Is my password manager data safe if my device is lost or stolen?

Yes. All major password managers encrypt your vault client-side using strong encryption. Without your master password, the vault is unreadable even if someone has physical access to your device. Your data is protected by the encryption, not just by physical security.

How to Pass On Passwords and Accounts When You Die

Q: Should I share my passwords directly with my spouse or children now?

Sharing passwords directly introduces significant security risks: shared credentials can be accidentally exposed, and personal or financial circumstances change over time. A better approach is a layered system — password manager with a securely stored recovery key, platform death tools (Google, Apple), and a digital vault — so your heirs get access when they need it, through secure mechanisms, not before.

Q: Does a will legally cover digital accounts and passwords?

Your will can designate who is legally entitled to your digital assets — but a will does not grant the technical access needed to actually access those accounts. The legal entitlement and the practical access are separate problems. Both must be solved: a will handles the legal transfer, while documented credentials and platform death tools handle the technical access.

In brief: Your email account is the master key to your digital estate. Whoever controls it can reset passwords, access online banking notifications, and manage everything else. Yet most expats have made no provision for this. Here is the practical guide — no technical jargon, no security trade-offs.

Why This Is More Urgent Than You Think

Consider what your heirs need to access after your death, without your help:

Your online bank accounts (to understand what exists and initiate transfer)
Your investment platforms (to locate and claim assets)
Your Spanish gestor's communications (to understand your tax situation)
Your pension scheme correspondence
Your insurance policies
Your property-related documents (mortgage, insurance, cadaster reference)
Your email inbox — to find all of the above

Without access to your email, almost all of the above becomes exponentially harder. Banks and platforms send reset codes to your email. Correspondence is stored there. Subscriptions and accounts are registered to it.

And yet your email account — like all your accounts — is protected by a password only you know.

The Wrong Approaches (and Why They Fail)

Writing passwords in a notebook: Insecure. A notebook can be found, lost, stolen, or never discovered after death. Passwords change — notebooks do not update themselves.

Leaving passwords in a letter with your will: Your will becomes a public document in some jurisdictions. Even where it does not, it is typically held by a notary and not accessible until after formal proceedings begin — which may take months.

Telling a trusted person your passwords verbally: People forget. The trusted person may predecease you. You change passwords and the oral instruction is now wrong.

Storing passwords in an unencrypted document on your computer: A single breach, a stolen device, or a repair visit exposes everything while you are still alive.

Doing nothing: The most common approach, and the most damaging for heirs.

The Right Approach: A Layered System

The goal is to be secure while alive and accessible after death. These two requirements pull in opposite directions, but a layered system resolves the tension.

Layer 1: Password Manager

A password manager (Bitwarden, 1Password, KeePass) stores all your passwords in an encrypted vault secured by a single master password and a recovery key.

For the estate:

Store your master password and the recovery key (an emergency kit) in a physical, sealed envelope
Keep this envelope in a secure location your heirs know about: a home safe, a sealed envelope with your notary, or a bank safe deposit box
Your password manager handles the technical complexity. Your heirs only need one thing: the master password and recovery key

This approach means you do not need to update your passwords list every time you change a password — the manager does that automatically.

Recommended managers:

Bitwarden — open source, free or low-cost, self-hostable
1Password — user-friendly, subscription-based, strong emergency kit feature
KeePass — locally stored, no cloud, maximum privacy

Layer 2: Platform Death Tools

For your most important accounts, use the official death access mechanisms that major platforms provide. These do not require sharing passwords — they provide legally sanctioned access through an official process.

Google — Inactive Account Manager

Configure at: accounts.google.com → Data & Privacy → Make a plan for your account
Designate a trusted contact to receive access after a period of inactivity (3–18 months)
You can specify which data they receive (email, Drive, Photos, etc.)

Apple — Digital Legacy

Available since iOS 15.2 / macOS 12.1
Settings → [Your Name] → Password & Security → Legacy Contact
You generate an access key; your Legacy Contact uses it with the death certificate to request access

Facebook / Instagram — Legacy Contact

Settings → Memorialisation Settings
Designate someone to manage or delete your profile

Why this matters: These mechanisms are legally defensible, technically secure, and do not require you to ever share your password. Apple and Google will not give access to someone who just claims to be a relative — they require the proper documentation.

Layer 3: A Secure Digital Vault for Everything Else

Not everything fits neatly into a password manager or a platform death tool. What about:

Your crypto exchange accounts (and the hints to find seed phrases)
Your investment platforms in multiple countries
Your Spanish gestor's email and file reference
Your notary's contact details and the location of your will
Instructions for less common platforms
Your wishes for specific accounts (delete this, preserve that, transfer to this person)
Personal messages to family members

This is what Sucesio handles: a structured, encrypted vault where you document everything that does not belong elsewhere — and which is transmitted to your designated heirs only after your death is confirmed.

The key design principle: Sucesio has zero knowledge of your unencrypted data. The information is encrypted client-side. Only your designated heirs receive access, and only at the right moment.

A Practical Checklist

Set up now (takes a few hours):

Install a password manager and migrate your passwords to it
Store the master password and recovery key in a sealed physical envelope
Enable Google Inactive Account Manager for your Gmail account
Enable Apple Digital Legacy if you use an iPhone or Mac
Designate a Facebook Legacy Contact
Make a list of every financial platform and account you hold
Note the associated email address and approximate balance for each
Document your crypto holdings (exchanges used + wallet types + seed phrase storage location — not the phrase itself)
Store the above in Sucesio or equivalent secure vault

Tell someone: Your heirs need to know that this system exists and where to find the physical envelope with your password manager recovery key. Without this piece of the puzzle, everything else is inaccessible.

A Note on Crypto Seed Phrases

Do not store seed phrases in your password manager. If your password manager is compromised, your crypto is gone.

Seed phrases should be:

Written on paper (or stamped on metal for fire/water resistance)
Stored physically in a secure location (safe, bank vault, fireproof box)
Not photographed, not stored digitally, not sent over any network
Known to your heirs only in terms of where to find them, not the phrase itself

In Sucesio, you can document: "My hardware wallet seed phrase is stored in [location]. The wallet device is [location]. The PIN is stored in my password manager under the entry [name]." This gives heirs everything they need without exposing the phrase to digital risk.

Frequently Asked Questions

Should I share my passwords directly with my spouse or children now? This introduces security risks: shared credentials can be accidentally exposed, and relationships change. A better approach is to use the layered system above — your heirs get access when they need it, through secure mechanisms, not before.

What if I die suddenly and my heirs need access immediately? This is the argument for keeping a physical emergency envelope — password manager recovery key + a short list of the most critical account names — in a location your heirs know about. The full system (platform death tools, Sucesio) may take days or weeks to activate. The physical envelope provides immediate emergency access to the most critical accounts.

Is my password manager data protected if my device is stolen? Yes. All major password managers encrypt your vault client-side. Without your master password, the vault is unreadable. Your data is safe even if someone has physical access to your device.

Does my will cover digital accounts? Your will can designate who is entitled to your digital assets — but it does not grant technical access. The legal entitlement and the practical access are separate problems. Both must be solved.

This article is for general informational purposes only and does not constitute legal, tax, or financial advice. For your specific situation, consult a notary or lawyer specialised in digital succession.