Make a family account list without sharing passwords

Start with a list, not an export

You can do this for free with paper or a document. Write the service name, website and username or email. Group accounts by email, banking and money, phone, shopping, social, work and other. Add a blank line for where the password is kept: for example, “my password manager; see the separate emergency instructions”. Do not write a password, access key or recovery code on this list.

Review the list with your trusted person while you can. Tell them where it is kept and what they should do first. Keep work accounts separate from personal access arrangements and follow your employer’s process.

Arrange access in the manager itself

Bitwarden Emergency Access lets eligible paid-plan users invite a trusted contact. The invitation must be accepted and confirmed; choose view or takeover access and a waiting period. The contact later requests access from their own vault.

LastPass Emergency Access lets you set a trusted LastPass contact and a wait. Arrange it before an emergency and check your plan. Proton Emergency Access is set under Recovery on eligible paid plans. Check its separate Pass password instructions if you use that feature.

1Password’s Emergency Kit is a separate document containing sensitive access information. Keep it securely available to your trusted person, away from this account list. It is not an automatic timed handover.

Apple Legacy Contact covers eligible Apple data, but excludes Keychain passwords, payment information and passkeys. Google Inactive Account Manager lets you choose eligible data and contacts; do not assume it hands over your saved passwords. This list does not bypass any provider’s access rules.

If you use a CSV export, handle it like a key

Password-manager exports are typically unencrypted. Anyone who can open the export can read its contents. Work on your own trusted computer, away from shared computers, email and cloud-synced folders. Never upload the export to an online converter or share it with support. You can disconnect the internet before processing it.

Use the official export instructions for your app. Select CSV when offered; this tool does not use encrypted exports, JSON or 1PUX. Dashlane supplies separate CSVs: extract the download and use credentials.csv only.

CSV columns can include notes, authentication setup secrets and other private data alongside passwords. If you make your list manually, copying only account names, websites and usernames is safer than printing the whole export. Review every retained field. Avoid online spreadsheets for this task.

Delete the original afterwards

First check the account list. Then delete the original export. On Windows, select it in File Explorer and press Shift+Delete, then confirm. On Mac, move it to Trash and empty Trash. On Linux, delete it and empty Trash. Also remove Dashlane’s original ZIP and extracted export folder, and any copies in synced folders or backups you control.

Deletion does not guarantee secure erasure from an SSD or backup. Keep the account list private too: it still names your services and usernames. Close the tool’s tab when finished.

After a death, use official routes

An account list is not permission to sign in. Providers decide what they can share or close and what evidence they require. For example, Google has a deceased-user request route. Follow the provider’s current help page instead of an unsolicited “recovery” offer. This guide describes product features; it gives no legal advice.

Official sources checked 3 October 2026. Features and eligibility may change.

If you want the list filled for you

Heir Packet reads supported CSV columns locally and creates a printable list plus account and review CSV files. It skips secret columns while scanning; secret bytes still briefly pass through memory. It cannot recognize a secret someone has put in a username or account-name field.

See Heir Packet and the sample

Questions or a refund

ustechautomations@gmail.com — never send an export or recovery information.