See Passwords in Family Account

I plan to switch to a family account and also manage and share the passwords of my wife and daughter.
Currently we have all passwords in one KeePass database.

Now my daughter wants to have her “own” password vault.
But we parents want to see what services she is using (to see if she is using some dangerous services).

When I convert my account to a family account, I understood that I can share my passwords with my family and my wife and daughter can add their own passwords.
Can I set up that I see all passwords my daughter adds?
Can she turn this feature off?

The reason why I am asking this is:
If she can turn this feature off, she can register at “dangerous” services I will never see it.
I know that she can write down the passwords in other apps or papers, but I want to encourage her to use Bitwarden (for security reasons).

I am pretty sure Bitwarden doesn’t allow an admin to monitor or observe the personal passwords of individual users. It just doesn’t sound right to me. Passwords are meant to be private.
If I am wrong, someone please correct me.

2 Likes

If she wants to use a service she knows you won’t approve of, she just won’t save it in Bitwarden. This could lead to her writing the password down, which increases the risk that her accounts could be compromised.

I would trust her to use Bitwarden responsibly.

2 Likes

Right you are (both of you, @vachan and @danmullen)

1 Like

When it comes to children, trust but verify.

You might be better off managing her account yourself. Create a password that she doesn’t know, but let Bitwarden not log out her session. This way she can use Bitwarden, but cannot change the password, which allows you to retain access.

2 Likes

Very good hint, @Ben86.
She is 13 years old (nearly 14) and very clever in cheating me and my wife.
Unfortunately I am a PC freak and also (hobby) programmer, so I am the last instance…
:stuck_out_tongue_winking_eye:

This is wise advise indeed :slight_smile:

@OLLI_S , as you are computer savvy, I recommend a chat with her about online safety and tell her that you trust her to do the right thing but will occasionally check your router mainly to ensure that nobody in the family has picked up something nasty that is calling out to an unwanted Internet endpoint.

Wouldn’t this be better addressed by blocking the sites at the router or via your ISP rather than a system that will simply result in teaching your daughter to just write the passwords in a book and hide them?

The idea was “trust but verify”.

You aren’t blocking and you aren’t being a secret police. You are encouraging openness and trust but making sure that the child knows that what they do might be seen. But without seeming like an overbearing parent.

Even if the child does write passwords in a book, looking at the router logs will show you that someone has visited a site, if you need to, you can check the logs to see which computer that was.

1 Like

The main problem with trust but verify is I’ve never seen an ISP provided router (which 99% of people use) that has traffic logging of any kind (at least here in the UK).

You do often get blocking ability via the router or the ISP though as there’s laws around that.

Fair point. Though given that the OP has stated that he knows perhaps more than your average home user, he may well have a better router or may run something like PiHole or a similar service any of which may have some basic capabilities.

There are plenty of other ways to achieve the same effect. When my children were younger, I used OpenDNS to do this. I did block some of the more dangerous areas of the Internet but we had occasional conversations about what was safe and what wasn’t, how people hide behind fake ID’s and so on. We also talked about artificial social media bubbles to help them understand the dangers but in a wider context. And we would occasionally talk about people for whom these things had gone wrong.