What the trusted person should hold
- Screen Time passcode or family organizer access. See the Light page if you need the setup first.
- Admin password for the device, if there is one.
- Recovery email access for the account that can turn the filter off.
- Router login if the filter lives on the network.
- Any PIN, unlock code, or approval path that reverses the setup.
- If you are using Windows, Android, or a router, this person should also know where the password reset email goes.
How to hand it off
- Pick one trusted person.
- Tell them exactly what they control.
- Put the passwords in a password manager or sealed note they control.
- Delete your own copies.
- Move recovery email and phone numbers to addresses they can reach.
- Agree on when they should give access back, if ever.
Rules for keeping it useful
- Do not make them a bystander. They need to actually hold the recovery path.
- Do not keep backups of the same password in your notes.
- Do not spread the control across three different people unless you need to.
- Keep the setup boring. Boring is better.
- If the trusted person leaves, move the recovery path to someone else right away.
Good places to use this
- Screen Time on iPhone or Mac.
- Family Link on Android.
- Microsoft Family Safety on Windows.
- Router-level DNS or allowlist filtering.