, or any account whose only key was inside the vault and which has no provider-side recovery, may be lost permanently. Photos, notes or messages stored only inside an encrypted account with no legacy contact can be unreachable. And the vault itself, guarded by a master password nobody wrote down, may simply stay closed.

What you can almost always still do is deal with the accounts that have a provider behind them — every regulated bank, insurer and pension scheme has a way to release funds to an estate on proof of death, whether or not you can log in. Repeated guessing, on the other hand, is the one thing that can turn a merely inaccessible account into a permanently locked or wiped one, so treat the providers' front doors as the route and leave the guessing alone.

If this has shown you how much of your own household would be locked away behind one password, the practical response is twofold: set up a legacy contact and write the master password somewhere your executor can find it, and make sure the money side is covered too. You can get life insurance quotes and have an FCA-authorised broker price cover for your own circumstances, and our guide to bereavement admin, assets and contracts gathers the wider set of accounts and contracts a family has to unpick.

Scotland and Northern Ireland

A password manager's design is the same wherever you live, so the emergency-access routes and the “no provider reset” rule apply across the UK unchanged. What differs is the authority you use when you approach the banks, insurers and pension schemes behind the vault. In England and Wales that authority is a grant of probate; in Scotland it is confirmation, obtained through the sheriff court; in Northern Ireland it is a grant from the Probate Office there. The digital lock is identical everywhere; the estate paperwork you show the providers is what changes.

Frequently asked questions

Can a password manager company reset the master password for the family?

No. The major managers are built so that the provider never holds your master password and cannot decrypt the vault. That is the whole point of the design. Without emergency access set up in advance, a printed recovery kit or a written copy of the master password, the contents generally cannot be recovered, even with a death certificate.

What is emergency access and how long does it take?

It is a feature that lets a nominated person request the vault. The request starts a waiting period, often several days, during which the account holder could refuse. Once it expires the nominee gets in. It only works if it was switched on and a contact named before the death, because it cannot be added to the account afterwards.

What should I do if there is no emergency access set up?

Work around the vault rather than through it. Use email account recovery, paper statements and card transactions to identify the accounts that matter, then contact each provider directly with the death certificate. Repeated guessing can lock accounts permanently, so approach the providers through their bereavement routes rather than trying to break in.