Feature guide · Premium · Updated 2026

Bitwarden Emergency Access — set up a trusted contact for vault recovery

Bitwarden Emergency Access is the feature you set up before you need it. A trusted contact — your spouse, a sibling, your estate executor — can request access to your vault if you become unreachable. They wait the period you configured (a day, a week, a month, your choice), then either get a read-only view or full ownership of the vault, depending on what you granted. This page walks through exactly how to set it up, how the cryptography stays sound while still allowing recovery, and the trade-offs versus a paper-in-a-safe approach.

What Emergency Access is

Emergency Access is a vault-recovery mechanism Bitwarden ships for Premium users. The mental model: when you forget your master password, lose your phone, become incapacitated, or die, somebody you trust can recover what's in the vault without Bitwarden, Inc. holding any backdoor.

Concretely: you nominate a "Trusted Emergency Contact." That contact must already have a Bitwarden account. They can submit a request to access your vault at any time. The request triggers a notification to you and starts a timer — the wait time you configured. If you respond and reject the request before the timer expires, nothing happens. If you don't respond, the request gets approved automatically and your contact gets the access level you granted (view or takeover).

This is how every recovery story should work: the holder of the recovery option has a delay built in, the original account-holder gets a chance to veto, and the vendor (Bitwarden) is not the trusted party — your nominated contact is.

Why everyone should set this up

Three honest reasons:

You will forget your master password. Maybe not this year, maybe not in five years, but the median Bitwarden user uses the vault for over a decade and at some point a master-password reset becomes useful — moving to passphrase, post-stress-event memory failure, head injury, whatever. Without Emergency Access or a written master, the vault is irrecoverable.

You will become unreachable at some point. Hospitalisation, a long trip without internet, an unexpected death. The credentials in your vault — your phone bill auto-pay, your bank, your kids' school portal — keep mattering even when you're not there. Whoever inherits or stewards your digital life needs a documented path in.

The cryptographic alternative is worse. Without Emergency Access, the only ways to give a trusted contact future vault access are: share your master password (terrible idea, breaks the entire security model), hand them a written-down master in a sealed envelope (works but stops being current the day you change the master), or hope they can guess it (no). Emergency Access gives a clean cryptographic path that doesn't require sharing a secret.

Requirements

The setup needs:

• You have Bitwarden Premium. Family plans include Premium for all six members. Self-hosted users get Emergency Access via free Premium licence on their instance.
• Your trusted contact has a Bitwarden account. Free is fine — they don't need Premium themselves to receive access. They do need their own master password and 2FA so the inheritance has a real recipient identity.
• You both verify each other\'s email addresses. The invitation flow runs over email confirmation; expect a few minutes for round-trip.
• You\'re comfortable nominating someone. This isn\'t the technical part but it\'s often the blocker — pick someone who has both the trustworthiness and the technical ability to actually use the feature when needed.

View-only vs takeover

	View	Takeover
Can read vault items	Yes	Yes
Can copy passwords	Yes	Yes
Can change vault	No	Yes
Can change master password	No	Yes — assumes ownership of the account
Original owner keeps access	Yes	No — locked out after takeover
Best for	Backup recovery, family sharing	Estate executor, true incapacitation

Default to view-only for almost every scenario. If you forget your master password, view access is enough — your contact reads you the password for the bank, you log in, you reset the master, life goes on. Takeover is for the genuinely terminal case: you've died, you're permanently incapacitated, the vault belongs to the estate now.

You can configure both: one contact with view-only at a 7-day wait (your spouse, for routine recovery), another with takeover at a 90-day wait (your executor, for the worst case).

Wait time — picking the right delay

The wait time is the period between your contact's request and automatic approval. You can pick from 1 day to 90 days. Two failure modes to balance:

• Too short: a single-day wait means an attacker who compromises your contact\'s Bitwarden account can use your contact to take over yours within 24 hours. Bad.
• Too long: a 90-day wait means in a real emergency (you\'re hospitalised, family needs your bills paid), three months of waiting for the bank login is unworkable.

