Password manager and the kill-switch: a 30-minute setup

Why a kill-switch is different from a will

A testament tells a notaris what should happen with your estate. A levenstestament gives a gevolmachtigde authority to act for you while you are alive but unable. Neither can log in to your iPhone, your Google account, or your password vault. Tech companies need their own permission, given by you, in their own systems, before the death certificate is in anyone's hand.

The result: people who leave a clear will and a sealed envelope of paper documents can still leave nabestaanden (next of kin) locked out of every photo, every email, every saved login. The fix takes minutes per platform.

Mechanism 1 — Apple Legacy Contact

Apple's Legacy Contact, available on iOS 15.2 and later, lets you name one or more people who can access most of your Apple Account data after your death.

What it transfers. Photos, messages, notes, files, and device backups stored in your Apple Account, plus contact information and other data Apple lists in its support article.

What it does not transfer. Movies, music, books and subscriptions purchased through your Apple Account, and anything stored in your iCloud Keychain — including saved passwords, passkeys, and payment methods. Those die with the account.

How to set it up (about 5 minutes).

1. On iPhone or iPad: Settings -> your name -> Sign-In & Security -> Legacy Contact.
2. Add a contact (Family Sharing or Contacts). Authenticate with Face ID, Touch ID, or your passcode.
3. Apple generates an access key. Share it via iMessage, or print it.
4. Confirm where you have stored the printed key (and tell the contact where to find it).

After your death, the Legacy Contact uses that access key plus a death certificate to request access from Apple.

Mechanism 2 — Google Inactive Account Manager

Google's tool is built around inactivity, not a death certificate. You decide how long Google should wait before treating your account as inactive, and what should happen next.

What it transfers. You choose, per Google service: Gmail, Drive, Photos, YouTube, Blogger and others. You can also instruct Google to delete the account once the inactivity period ends.

Trusted contacts. You can name up to ten. Each one needs a phone number, which Google uses to verify identity before sharing data.

Default if you do nothing. Google reserves the right to delete a Google Account that has been inactive across all Google services for at least two years.

How to set it up (about 10 minutes).

1. Go to myaccount.google.com/inactive.
2. Set the inactivity timer (Google warns you before the timer expires).
3. Add up to ten trusted contacts with phone numbers and choose which data each one receives.
4. Optionally, set the account to delete after the period ends.

Mechanism 3 — Password manager emergency access

A password manager is the most important kill-switch of the three, because it carries every other login. Two of the most-used in the Netherlands offer formal emergency-access flows.

1Password — Emergency Kit. 1Password generates a one-page Emergency Kit (PDF) for each account. It includes the sign-in address, your account email, your unique Secret Key, a setup QR code, and a space for your master password. 1Password recommends printing it, writing in your master password, and giving a copy to someone you trust — for example a spouse or someone named in your will. There is no automatic time-delay process; whoever holds a complete Kit can sign in.

Bitwarden — Emergency Access. Available to Premium users (including Families/Teams/Enterprise plans). You invite a trusted contact (who needs a Bitwarden account on the same server), they accept within 5 days, you confirm by checking the fingerprint phrase. You then choose:

• View access: read-only — they can see all vault items, passwords, and attachments but cannot change anything.
• Takeover access: they can set a new master password and take over the vault.

You also set a wait time — minimum one day — before access is granted automatically, unless you approve sooner.

How to set it up (about 10 minutes).

1. Open your password manager's settings -> Emergency Access (Bitwarden) or Emergency Kit (1Password).
2. Choose one or two trusted contacts.
3. For Bitwarden: send the invitation, confirm acceptance, set a wait time, choose View or Takeover.
4. For 1Password: print the Emergency Kit, write in the master password by hand, store it where the contact can reach it.
5. Tell the contact what is in place and what they would need to do.

Mechanism 4 — The fallback list

Not everything has a Legacy Contact button. Bank apps, government portals, smaller subscriptions, your domain registrar, your phone provider — they each have their own form. The simplest fallback is a single, short, written document that says where everything is. Not a list of passwords (the password manager holds those). A list of what exists.

A 5-minute fallback list:

• Primary email address and recovery email/phone.
• Phone number, mobile provider, location of the SIM PIN.
• The password manager you use, and where the recovery information lives (1Password Emergency Kit, Bitwarden master password, etc.).
• The platforms where you have set up Apple Legacy Contact / Google Inactive Account Manager / Facebook Legacy Contact.
• Bank(s), and whether any are joint (en/of-rekening) with someone else.
• One sentence on what matters most (the photos, the documents in Drive, the Notes app) so that the trusted person knows where to start.

Print it. Tell the right person where it is. Update it once a year.

What the 30 minutes look like

Half an hour, once. After that: a yearly check, and an update whenever you change a primary email, switch phones, or change password manager.

A note on Consumentenbond reviews

Consumentenbond (the Dutch consumer association) regularly reviews password managers and rates them on usability, security, and support for features such as emergency access. [Specific current rankings of 1Password vs Bitwarden in Consumentenbond's most recent test — unverified, check the latest Consumentenbond wachtwoordmanager test before choosing.] Both products have been available in the Netherlands for years and both are widely used.

Plan it

• ☐ This week: set up one of the three native tools (Apple Legacy Contact, Google Inactive Account Manager, or your password manager's emergency access).
• ☐ Same session: add one emergency contact.
• ☐ Write it down: where the recovery codes physically live.

When I set this up, I will tell the one person who needs it that it exists and where the recovery materials are.

In the app

In the Personal Portal you record which kill-switches you have set up, who the trusted contacts are, and where the recovery materials (Apple access key, 1Password Emergency Kit, Bitwarden invitation, fallback list) live. The app reminds you to revisit the setup once a year and after any major change — new phone, new email, new password manager.

Join the beta ->

Closed beta — access by invitation.

Sources

1. Apple Support — Add a Legacy Contact for your Apple Account. Scope of access (photos, messages, notes, files, backups), exclusions (Keychain passwords/passkeys, purchased media), setup steps. https://support.apple.com/en-us/102631
2. Google Help — About Inactive Account Manager. Up to ten trusted contacts, phone-number verification, choice of data per service, two-year inactivity default. https://support.google.com/accounts/answer/3036546
3. 1Password Support — Emergency Kit. Contents (Sign-in address, Secret Key, account password field, setup QR), recommendation to share with a trusted person. https://support.1password.com/emergency-kit/
4. Bitwarden Help — Emergency Access. Premium-only feature, 5-day invitation window, View vs Takeover access, minimum 1-day wait time. https://bitwarden.com/help/emergency-access/
5. Consumentenbond — Wachtwoordmanagers (background reference for NL-market reviews of password managers). https://www.consumentenbond.nl