

The grantor may manually approve the request at any time, otherwise the request is bound by a grantor-specified wait time. Grantor is notified of request via email.Grantee submits a request for emergency access. An emergency occurs, resulting in grantee requiring access to grantor’s Vault.On confirmation, the grantor’s Master Key is encrypted using the grantee’s public key and stored once encrypted. Grantor is notified of acceptance via email and confirms the grantee as their trusted emergency contact.On acceptance, the grantee’s public key is stored with the invite. Grantee is notified of invitation via email and accepts the invitation to become a trusted emergency contact.The invitation (valid for only 5 days) specifies a user access level and includes a request for the grantee’s public key. A Bitwarden user (the grantor) invites another Bitwarden user to become a trusted emergency contact (the grantee).Emergency Access uses public key exchange and encryption/decryption to allow users to give a trusted emergency contact permission to access Vault data in a Zero Knowledge/Zero Trust environment:
