Dead man's switch vs password manager: do you need both?

Do you need both a password manager and a dead man's switch?

For most people, yes. A password manager keeps your logins organised, generates strong passwords and fills them in. It is built for daily use by you. PostMortem is not a password manager: it does not autofill or sync your logins.

A dead man's switch is built for the moment you can no longer act. It holds what you prepared for other people and releases it only when you stop checking in: a letter, instructions, a few files and, if you choose, a short list of credentials. The two overlap only on that last point, and even there they trigger very differently. The real question is what each should hold and which trigger you want for each kind of information.

How emergency access in password managers works

Several password managers offer a trusted-contact feature, but the details differ, and some well-known products have none. Here is what their own documentation describes.

Bitwarden Emergency Access: you invite a trusted contact who also needs a Bitwarden account, choose view or takeover access and a wait time of at least one day. When the contact requests access you are notified and can approve or reject it; if you do nothing, access is granted after the wait time. View is read-only access to your individual vault, including logins and attachments. Takeover lets the contact set a new master password, which also removes your two-step login methods. Bitwarden documents this as part of its paid individual plans.

Keeper Emergency Access: you can name up to five trusted contacts, each with a Keeper account and a sharing relationship with you, and set a delay per contact from immediate up to three months. The countdown starts when the contact attempts to log in to your vault; if you do not revoke the request before it ends, they get in. Keeper describes it as available on its consumer plans.

1Password: as of this writing, 1Password has no emergency access timer. A long-running feature request exists on its community forum, and staff have said they have nothing new to share. The documented options are manual: keep your Emergency Kit (Secret Key and account password) somewhere safe such as with your will, with instructions for your executor; or on a family plan, rely on a family organizer who can help recover accounts.

Dashlane: its help centre states that the previous emergency contact feature was only available in a desktop app it no longer offers. The suggested approach is manual: export your vault as an encrypted file and share the file and its password separately, for example via a Secure Note shared with a contact who also has a Dashlane account.

Where emergency access exists, it is a request-and-wait mechanism: your contact asks, you get a chance to say no, and if you stay silent the vault opens. Where it does not exist, you are back to paper and instructions.

What password manager emergency access doesn't cover

Emergency access does one thing: it lets a trusted person into your vault. That leaves gaps.

• The trigger is a request plus a wait, not inactivity

  Nothing happens until your contact knows to ask and logs in to request access. If they never request, the vault stays closed. A dead man's switch is driven by your own silence: stop checking in and it releases on its own.

• Recipients need an account with the same product

  Bitwarden and Keeper require the trusted contact to have an account on their service, and Dashlane's workaround relies on a shared note. A parent who has never used a password manager must sign up, accept an invitation and understand the request flow, often at a stressful time.

• Messages, letters and context

  A vault is a list of logins, not the place for a goodbye letter, an explanation of why an account matters, or the order in which things should be handled.

• Files and records for specific people

  Emergency access grants the whole vault to one person. It is not designed to give one document to your sister, another to your business partner, and a letter to your children.

• Things that are not accounts

  Where the spare key is, which debts exist, which subscriptions to cancel, how to reach your accountant. None of that is a login.

Where Google Inactive Account Manager and Apple Legacy Contact fit

Google Inactive Account Manager is the closest thing a large platform offers to a dead man's switch. You choose an inactivity period, name trusted contacts and decide which Google data they can download. Google warns you before acting, contacts are only notified once the account has been inactive for the chosen period, and they must verify a phone number before downloading. It covers Google data only.

Apple Legacy Contact lets a person you name request access to your Apple Account data after your death. Per Apple's support documentation they need both the access key you generated and your death certificate. Access can include photos, messages, notes, files and device backups, but not purchased media or subscriptions, and not anything in iCloud Keychain, so passwords, passkeys and payment information are excluded by design.

Both are worth switching on. Neither covers accounts outside its own ecosystem or delivers a message in your own words, and Apple's is tied to a death certificate, so it does nothing if you are alive but incapacitated.

How a dead man's switch works

A digital dead man's switch inverts the trigger. Instead of waiting for someone to ask, it waits for you to go quiet. In PostMortem you create message boxes, each with a check-in interval: daily, weekly, monthly or custom. You check in with one tap in the app, reminders arrive by email and push, and checking in resets every active box at once.

As the interval runs down, PostMortem reminds you by email and push notification at about 60%, 70%, 80% and 90% of the interval, with the last one marked as final. If it runs out without a check-in, the box is released: each recipient gets an email with a link to a recipient page on the web, and you are emailed too. Recipients who do not open the box get a reminder every 14 days, up to 12 times.

A box can hold up to three text messages, login credentials, up to five file attachments (images, PDFs, documents and audio, 20 MB each), financial records such as debts, obligations or assets you want known, and one or more recipients identified by name and email. Recipients do not need a PostMortem account.

Messages, credentials, files and debt details are encrypted on your phone before upload with a personal access key you generate and save to your photo gallery; box names, recipient emails and the check-in schedule are not. To decrypt a released box, a recipient needs the access key card you shared with them in advance. A test box on an hourly interval, addressed to a +postmortem_test alias of your own email, lets you watch a release end to end. PostMortem is free on iOS and Android with no paid tier today.

