List the accounts that matter

Most of us have dozens of online accounts, but only a handful are essential for a family to know about.

  • Included: Your primary email account (it is often the key to resetting everything else)
  • Included: Mobile number and the SIM provider — many recovery codes are sent by SMS
  • Included: Banking apps and UPI apps you use
  • Included: Cloud storage and photo libraries
  • Included: Social media accounts and how you would like them handled
  • Included: Subscriptions that charge you regularly
  • Included: Work accounts your employer would need to be told about

Do not store passwords in ordinary notes

Our Sandook deliberately does not collect passwords, PINs, master passwords or recovery codes. Keeping them in notes, messages or spreadsheets puts them at risk.

If you want someone to be able to access accounts in future, consider a reputable password manager that offers an emergency-access or sharing feature, and the account recovery or legacy-contact options that some large providers offer. Read each provider's terms, because these features and their rules vary.

Write recovery instructions, not secrets

A useful recovery note says what exists and how to approach it — for example, “my password manager has an emergency-access contact set up for my sister” or “the family photo library is shared with my spouse”. It never contains the secret itself.

Protect the essentials

Turn on two-step verification for your main email and banking, keep your phone number current with each provider, and review connected devices from time to time.