The Vault Recovery Drill: When the Master Password Is Forgotten
The family password vault holds every account the parent owns, and it is guarded by one master password. The day that password is forgotten, lost, or locked is the day the whole system gets tested, usually during a crisis. This page is the recovery chain that has to exist before that day, and the twenty-minute drill that proves it works.
a vault without a tested recovery path is a lockbox with the key inside
The vault recovery map
Three failures lock a family out of the vault: the forgotten master password, the unprinted recovery codes, and a recovery contact that belongs to an old number or a dead account. Each is fixable now and expensive during a crisis.
- Chain 1The master password is stored, not rememberedOne paper copy in the family documents folder and one sealed copy with a sibling or the estate attorney: paper in a known place beats a perfect memory, especially under stress or after a health change.
- Chain 2The recovery codes are printed and stored with itMost managers issue one-time recovery codes at setup: print them, put them with the paper copy, and never store them on the same device as the vault.
- Chain 3The recovery contact and the named backupSet Google's recovery options and Apple's recovery contact and Legacy Contact while the parent can still consent, and name one sibling as the vault backup through the manager's emergency-access or sharing feature.
- The drillTwenty minutes, twice a yearPick two dates a year (a birthday and a holiday work well) and drill with the parent: open the paper copy, enter the codes, and confirm the sibling can request access, so the recovery path is tested, not assumed.
The rule, in one sentence: a password vault without a tested recovery path is a lockbox with the key inside. Set up the recovery chain first, then drill it twice a year.
What can go wrong
Three failures lock a family out of the vault: the master password is forgotten (the most common, and more likely under stress or after a health change), the recovery codes were never printed, and the recovery phone or email belongs to the parent's old number or an account that no longer exists. Each one is fixable now and expensive to fix during a crisis. See the vault setup guide for the base system; this page is the safety net under it.
The recovery chain, in order
- The master password is written down and stored, not remembered. One paper copy in the family documents folder, and one sealed copy with a sibling or the estate attorney. Paper in a known place beats a perfect memory.
- The recovery codes are printed and stored with it. Most password managers issue one-time recovery codes at setup. Print them, put them with the paper copy, and never store them on the same device as the vault.
- The recovery contact is set on the parent's accounts. Google and Apple both let a family member help recover access: Google's recovery options and Apple's recovery contact and Legacy Contact are the official mechanisms, documented below. Set them while the parent can still consent.
- One sibling is the named vault backup. The vault's emergency access or sharing feature names a family member who can request access if the parent stops responding. That feature exists in most managers and is set up once.
The twenty-minute drill (twice a year)
Pick two dates a year (a birthday and a holiday work well). On each date, do the drill with the parent:
- Ask the parent to unlock the vault from memory, exactly as they would alone.
- If they cannot, walk the paper copy path and unlock with the written password, then note that the written copy works.
- Test the recovery codes on a spare device or in the manager's test flow, if the manager offers one.
- Confirm the recovery phone and email are current, and that the named backup sibling still has their copy.
- Update anything that drifted and record the date on the paper copy.
The mistakes that lock the family out
- The sticky note on the monitor. The master password belongs in the documents folder, not in plain sight on the desk.
- The recovery code sent by text. A lost or swapped SIM (see SIM swap) can take a text recovery with it.
- The shared chat message. "Here is the master password, save it" in the family group chat is a leaked credential, not a backup. The password goes on paper.
- The single device. If the vault lives only on the parent's phone and the phone dies, the recovery path is all that remains. See lost or stolen phone.
Related
- Family password vault: the base setup this page builds on.
- Passkeys and biometrics: fewer passwords to forget in the first place.
- Two-factor authentication: the recovery codes that double as account recovery.
- Digital legacy setup: what happens to the vault when the parent is gone.
Sources
- Google Support: Manage passwords saved in your Google Account (retrieved August 2026)
- Google Support: How to recover your Google Account (retrieved August 2026)
- Apple Support: Set up a Legacy Contact (retrieved August 2026)
Found an error? Report it.