How can heirs get access to accounts protected with 2FA

TidBITS Talk
1

We’ve set up 2FA for most of our accounts - banks, brokerage, and many others. But what’s helpful now seems to be a huge impediment when I die or become incapacitated. Wondering if anyone has come across solutions for allowing kids/heirs access to accounts protected by 2FA. I’m trying to figure out how I can circumvent that when that time comes. I’m using 1 Password (family) which gets me part of the way there, so the kids have passwords and usernames, etc. But that doesn’t solve the 2FA problem. Seems there’s very little written, at least that I can find. Anyone come across solutions? Thanks. Gary Macomber

2

If you use 1Password for the 2FA, it will be shared with them as well.

2 Likes
3

I screenshot the QR codes and print them. They are stored with other critical and confidential documents.

Presumably if I’m incapacitated they’ll also be able to access my iPhone, for which the instructions are also left with critical and confidential documents.

Kevin

2 Likes
4

I just make sure that our son knows the passcodes for our password managers, phones, laptops, and computers…with that he can get into everything. If I ever fully convert to 1PW v8 and move my 2FA stuff to there then he’ll have that as well since he has the master 1PW password and access to my family plan.

2 Likes
5

For my “bucket file” document that includes my passwords, I include a printout of a QR code containing all of my 2FA keys. I had Google Authenticator export them all, generated a screen-shot of the code, and pasted it into the document.

WRT Apple’s 2FA, my iPhone and Macs all auto-sign-in to my Apple ID, so all can generate 2FA codes. Since my passwords/passcodes for these devices are in the bucket file, my heirs will have access.

6

I hadn’t considered printing out the QR codes, but I keep all my 2FA keys with 1Password 7. My spouse would have access if I go first.

You’re right to think about this, @gary.macomber.mn , because the procedures for granting access to survivors and next of kin are typically so onerous that no one in their right mind would pursue them except for the critical accounts like financial stuff. I’ve spent enough time producing death certificates and fiduciary letters over the past 5 months to know that while it’s a key to access, it’s an unwieldy one.

My favorite has been Xfinity, who transferred my late mom’s Internet account to the estate in July after I produced the appropriate papers. When I closed the account last week, the associate wanted to see those papers all over again even though the account was now in the name of the estate. I wouldn’t have thought it was funny except that (1) they knew they were looking at “The estate of…” on their screen, but (2) they still asked me if I was one of them.

7

Thanks for the insight. Clearly is striving to get to the bottom of the pack!

Gary

8

Thanks - good suggestions, all.

Gary

9

Thanks very much for the good suggestions

Gary

10

Thanks for responding to my question. Lots of useful suggestions so far

Gary

11

As several of you knew, but I clearly didn’t. Thanks much

Gary

1 Like
12

I have found the new password sharing in the latest Apple OS to be perfect, especially now that you can include authenticator codes saved with the passwords. Normally Safari offers to fill in the authenticator code when you are signing in. Occasionally it fails to do so, but you can look in passwords and see the current authenticator code.

I have used this successfully to share passwords with the consultant who keeps the website going for an organization that I’m involved with.