Emergency contacts
Description
People nominate trusted individuals (like a family member or friend) to access data on their behalf if there’s an emergency. This pattern can also be used to restore access if someone can’t login to their account. For example, in the event of an accident, the trusted individual can take control of the persons’ account.
IF thinks this pattern shows care for people as it helps them get access to services when they need them the most. Emergency access should have a delay so that someone can revoke access if it’s a mistake. It should also be time-limited and any actions that the emergency contact does on someones’ behalf should be recorded for them to review later.
Advantages
- Allows people to access information in a crisis, without requiring them to go through the usual identity and security checks
- A delay can be used to give people time to stop an emergency access if it is triggered by mistake
Limitations
- Requires having someone you can trust who is available to help
- Requires advance planning to set up
Examples
-
Emergency access user in LastPass →
Users can grant emergency contacts one-time access to their Lastpass vaults
-
Trusted contacts can see each others’ location in an emergency
-
Trusted contacts in Facebook →
If users are locked out their account, a trusted friend can send them a recovery code and URL link to get access
-
Inactive Account Manager in Google →
People can designate someone to access their account if they are unexpectedly unable to use it
Was this pattern useful?