How Should an Authorized Person Access Your Online Accounts Without Using Your Login?
You have named someone to handle financial matters if illness or incapacity prevents you from doing so. She knows where the power of attorney is kept, and you may even have shown her the password manager. That can feel like a complete handoff.
But if she signs in with your username and password, the provider may see only you. The activity may not reveal that an agent acted, what authority she relied on, or whether the action stayed inside her role. The better decision is to prepare a recognized access route that lets the authorized person act as herself.
Why does the helper’s identity matter?
A power of attorney gives an agent the authority stated in the document and recognized under applicable law. The agent may need to present the document before a bank, brokerage firm, or other organization will honor that authority.[1] The document creates the legal role; it does not automatically create a usable online profile at every provider.
That operational step matters. A financial institution may require the agent to submit the power of attorney, complete its review, verify identity, and be added to the account. Fidelity, for example, instructs an agent to request addition to the owner’s account and says the agent may need a separate Fidelity account.[2] Other providers may use different forms, access levels, or review standards.
When the agent uses her own recognized credentials, the arrangement can preserve a clearer boundary between the owner and the person acting for her. It may also make notices, access removal, and activity review more workable. Some services offer narrower delegation: Google Workspace mail delegation, for example, allows a delegate to work from her own profile without gaining the owner’s password or control over the rest of the account.[3]
The accountable access handoff
Each stage preserves something the next stage needs.
Authority defines the job
The legal document, trust, court appointment, or provider tool establishes the role and its limits.
The provider recognizes the person
Identity review and accepted documentation turn the role into a usable account path.
The action leaves the right record
The helper acts through her own access, so activity can be attributed, reviewed, and ended without changing the owner’s identity.
Which access route fits the role?
An agent acting during your lifetime, a successor trustee managing trust property, and an executor handling an estate do not enter the same role at the same time. Account ownership, the governing document, state law, and provider procedures shape what each may do. Revised uniform law provides a framework for fiduciary access to digital assets, including agents, trustees, conservators, and personal representatives, but the applicable state law and the account itself still matter.[4]
A trusted contact is different. At a brokerage firm, that person may help the firm reach you or verify the identity of a guardian, executor, trustee, or power-of-attorney holder. The designation does not give the trusted contact authority to trade or make account decisions.[5] A technical helper is narrower still: knowing how to reset a device or locate a recovery key does not make that person your financial agent.
Platform tools may create another defined route. Apple’s Legacy Contact feature permits a chosen person to request certain account data after death using an access key and required documentation, while excluding items such as Keychain passwords and passkeys.[6] That tool performs a provider-specific job; it does not replace a power of attorney, trust, or executor appointment.
Dovetail Principle: The Reason Behind a Goal Can Change the Plan
If the goal is occasional help while you remain involved, limited delegation may fit. If the goal is continuity during incapacity or administration after death, the person may need formal authority and a provider-recognized role. The reason for access determines how the handoff should be built.
What should be prepared before help is needed?
Start with the actions that may be necessary: view a statement, pay a bill, speak with a provider, trade, transfer, change contact information, preserve data, or close an account. Then ask the attorney which person and document should carry each legal role. Ask each important provider what it currently requires to recognize that person and whether it offers inquiry-only, delegated, fiduciary, legacy, or other access.
Keep the owner’s passwords and recovery material inside the protected credential system. In a separate operating record, note the account, intended role, governing authority, provider contact route, status of any submitted paperwork, limits, activation event, and backup person. The record should point to protected documents rather than copy sensitive credentials into an ordinary list.
The person who acts should keep receipts, confirmations, correspondence, and a short explanation for material decisions. CFPB guidance for agents under a power of attorney emphasizes acting in the principal’s best interest, managing carefully, keeping money separate, and maintaining good records.[7] Those duties come from the role, not from the login method, but recognized access can make the record easier to preserve.
Review the arrangement after a change in estate documents, account ownership, providers, password manager, named people, or health. Remove obsolete delegated access and confirm that successors know where the process begins. The system is ready when the right person can prove her role, enter through an accepted path, act within defined limits, and leave a record that can be understood later—without impersonating you.
Related Reading: Who Should Have Access to Your Password Manager? explains how to choose practical access roles without exposing an entire private vault.
