Somebody is standing at a kitchen counter at nine at night with a laptop open and a list of things that have to happen tomorrow. The funeral home needs a document. The insurance company needs a policy number. Payroll runs Thursday and the only person who has ever logged into that system is not available to log into it. The information exists. It is sitting inside accounts, behind passwords, behind a second login step that sends a code to a phone in another room.
An emergency access file is the answer to that night. It is not a fancy product and it is not a legal document. It is an organized set of information that lets one trusted person do what needs doing, built so that person can get to it quickly and no one else can get to it at all. That balance is the whole design problem, and it is very solvable. This article is general information and not legal advice, so please talk with your own estate attorney about how this fits your will, trust, or power of attorney.
What Goes in the File, and What Does Not
The most common mistake is trying to write down everything. A file with two hundred entries goes stale in a month and nobody maintains it. Aim for the short list of things that unlock everything else, plus the things that will actually be needed in the first two weeks.
- The primary email account. This is the master key, because nearly every other account resets through it. Include which provider it is, the address, and how to get past the second login step.
- The password manager, not the passwords. If you use a vault, the file needs one credential instead of two hundred. Write down the master password, the vault provider, and where the recovery information is kept.
- The device passcodes. Phone, tablet, and computer. These are short, they change rarely, and without them a great deal of the rest is unreachable.
- An account inventory with no secrets in it. A plain list of which banks, insurers, subscriptions, vendors, and business systems exist. This part is safe to keep in more places because it contains no credentials.
- The people list. Attorney, accountant, insurance agent, banker, and whoever handles your technology. Half of what a family needs is a phone call to somebody who already knows the situation.
- Leave out anything that expires or embarrasses. No card numbers, no medical detail, no old grievances. The file should be usable by someone under stress, not a document they have to interpret.
The Second Step Is the Hard Part
Most people who build one of these files write down passwords and stop. Then the trusted person types the correct password and the screen asks for a six digit code from an app on a locked phone. That is multi factor authentication, which means a second proof of identity beyond the password, and it defeats more emergency access files than any other single thing.
- Print the backup codes. Every major service offers a set of one time use recovery codes when you turn on the second step. They work with no phone and no signal. Print them, put them in the file, and note which account each set belongs to.
- Name recovery contacts inside the platform. Apple lets you designate people who can read you a code to help you back into your own account. Google lets you set up Inactive Account Manager and name up to ten trusted people who can be notified and receive specific categories of data.
- Do not assume the password vault comes along for the ride. Apple’s Legacy Contact feature covers a lot, but Apple’s documentation specifically excludes iCloud Keychain, which is where saved passwords, passkeys, and payment information live. If your passwords are stored there, a Legacy Contact will not receive them.
- Use the vault’s own emergency access. Bitwarden, for example, lets you name a trusted contact and choose between view access and takeover access, with a waiting period you set during which you can reject the request. That combination of delay plus veto is exactly the right shape for this problem.
- Account for hardware security keys. If you use a physical key that plugs in or taps, register a second one and put it in the file. A single key is a single point of failure.
Where the File Actually Lives
This is where good intentions usually fall apart, because the two obvious answers are both worse than they look.
The safe deposit box feels like the right place and often is not. Under Chapter 151 of the Texas Estates Code, a decedent’s spouse, parent, adult descendant, or named executor may be allowed to examine the box in the presence of an officer of the institution that leased it, but only three categories of documents may actually be removed under that process: something that appears to be a will, burial related documents, and insurance policies. An envelope of passwords is not on that list. Your family may be permitted to look at your emergency file and not permitted to take it home.
Putting credentials in the will is worse. A will admitted to probate is filed with the court and becomes part of a public record, which is why estate attorneys generally advise against writing any live password into it. The will is the right place to say who has authority. It is the wrong place to store the secrets themselves.
What works in practice is a layered approach. Keep the actual secrets inside a password manager with emergency access configured, because that gives you encryption, a delay, and a veto. Keep a sealed paper copy of the handful of bootstrap items, the vault master password, the email backup codes, and the device passcodes, in a home safe that is fire rated and bolted down, and tell exactly one person where it is and how to open it. Keep the account inventory, which has no secrets in it, somewhere ordinary and easy to find, like a labeled folder with your other important papers.
Who Opens It, and How They Know It Is Time
The person who is best at technology is not automatically the right choice. Pick based on judgment, availability, and whether they will still be reachable in a hard week. Then make the trigger explicit, because ambiguity is what makes people hesitate exactly when speed matters.
- Write one sentence describing when to open it. Something as simple as a statement that the file may be opened if you are hospitalized and unable to communicate, or upon your death, removes a surprising amount of paralysis.
- Match the file to your legal documents. The person you name here should generally be the same person named in your power of attorney or your will, and your attorney should know that the file exists.
- Remember that an online setting can outrank paperwork. Section 2001.051 of the Texas Estates Code provides that a direction given through an online tool overrides a contrary direction in a will, trust, or power of attorney. If your vault names one person and your will names another, that conflict needs to be resolved on purpose rather than discovered later.
- Tell the person now. A perfectly built file that nobody knows about is the same as no file. One short conversation, and a note of where it is.
Keeping It True Six Months From Now
A stale file is worse than no file, because it sends someone down the wrong path with confidence. The maintenance load is small if you keep the file small.
- Put one recurring reminder on the calendar. Twice a year is plenty. Fifteen minutes each time.
- Update it whenever you change a device or a bank. New phone, new passcode. New bank, new entry. Those are the two changes that break files most often.
- Regenerate backup codes after you use one. Codes are single use, and a printed sheet with three crossed out is a sheet that may not work when it counts.
- Do one dry run. Hand the sealed envelope to your trusted person and have them try to sign into your email on their own computer while you sit there. You will find the gap in about four minutes, and it is always something you did not expect.
Bottom line: keep the secrets in a vault with emergency access turned on, keep a short paper bootstrap in a home safe, keep a secret free account inventory where anyone can find it, and tell one person the plan. That is the whole system, and it takes an evening. Again, this article is general information and not legal advice, and your own estate attorney is the right person to align it with your will, trust, and powers of attorney.
If you run a business, the same file needs a business version, covering the domain name, payroll, banking, and the systems your team touches every day. We help Denton County business owners build that and keep it current. Reach out at https://harrisonward.com/contact/.
Comments are closed