How to use Masterpass with multiple individuals

mort's Avatar

mort

07 Aug, 2017 11:10 PM

Two individuals, spouses say, share use of some sites but not others. If I understand, the global password has to be entered into both users' phones. Since the global password is already on the phones (or has to be typed from memory), what's to keep the spouses from accessing each other's private accounts?

If a spouse wants to share a password with the other, without Masterpass on the second spouse's phone, how would that be done safely? Generate the password and airdrop it? Once the password is shared, can that single password be changed, or will all passwords have to be changed (by changing the global password)?

Thanks for your attention.

  1. Support Staff 1 Posted by Maarten Billemo... on 07 Aug, 2017 11:23 PM

    Maarten Billemont's Avatar

    First of all, this application is called Master Password, not Masterpass. The latter is a MasterCard product that is unrelated to Master Password.

    I'm having a little trouble deciphering exactly what scenarios you're trying to describe here. So I'll give general information and hope it will answer your questions. If not, feel free to clarify.

    Master Password can be installed on the device of both spouses. Either spouse can use either phone to log into their own personal Master Password user on that phone, using their personal master password. It is perfectly safe for spouse X to sign into Master Password on spouse Y's phone. Doing so does not reveal X's master password to Y, nor does it reveal X's site passwords to Y. Y will not gain access to X's private accounts.

    If spouse X wants to share one of his passwords with Y, for example, because they want to share netflix account credentials, X can simply tell Y the password that Master Password has generated for the account. If spouse Y then wants to use Master Password to save this password that they've received from X, they can save that password to their personal Master Password user by creating the site and changing its type to "personal password" and then saving X's shared password in it. Whenever X changes the password for this account and shares the new password with Y, Y will need to update their Master Password by saving the new password into it.

  2. 2 Posted by mort on 08 Aug, 2017 03:17 PM

    mort's Avatar

    Apologies for misstating the name.

    Scenario 1) A and B share accounts, say Amazon Prime, which sees only one user. To access Amazon, Master Password must be on both phones with the same personal master password. Now, A wants to access a site used by B, say Reddit, to see B's comments. User A would only have to type -- into User A's phone, since the personal master password is the same -- B's user name for Reddit, and Master Password would generate the correct password. Is this a fair representation of the situation?

    Is B's only defense to use a non-standard user name for Reddit?

    Scenario 2) B gives A a password to a site, but only wants to give A temporary access, say Chase. When B wants to change the password to Chase, does B then have to create a new personal master password and change the passwords on all accounts? In other words, can a new password be generated just a for a single account?

    I appreciate the prompt response to my questions. Thank you for your attention.

  3. Support Staff 3 Posted by Maarten Billemo... on 08 Aug, 2017 03:34 PM

    Maarten Billemont's Avatar

    People should never share their personal master password with anyone.

    In scenario 1, either the Prime account is managed by A, its password is generated by A's personal Master Password account and B's Master Password account does NOT have the ability to generate it. In this case, A can share their personal Prime password with B and B can save this password wherever they like. They can also chose to save it in B's personal Master Password account, but only as a saved "hybrid" password. If A ever changes the password for Prime, B will not get the new password unless A explicitly shares the new password. A and B's Master Password accounts are 100% personal and private, all accounts in them, such as Reddit, are not accessible by the other.
    In this situation, there are 2 Master Password accounts, A's account and B's account. Neither has access to the other. Even if A uses B's phone to log into his own private account, B will not suddenly "gain access" to A's personal account.

    If this is not a desirable approach, another option is to create three, not two, Master Password accounts. A private account for A, a private one for B, and a "shared" Master Password account "C" which uses a master password that both A and B know. In this case, the shared account can be used to manage Prime's password. A's Reddit password will stay in A's personal account, where B cannot access it. The advantage to this approach is that whenever the Prime password changes, both A and B can see the new password, B does not need to wait for A to share the password with them. The Prime password is now managed not be A's private account but by the shared C account, which both A and B have full access to.

    With regards to scenario 2: yes, it is possible to change a single site's password without affecting all other sites. This is accomplished by incrementing the "site counter". Initially, the counter is at 1. If you increment it to 2, that site's password will be completely different. All other sites will be unaffected. You would do this if your site's password became compromised, eg. you shared it with someone and you want to revoke their access to the site.

Reply to this discussion

Internal reply

Formatting help / Preview (switch to plain text) No formatting (switch to Markdown)

Attaching KB article:

»

Attached Files

You can attach files up to 10MB

If you don't have an account yet, we need to confirm you're human and not a machine trying to post spam.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac

Recent Discussions

15 Nov, 2017 01:51 AM
21 Oct, 2017 05:17 PM
18 Oct, 2017 08:29 PM
17 Oct, 2017 02:59 AM
02 Oct, 2017 11:56 PM