Practical defaults:

• Spouse / household partner with view-only: 7 days. Long enough to detect a compromised contact account, short enough to handle real emergencies.
• Adult child or sibling with view-only: 14 days.
• Estate executor with takeover: 30–90 days. The legitimate use case is post-mortem; the wait should be long enough that you, if alive, will definitely notice.

You\'ll get an email at every step — request submitted, approaching deadline, auto-approved — so a normal life event won\'t leave you blindsided.

Step-by-step setup

1. Sign in to vault.bitwarden.com with your Premium account.
2. Top-right account menu → Settings → Emergency Access.
3. Click Add emergency contact.
4. Enter the email address of your trusted contact (must already have a Bitwarden account).
5. Choose View or Takeover.
6. Set the wait time. 7 days is a sane default for view, 30 for takeover.
7. Click Save. Your contact gets an invitation email.
8. Your contact accepts the invitation in their Bitwarden account.
9. Back in your settings, click Confirm next to their pending entry. This is the cryptographic step — your client encrypts a copy of your vault key for them.
10. Done. Their entry now shows Confirmed.

Repeat for each contact. Most users have one or two; if you have more than three, you\'re probably spreading the trust thinner than is helpful.

How recovery actually works

From your contact\'s side, when the actual emergency happens:

1. They sign in to their own Bitwarden account.
2. Top-right → Settings → Emergency Access.
3. Find your name in their Granted to me section.
4. Click Request access. They confirm.
5. You receive an email titled "Emergency access request from [name]" with two buttons: Approve now and Reject.
6. If you reject within the wait period, the request closes and nothing happens.
7. If you approve, access activates immediately.
8. If you do nothing, access activates automatically when the wait period ends.
9. Your contact, once active, sees a button Take over or View vault in their Emergency Access page. They click it and now have the granted level of access.

Reject explicitly if a request comes through that wasn\'t expected — that\'s the entire purpose of the wait period.

How the encryption stays sound

Most "give someone backup access to my account" features end up requiring the vendor to escrow keys somewhere. Bitwarden\'s Emergency Access doesn\'t — and it\'s worth understanding why, because the cryptographic property is what makes the feature trustworthy rather than a slogan.

When you confirm a contact, your Bitwarden client takes your vault key (the symmetric AES key derived from your master password), then encrypts it with your contact\'s public RSA key (which Bitwarden stores in the clear because it\'s a public key). The encrypted blob lives on Bitwarden\'s server. Bitwarden\'s server can\'t decrypt it — they don\'t have the private key. Your contact has the private key (encrypted with their own master password). When access is granted, your contact\'s client downloads the blob, decrypts it with their private key, and recovers your vault key — at which point they can decrypt the rest of your vault contents.

The implications:

• Bitwarden, Inc. cannot read your vault even with Emergency Access set up. The escrow is encrypted under your contact\'s key, not theirs.
• If your contact loses their master password, they can\'t access the granted vault any more either. They lose access to everything when they lose their own master.
• If you change your master password, the vault key stays the same — Bitwarden re-wraps the vault key with the new master-derived key, but your contact\'s wrapped vault key blob doesn\'t need to change. Your contact still works.
• If you remove the contact, the wrapped blob is deleted. They can\'t use a future request to access your vault.

Alternatives if Emergency Access doesn\'t fit

Two practical alternatives if you can\'t or won\'t use Emergency Access:

Sealed-envelope master password. Write your current master password on paper, seal it in a tamper-evident envelope, store with your other essential paperwork (passport, deed, will). Update when you change the master. Trades cryptographic elegance for sheer simplicity. The failure mode is the envelope being read in advance — an attacker with physical access to your home defeats this. Acceptable for many threat models.

Encrypted JSON backup with separate file password. Run a routine encrypted JSON export (we recommend monthly), share the file password with your trusted contact via a separate secure channel, store the export file in a place they can access (cloud storage with appropriate sharing). They get a snapshot rather than live vault access — works for inheritance, less ideal for "you forgot your master and need to log into the bank today."

Best practice: do both. Emergency Access for live recovery, plus an annual encrypted export with a sealed file password. Belt and suspenders, low effort, transformatively better than nothing.