The person changes, the encryption does not. Here is how to genuinely help a family member — with their consent, through their accounts, and honestly about the cases where only official processes exist.
Sooner or later it is not your own PC. A parent's laptop after they have forgotten everything. A spouse's machine mid-crisis. A relative who has died, leaving accounts nobody can open. The wish to help is good — but the passwords in that browser belong to another person, and the honest way to help runs through their consent and their accounts, not around them. This page is the family playbook: how to help properly, where the technical limits sit (they are the same limits — DPAPI does not make family exceptions), and the official routes that exist for the hardest case.
👆 In family cases the strongest recovery asset is almost never a tool — it is the person's own phone, mailbox and presence.
Work with the person, in front of them, on their accounts. Their presence is also practical: account recovery asks questions only they can answer, sends codes to their phone, and recognises their devices. A parent who "knows nothing about computers" usually knows their phone unlock, receives their SMS codes, and remembers fragments of old passwords that turn out to be DPAPI gold. Your job is to be the calm pair of hands on their keyboard — and when it is done, the recovered passwords go into their password manager or their notebook, not yours.
Notice what is missing: any step where you quietly take their Login Data away to work on alone. Even with warm intentions, that file leaving their house in your pocket is where help stops looking like help.
State this gently and plainly to the family: there is no technical shortcut, and anyone selling one is preying on grief. What exists are official processes. Google runs a documented route for requesting access to a deceased person's account, with proof of death and of your relationship. Microsoft runs a Next of Kin process for its accounts. Banks and government services have their own legal routes. These take paperwork and time, and often deliver limited results — but they are real, and they are the only ones. Meanwhile: do not wipe or give away the person's PC or phone yet. A still-signed-in session is evidence and access that, once destroyed, no paperwork can recreate. Get advice before the house is cleared.
Watch the video for the recovery walkthrough — this page adds the family rules that keep help honest.
▶️ Watch Full VideoWith them asking you, present, and the work done on their machine for their accounts — yes, that is ordinary family help, and the honest routes (live session export, their synced account) are the right tools. The line is crossed when access happens without their knowledge, or their password file is taken away and explored privately.
There is no technical way around the encryption, and no legitimate service can decrypt their browser for you. The real routes are the official ones: Google's deceased-user request process, Microsoft's Next of Kin process, and each bank or service's legal procedure — slow and paper-based, but genuine. Preserve their devices and sessions untouched while you pursue them.
Set it up so they can always get in: their browser signed into their account with sync on, recovery phone and email current, and a password manager whose master password is also written down somewhere safe in their home. A sealed envelope in their drawer has saved more families than any tool — and it keeps the keys in the right hands.