Glossary

Plain definitions for the words you'll run into while organizing a digital life, yours or a parent's.

Laws and company policies change. We check these definitions regularly, and nothing here is legal or financial advice. Last reviewed: October 2026.

Password manager

An app that stores your passwords in one encrypted vault, such as 1Password, Bitwarden or the one built into your phone. You remember one master password; the app remembers the rest. In a legacy plan, it's often the single most useful thing a trusted person can know about.

See also: Master password, Account inventory

Master password

The one password that unlocks a password manager. If it's lost, most password managers can't recover it for you, so its location deserves a careful place in your plan, such as a sealed note in a safe.

Two-factor authentication (2FA)

Also called two-step verification or multi-factor authentication.

A second step after your password, like a code sent by text or shown in an app. It keeps strangers out, but it can also lock out a family member who has the password and not the phone.

See also: Authenticator app, Backup codes

Authenticator app

An app that shows a new six-digit code every 30 seconds for logging in, such as Google Authenticator, Microsoft Authenticator or Authy. The codes live on that one phone, so if the phone is lost or locked, the codes go with it unless backups were set up.

Backup codes

A short list of one-time codes a website gives you when you turn on two-factor authentication, for use when your phone isn't available. Print them or save them in a password manager, and note where they are, never the codes themselves, in your plan.

Recovery email and recovery phone

The backup email address or phone number a company uses to reset your password or confirm it's really you. An old recovery email nobody checks anymore is a common reason families get stuck.

Passkey

A newer way to sign in without a password, using your face, fingerprint or phone PIN. Passkeys are tied to your devices and the account that syncs them, so a family member usually needs access to those, not a password.

See also: Face ID and fingerprint login

Face ID and fingerprint login

Unlocking a phone, computer or app with your face or fingerprint. Convenient for the owner, but nobody else can use it, so the device's passcode still needs a known, safe location.

Recovery phrase

Also called seed phrase.

A list of 12 or 24 words that restores a cryptocurrency wallet. Anyone with the phrase can take the funds, and without it they may be gone for good. Never write it in a legacy plan; note only where it's stored.

Phishing

A fake email, text or call that pretends to be from a bank, company or relative to get passwords or money. Scammers often target families right after a death, when people are busy and expecting official messages.

SIM swap

A scam where someone convinces a phone carrier to move your number to their phone, so they receive your text-message codes. A carrier account PIN, and using an authenticator app instead of texts where possible, makes this harder.

Ready to put it into practice? The book and the Legacy Map walk you through each of these step by step.

See the guides