Assign private vault emergency access to a family member
Hi,
Looks like a printed paper is the best solution 1password has for emergency access in case of family member's health makes stops them from accessing their personal vaults:
https://1password.community/discussion/136165/how-to-gain-access-to-parents-private-vault-when-they-pass
I had a Lastpass family account, but switched to 1password families as I found it safer and tidier.
But in 1password I can't find a similar solution to what Lastpass had:
Assign emergency access to a member while configuring number of days for denial. Then if the assigned member, using the password management web pages, requests access to my account, I get an email with a link for denying access within the mentioned number of days.
I would agree that some of the web management features in Lastpass were a security risk, maybe this one as well. But it can be done right.
And I simply don't find 1password's (lacking really) solution good enough for this core need of a family password management solution.
While you generally won't distrust family members, it's not ok for any part to have too much access. In case of a breach, what will other's think?
I would find it ok to manually share a print of my Secret Key to a family member.
But I can't see any good option to automated sharing of my 1password username and password after a denial period.
Would love to hear if anyone has solved this in a good way, or if the 1password devteam has plans.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided
Comments
-
1Password does not have a feature such as delayed access. Others in the community have proposed a legacy access system which might include this kind of access. I'd be happy to let the team know you're interested in that feature.
You might also be interested in Generate and use recovery codes though it does not include the delayed access you specifically described.
ref: PB-41966543
1 -
Features take time to design and release. We just released recovery codes. I'm hoping this sort of feature will be in the relatively near future. However, that is just my hope. I have no further knowledge on the availability of the feature.
0 -
Thanks for getting back quickly.
In the meantime we solved this with paper and glue.
We have a common secure physical location, and we print our recovery kits and put them in individual envelopes that we seal with some messy glue.
We trust each other. But we would also be able to see a non-emergency opening, by tears in the paper. Or from a physical break-in.A tiny bit of work, but not so bad, and we don't have to relate to possible failures in a delayed access function.
For our needs it is fine.0 -
I'm very happy to hear you found something that works for your needs. Good call out on the envelope system. :)
0