LegacyPass™

The accounts your family
cannot find.

LegacyPass is where you write down the logins your executor will need — and decide, account by account, who receives them and whether that happens now or after you are gone.

Open LegacyPass
Share with accepted contactsNow or after my passing

What goes missing when nobody has the password

Locked out forever

Email, photo libraries, and cloud storage are usually unreachable without the password. Recovery flows send codes to a phone nobody can unlock.

Subscriptions nobody can cancel

Recurring charges keep drawing on an estate until someone can get into the account that authorized them.

Profiles left standing

Social accounts stay live indefinitely when no one has the credentials to memorialize or close them.

How LegacyPass works

LegacyPass is a record of account access, organized so the right person can be handed the right entry. It is deliberately simple, and we would rather be precise about it than imply capabilities it does not have.

What it does

  • Records an account's service, username, and password through a three-step form
  • Captures notes about two-factor authentication and where backup codes live
  • Shares an entry with trusted contacts who have accepted your invitation
  • Sets each share to take effect now or after your passing
  • Reveals a stored password to you when you need to read it back
  • Deletes an entry whenever you want it gone

What it does not do

  • It does not encrypt your stored credentials
  • It does not edit an existing entry — delete and re-add instead
  • It does not fill passwords into websites or browsers
  • It does not generate passwords or score their strength
  • It does not monitor accounts for breaches

How your credentials are stored

We would rather tell you this plainly than let a padlock icon imply something stronger. Passwords saved in LegacyPass are encoded for storage and transport, not encrypted. There is no separate master password that only you hold, and no cryptographic key that would stop Legacy Suite from reading an entry.

Treat LegacyPass as a well-organized, access-controlled record rather than a cryptographic vault — the same way you would treat a sealed document held by a professional. It is the right place for the account list your executor needs. For a secret whose exposure would be catastrophic on its own — a seed phrase, a key that controls significant funds — use dedicated key-management tooling and record only where to find it here.

Read our security page
In the product

Built around one question: who gets this, and when?

Per-entry recipients

Each account is shared with the trusted contacts you choose. Your spouse can hold banking access while someone else handles the photo library.

Now, or after your passing

Every share carries a timing choice. Some access is useful immediately; the rest is marked to be released as part of settling your estate.

Two-factor notes

A password is rarely enough on its own. Record which app or number produces the codes and where the backup codes are kept.

Any account you can write down

LegacyPass does not integrate with providers, so it is not limited to them either. If you can note the service, username, and password, it belongs here.

EmailDevice and platform IDsSocial accountsBanking and brokerageUtilities and subscriptions

How it works

Invite the people you trust, record the account, decide when they get it.

Step 01

Invite your trusted contacts

Acceptance first: Sharing works only with contacts who have accepted your invitation. Accepted contacts are the only people who appear in the share picker, so nothing is ever sent to an address that never agreed to hold it.

Invitation accepted

Now available in your share picker

Step 02

Add the account

Three steps: Enter the credentials, note how two-factor authentication works for that account, and choose who it is shared with. The entry is saved when you finish the form.

1

Account saved

Credentials, 2FA notes, recipients

Step 03

Set the timing

Now or later: Mark each share as available now or after your passing. Access marked for after your passing is released through the reviewed claim process your executor goes through, not by an automatic timer.

Questions about LegacyPass

Including the ones about how credentials are actually stored.

LegacyPass is where you record the account logins the people handling your estate will need, and decide who receives each one. Every entry carries its own list of recipients and its own timing, so access is granted account by account rather than all at once.
No, and we would rather say so directly. Passwords in LegacyPass are encoded for storage and transport, not encrypted. There is no master password held only by you and no cryptographic key preventing Legacy Suite from reading an entry. Treat it as an organized, access-controlled record rather than a cryptographic vault.
The account list your executor would otherwise have to reconstruct from scratch — email, utilities, subscriptions, social profiles, and the everyday services that quietly keep running. For a secret whose exposure would be catastrophic on its own, such as a seed phrase or a key controlling significant funds, use dedicated key-management tooling and record only where to find it here.
Adding an account is a three-step form. First the credentials — service, username, password. Then notes on how two-factor authentication works for that account. Finally, the trusted contacts you want to share it with.
No. There is no update operation, so a saved entry cannot be changed in place. When a password changes, delete the old entry and add a new one. It is worth knowing this before you start, because it affects how you keep the list current.
Only trusted contacts who have accepted your invitation. Someone you have invited but who has not yet accepted will not appear in the share picker, so credentials are never sent to an address that has not agreed to receive them.
Every share carries a timing choice. Access marked as available now can be used immediately, which suits a spouse who already shares the account. Access marked for after your passing is intended for the estate process and is released through the reviewed claim your executor completes.
No. Nothing is released automatically by a countdown or a missed check-in. Access marked for after your passing is granted through Claim Property, where a person reviews the death certificate and supporting documents your executor uploads.
Yes. Entries can be revealed when you need to read a credential back, so LegacyPass stays useful day to day rather than being a write-only archive.
No. There is no browser extension or autofill, and no password generator or strength scoring. It records account access for inheritance purposes rather than competing with a day-to-day password manager.
Because a password alone frequently is not enough to get in. If codes arrive on a phone nobody can unlock, the credential is useless. Noting which app or number produces the codes, and where backup codes are kept, is often the difference between access and a dead end.
It is removed, along with the shares attached to it. Deleting is also how you replace a credential that has changed, since entries cannot be edited after creation.
Yes, and this one is a genuine security control. Legacy Suite supports phone-based multi-factor authentication on your account through Firebase, so signing in can require a code sent to your phone in addition to your usual method. It is worth enabling.

Write down what your
executor will need.

Start with the five accounts that would cause the most trouble if nobody could reach them. The rest can follow.

Open LegacyPass