Update: my password manager setup broke after a family member clicked a fake email

Last Tuesday my aunt texted me saying her bank account got locked after she clicked a link in a text about a package delivery. She thought it was fine because it had her name and zip code in the message. I spent two hours helping her reset everything, then realized my own 2FA codes were stored in the same password manager app that she also used on her phone. That's when it hit me: the real issue was I had her on the same shared family vault plan without separate recovery codes written down somewhere physical. I moved her to a basic paper backup sheet and turned on hardware key for my own login. Now I'm asking everyone in my family to use a different app than I do, just in case one of us gets tricked. Has anyone else run into this problem where shared password tools become a single point of failure for the whole household?

1 comments

1 Comment

the_miles17d ago

oh man, I feel this so hard. Our whole family had the same setup through a shared vault and my dad fell for one of those fake invoice emails, took us a whole weekend to sort out who had access to what. I ended up doing the same thing, everyone gets their own app now, and I keep my recovery codes taped inside a kitchen cabinet, kinda paranoid but whatever works.