Side by side: emergency access vs dead man's switch

Request-and-wait emergency access (Bitwarden, Keeper) against a check-in based dead man's switch (PostMortem), with the manual options noted.

• Trigger

  Emergency access: a contact requests, you are notified, and access opens after a wait unless you reject it. 1Password and Dashlane: someone must find your kit or exported file. Dead man's switch: you stop checking in and the interval runs out; nobody has to ask.

• What can be shared

  Emergency access: the vault as one bundle, including notes and attachments where supported. Dead man's switch: per-box text messages, credentials, files, financial records and instructions, addressed to specific people.

• Do recipients need an account?

  Bitwarden and Keeper: yes, on the same service. Dashlane's workaround: yes, for the shared note. 1Password Emergency Kit: no account, but the physical kit and your account password. PostMortem: no account; recipients open the box on the web with the access key card you gave them.

• Encryption and who holds the keys

  Password managers are end-to-end encrypted around your master password, with emergency access handled by the service's key sharing between accounts. PostMortem encrypts messages, credentials, files and debt details on your phone with a self-managed personal access key, and the recipient's key card unlocks a release.

• Cost

  Bitwarden and Keeper document emergency access on their paid plans. 1Password and Dashlane are paid products with manual approaches. Google and Apple's features are free with the account. PostMortem is free with no paid tier today.

• Incapacitated vs dead

  Emergency access works in either case as long as a contact requests it. Apple Legacy Contact requires a death certificate, so it does not help with incapacity. Google Inactive Account Manager and a dead man's switch react to inactivity, so they fire whether you have died, are in hospital, or simply stopped responding, which is why reminders and a sensible interval matter.

When to use which

• A password manager for every login you use while alive

  Strong unique passwords, autofill and sync are its job.

• Your password manager's emergency access, if it has one

  If you use Bitwarden or Keeper and your trusted person is willing to hold an account, set it up. The wait time protects you from an early request.

• Google and Apple's features for their own ecosystems

  They are free and cover photos, mail and files a password manager does not hold. Apple's excludes passwords and requires a death certificate.

• A dead man's switch for what must arrive without being asked for

  Personal messages, instructions, which debts and assets exist, the handful of credentials that unlock everything else, and anything meant for someone who will never sign up for a password manager. PostMortem also lets you decide per box whether recipients are told in advance.

How to combine a password manager with PostMortem

Treat the password manager as the source of truth and the dead man's switch as the key to it. You do not duplicate hundreds of passwords; you hand over the few things needed to open the door.

Create a PostMortem box for the person who will handle your affairs. In the login credentials section, add your password manager's master password and, if it uses one, the Secret Key or recovery code. For 1Password that is your Emergency Kit, which you can also attach as a PDF. For Dashlane, attach the exported encrypted vault file and put its password in the credentials. For Bitwarden or Keeper, include the master password as a fallback in case the emergency access request is never made, and note how to request it.

Add the credentials for your primary email account, since most recovery flows go through it, and note any two-factor method the recipient will need. Write a short text message explaining what the box contains and in what order to use it, and add financial records for debts and assets you want known.

Share the access key card with that recipient in advance, run the test box once, then choose an interval you will actually keep up with. Finally, keep a plain note in your password manager saying a PostMortem box exists and who the recipient is, so whichever tool your family reaches first leads them to the rest. This is general information, not legal advice; whether these arrangements satisfy your will or local inheritance rules varies by country and state.

Frequently asked questions

• Is a dead man's switch a replacement for a password manager?

  No. A password manager is for the passwords you use every day. A dead man's switch releases prepared information to other people when you stop checking in. PostMortem can hold a few login credentials, but it is not a password manager.

• Does 1Password have emergency access after death?

  As of this writing, 1Password does not offer an automated emergency access or legacy contact feature. Its documented advice is to store your Emergency Kit securely, for example with your will, with instructions for your executor. On family plans, a family organizer can help recover another member's account.

• How does Bitwarden Emergency Access work?

  You invite a trusted contact with a Bitwarden account, choose view or takeover access, and set a wait time of at least one day. When the contact requests access you can approve or reject it; if you do nothing, access is granted after the wait time. Bitwarden documents it as part of its paid individual plans.

• How is Keeper Emergency Access different?

  Keeper lets you name up to five trusted contacts, each with a Keeper account, and set a delay per contact from immediate up to three months. The countdown starts when the contact tries to log in to your vault, and you can revoke the request before it ends.

• Does Apple Legacy Contact give access to my passwords?

  No. According to Apple's documentation, a Legacy Contact can access data such as photos, messages, notes, files and backups, but not anything in iCloud Keychain, which includes passwords, passkeys and payment information. The contact also needs your access key and a death certificate.

• What is the difference between Google Inactive Account Manager and a dead man's switch?

  Both react to inactivity rather than a request. Google's feature covers only your Google account data and notifies your chosen contacts after the inactivity period you set. A dead man's switch like PostMortem is independent of any platform, lets you write messages and attach files for specific people, and uses regular check-ins with reminders.

• What is the best way to share passwords after death?

  Keep passwords in a password manager, enable its emergency access if it has one, and put the master password, any Secret Key or Emergency Kit, and your email login into an end-to-end encrypted dead man's switch box addressed to the person who will handle things. Share the access key with them in advance and test the release once. This is general information, not legal advice.