Getting Access

Can't Access a Parent's Online Accounts With Dementia

My mom kept her passwords in a spiral notebook. I found it in a kitchen drawer and for about ten minutes I thought I'd won.

Half the entries were crossed out. Some had three versions stacked under one heading, none of them dated. I sat there guessing at the closest match while a login screen counted down my attempts.

The notebook wasn't really the problem. The lock had moved, and nobody warns you about that until you're standing in front of it.

How do I get into a parent's online accounts when they have dementia?

Start with their email and their phone, and plan on needing both. Email is where every password reset lands. The phone is where the code that finishes the reset gets sent. Hold one without the other and you're still outside.

That order is what worked for me. Her email first, then the credit cards, then the bank. After that the ordinary bills surfaced on their own, because everything she owed had been emailing her for years. Knowing which accounts even exist is its own job. This is the one after it: you know the account is there, and it won't open.

Why doesn't a written password list work?

Because it records a password as of the day it was written, and passwords change. And because on the accounts that matter, the password stopped being the last step. Keep the list anyway, just stop thinking of it as keys. What it gives you is a map: which institutions she deals with, which email address she signed up with, which accounts you didn't know existed.

Does power of attorney let me log into my parent's accounts?

Not on its own, and it may not cover her email at all. A power of attorney is authority over your parent's money and property. It isn't a credential, and no login page has a field to paste it into.

There's a second wrinkle almost nobody hears about until it bites. Under the model law most states have now adopted, a company generally doesn't have to hand an agent the contents of a person's emails and messages unless the power of attorney grants that in so many words. Documents written before any of this mattered usually say nothing about digital anything. Pull yours out and look. If you're having a new one drafted, ask for the language.

Which is why handing the document to a person beats anything you try on a website. Walk into the branch, hand over the original, ask to be put on the account as her agent. That has its own fight attached sometimes. And if nobody has signed one yet, go deal with that first. That window closes.

What if the verification code goes to a phone my parent can't use?

Get hold of the phone itself and the carrier account behind it, early. Whoever controls that number controls every account that texts a code to it, which is most of them now.

Keep the line active and paid even after your parent stops using the phone, because canceling it can quietly strand a dozen logins. Get the carrier account login and PIN while you can, since that's what lets you move the number later. And if the codes come from an authenticator app instead of a text, they live on that one device. Don't reset it, don't trade it in, don't lose it in a move.

When my mom moved into memory care, her phone came with me. Not for sentiment. It was the key to everything else.

What can I set up while my parent can still say yes?

Nearly everything, and this is the part families skip. An afternoon together while she can still consent beats a year of workarounds after, and her saying yes now is the cleanest answer to anyone who questions you later.

Move the passwords into a password manager, and pick one with emergency access, where she names you and you can request entry later without knowing her master password. Not all of them offer it, so check first. While you're in each account together, write down the email address and phone number on file. Those two fields decide whether recovery is possible at all.

Then ask each institution what it offers, because nobody advertises this. Brokerages generally have to ask customers to name a trusted contact person, which doesn't let you see balances or trade, but does mean somebody calls you if the account starts behaving strangely. Some banks will add view-only or third-party access. Health systems usually have proxy access for a family member, giving you your own login instead of hers, and that matters: sharing a portal password can violate the terms and trip a fraud lock.

The big providers let a person name a legacy contact for email, phone or social accounts. Set those up, but know what they are. They open after death, or after a long stretch of no activity. Next year's problem, not this week's.

What if I'm already locked out?

Work the automated recovery first, then go find a person. Expect the person to be the one who helps.

The forgot-password flow works fine, but only if you already control the email or the phone number on file. If you don't, that's a wall, and retrying doesn't turn it into a door. Call the institution instead. Say it plainly: your parent has dementia, you hold power of attorney, what do you need. Often you end up properly added to the account, which beats logging in as her anyway.

Consumer tech companies are the hard ones. Their recovery processes lean on details your parent can no longer supply, and sometimes the answer is just no. When it is, go around instead. Open a fresh email address in your own name for the accounts you manage and have statements sent there. Forwarding my mom's physical mail to my house did more for me than any password ever did.

If there's no power of attorney and no way in, what's left runs through court, slower and more supervised than families picture. That's a conversation with an elder-law attorney licensed where your parent lives.

I kept her credit cards active on purpose long after she stopped using them, because the statements kept telling me what she was still paying for. Subscriptions she'd forgotten. Services nobody had used in years. I'd find one in her inbox, click forgot password, get in and cancel it. None of that was clever. It was access, taken early. The free checklist covers what to gather before that window narrows; the full guide walks the sequence in order.

Frequently asked questions

Is it legal to log into my parent's account using their password?

It's murkier than most families realize, and good intentions aren't the whole answer. Providers generally write their terms assuming the account holder is the one signing in, and some will lock an account that looks compromised. Safer is authority the institution recognizes: a power of attorney on file, or third-party access granted on the account. Ask an elder-law attorney where your parent lives.

Does power of attorney give me access to my parent's email?

Sometimes, and only if the document says so. Under the model law most states have adopted, the contents of a person's emails and messages generally have to be expressly granted to an agent before a provider will hand them over. A power of attorney written before any of this mattered often has no such language. Ask the attorney who drafted it.

What should I do first if my parent was just diagnosed?

Handle the phone and the email first, because both are needed to recover nearly everything else. Sit down together while your parent can still consent, note the email address and phone number on file for each account, get the login for the mobile carrier account, and put it all in a password manager that offers emergency access.

This isn't legal or financial advice — it's a plain-language account of how this plays out in real families, written from managing my own mom's finances since her diagnosis. What a power of attorney authorizes, how digital-asset laws are worded, and what any given bank, brokerage, health system or technology provider will accept all vary from state to state and company to company, and they change over time. Talk to an elder-law attorney licensed where your parent lives before acting on any of it, and confirm anything about a specific account with the institution that holds it.