Password manager inheritance: where each one stops
Bitwarden and LastPass both offer emergency access: a named contact requests your vault, a waiting period runs, and access is granted unless you decline. 1Password has no equivalent feature and relies on a printed Emergency Kit. Each approach solves part of the problem.
How emergency access works
Emergency access is a timer with a veto. You nominate a trusted contact, they request access, and a waiting period you configured begins. If you do not decline before it elapses, access is granted automatically. It requires no death certificate and no third party.
The design is elegant, and its assumption is the important part: your ability to decline is what protects you. It works precisely as long as you are alive, alert, and able to check your notifications.
What each manager offers
Bitwarden offers emergency access on paid plans with two levels: View, which grants read access, and Takeover, which lets the contact set a new master password and take the vault permanently. LastPass offers a comparable feature with a configurable waiting period. 1Password offers no dedicated digital legacy feature.
| Manager | Mechanism | Where it stops |
|---|---|---|
| Bitwarden | Emergency Access on paid plans; View or Takeover; configurable wait | Takeover strips two-step login. One contact acting alone is sufficient. |
| LastPass | Emergency Access; named LastPass user; wait period up to 30 days | Contact must also be a LastPass user. One contact is sufficient. |
| 1Password | Emergency Kit — a printed PDF holding your Secret Key and sign-in address | A physical document. Whoever finds it has everything, immediately. |
Emergency access in Bitwarden and LastPass is a genuinely good feature and, for most people, better than nothing by an enormous margin. If you already pay for either, turn it on today. This page is not an argument against using them.
The three gaps they share
All three approaches share the same structural limits: a single person can act alone, no evidence of death is ever required, and access is granted to the entire vault rather than to the parts you intended for that person.
The single-actor property is the significant one. A timer with a veto assumes the veto works. If you are in hospital, travelling without signal, or simply not reading email, the waiting period runs down and access is granted — while you are alive and would have declined.
What a password manager is not built for
A password manager stores credentials for you to use daily. Inheritance is a secondary feature added to a product with a different purpose. It holds passwords well and holds context badly: which account matters, who should receive what, and what you wanted said.
That is the real division. A password manager answers “what is the password”. Inheritance also requires answering “who should have it, when, and how do we know the moment has come” — questions a vault built for daily use was never designed to handle.
How Legatus differs, and where it is worse
Legatus requires two of three nominees to confirm independently, administrative review of a death certificate, and a 72-hour hold. No single nominee can trigger a release, and each receives only what their role assigns. It is slower and more demanding than emergency access, deliberately.
Where Legatus is worse: it is a pre-launch service run by one person, it has had no third-party audit, and if it stopped operating your server-side contents would be unreachable. Bitwarden and LastPass are established companies with security teams and audit histories. That is a real advantage and it would be dishonest to omit it from a page like this.
The full list of what Legatus does not protect against is published rather than summarised here.
A reasonable combination
These are not mutually exclusive. Use a password manager for daily credentials with emergency access enabled, and a verified-release vault for the material where premature access would be serious — seed phrases, final instructions, documents meant for one person only.