Family Security Center
See weak, reused, aging and breached passwords across your family — as counts per member, without ever seeing their items.
The Family Security Center tells a family organizer how the household is doing on password hygiene: how many weak, reused, aging or breached passwords each member has, and who hasn't run a check yet.
Open it at Family settings → Security Center.
You see counts — four numbers per person, how many passwords they checked, and when. You never see their item names, the sites they belong to, or any password value. Their passwords are encrypted with keys only they hold, so no version of this page could show you one; and their item names and sites are theirs, so this page shares only counts with you (zero-knowledge model).
How the numbers get here#
Each person's own device checks their vault after decrypting it locally, then reports back only a verdict per entry — weak, reused, aging, breached — with no titles and no values attached. The Security Center adds those verdicts up per member.
Two consequences worth knowing:
- You can't run a check for someone else. Only their device can decrypt their vault. Members run it from Security Center → Password health in their own account.
- A member who has never run a check shows "No results yet", not zeros. Their numbers are missing, not clean, and they're left out of the family score rather than counted as perfect.
Reading the page#
| Column | Meaning |
|---|---|
| Weak | Passwords that are short or predictable enough to guess |
| Reused | Passwords used on more than one entry, so one leak affects several accounts |
| Aging | Passwords older than the retention period in that member's settings |
| Breached | Passwords found in a public breach corpus. Fix these first. |
| Checked | How many passwords that person's last check looked at |
The family score runs 0–100 across everyone who has run a check, using the same formula as each member's own password-health page, so the two never disagree. It shows a dash until at least one person has checked.
Rows are ordered organizer first, then worst-first, with never-checked members last.
Breached first, then reused, then weak. A breached password is known to be public. A reused one turns any single leak into several compromised accounts. Aging passwords are the lowest priority — age alone doesn't make a strong, unique password unsafe.
Fewer weak passwords next time#
The Security Center reports; it doesn't prevent. To raise the standard going forward, set a floor under what the generator produces in Password rules. Passwords typed by hand still land here rather than being blocked — see that page for why.
What family members see#
Family members don't have this page — it's the organizer's view. Each member sees their own password health in their own Security Center, in full detail, including the item names you can't see.
Members are told, on their own family page, that the organizer sees these per-member counts. This is disclosed rather than silent by design.
Related#
- Password rules — set the generator floor for the family
- Password health — a member's own detailed view
- Zero-knowledge model — why counts are the most that can be shared