Honest comparison
A password manager is a vault. A recovery page is the note taped beside the door.
People ask us why they'd need a recovery page when they already pay for 1Password. Fair question, and the honest answer isn't “ours is better” - it's that they solve different problems, and there's a real scenario where the vault can't save you: the moment you need to open it from a stranger's browser.
| Password manager | Recovery page | |
|---|---|---|
| Built to hold | Every password, passkey, card number, and secure note you own | The first-30-minutes info: who to call, what to freeze, what to do next |
| To open it from a borrowed browser | Account password + a Secret Key or device approval - and often a 2FA code from the phone you just lost | Your page name, your name, and a PIN. All three live in your head |
| When your only device is gone | Recoverable, but usually via an Emergency Kit PDF, a recovery code, or another family member | Works as designed - that's the exact situation it exists for |
| Should it hold actual passwords? | Yes - that's the whole point | No, deliberately. A PIN-protected page is the wrong place for credentials |
| Tells you what to do next | No - it stores secrets, not plans | Yes - it's a checklist with your numbers filled in |
The lockout problem, concretely
Your phone is gone and you're at a hotel computer. You want your vault - it has everything. But getting in from a brand-new device is exactly when a good password manager is most suspicious of you:
- 1Password wants your Secret Key. Signing in on a new device typically requires your account password plus a 34-character Secret Key - which lives on your existing devices and in an Emergency Kit PDF (accounts that unlock with SSO are the exception). If your only signed-in device is the lost phone and the Emergency Kit is “somewhere in Downloads,” you're waiting on a Family Organizer or a recovery code to get back in.
- Most vaults lean on 2FA. And for most people the second factor is an authenticator app or a prompt - on the phone that's gone. Backup codes fix this, if you stored them somewhere that isn't the same phone.
- None of this is a design flaw. A vault full of your life's credentials should be hard to open from an unknown browser. The flaw is using it as your only plan for a situation defined by being on an unknown browser.
A recovery page inverts the trade-off. It asks for things you carry in your head - your page name, your name, a PIN - and in exchange it's only allowed to hold things that are useless to a thief: hotline numbers, account names, next steps, where your documents live. How that's safe to expose to the open internet is written up in the security page.
When the password manager alone genuinely covers you
Credit where it's due. You can skip us if:
- You share a family plan and travel with the family. On 1Password Families, shared vaults are readable from your partner's account, and a Family Organizer can recover your account entirely. If the person next to you can open the vault, much of what we do is covered.
- You've set up emergency access. Bitwarden's Emergency Access, for example, lets a trusted contact request entry to your vault after a waiting period. Slower than a recovery page, but it works.
- You carry your recovery materials on paper. A printed Emergency Kit or recovery code in your luggage - not your wallet, which tends to vanish alongside the phone - makes the vault reachable from anywhere. Most people intend to do this. Fewer have.
The catch in all three: they need setup, a second person, or discipline you must maintain. If you have that, honestly, you're in good shape - see the full list of alternatives including the free ones.
Use both - they compose
This isn't either/or. Keep the password manager; it's the right home for every credential you own. Then put the planon a recovery page: the bank hotlines, the insurance policy number, the embassy, who to call - and a line like “1Password Emergency Kit: in the grey folder at home, or ask Sam.” The vault holds your secrets. The page tells the stressed, phoneless version of you where the vault's keys are and what to do while you get back into it.
The vault keeps your secrets. This keeps your plan.
Set up the who-to-call page once, from any browser, no app. Encrypted with your name and a PIN - nothing on it worth stealing.