Updated 2026-09-29
On the Family plan, the owner can create an account for a child. It's a full Atrium account in the family, with its own master password and its own encryption keys, and it uses one of the family's seats.
Setting one up
The owner creates the account from Settings → Family. The child then signs in on their own device and creates their master password. Their device seals a copy of their account key to the owner's key and signs it: that recovery copy is what lets the owner help later. Setup isn't finished until the recovery copy is stored, and the Family page shows if anything is missing.
What the owner can and can't see
The child's vault, notes and calendar are encrypted with the child's own key. The owner sees only what the child shares with them, like any other member. Our servers store the recovery copy but can't open it.
Some things are restricted on a child's account: they share only inside the family, can't accept invitations from other teams and can't email guests from the people apps.
If the child forgets their master password
The owner can start a recovery. It's a recorded process with deliberate friction:
- The owner confirms with their master password and an email code. The child is emailed straight away.
- After 24 hours, the owner confirms again and, with the child present, sets a temporary master password on the owner's device.
- The child is signed out everywhere and must choose a new master password and a new Recovery Kit of their own the next time they unlock.
The child can cancel a recovery in progress simply by signing in and unlocking.
Graduating
When the child is ready, the owner can allow them to graduate. Graduating deletes the recovery copy and lifts the restrictions; the person stays in the family as a regular member. If a recovery was ever completed, they're asked for a new master password and Recovery Kit first.