Family Privacy Kit

Disclosure: Kit & Key is an independent privacy-stack site. Some links on this page are affiliate links. If you buy through them, we may earn a commission. That does not change the price you pay. It does change which paid tools we can recommend with a straight face. Mullvad and Bitwarden are unpaid controls. We do not earn anything when we point you there.

A household is not one laptop on cafe Wi-Fi. It is phones, a shared tablet, a school Chromebook, and the desktop that still has last year’s passwords. You do not need a kids-monitoring app. You need three tools that cover the people who actually live there: a family password manager so nobody reuses the Netflix login as the bank login, antivirus on the machines that download things, and a VPN that does not run out of device slots at phone number four. This is the kit. Install it once. Hand each person their piece.

If you only needed the cafe laptop, use the cafe Wi-Fi kit instead.

The kit

Install in this order. Password manager first, antivirus second, VPN last.

1. Password manager: 1Password Families, or Proton Pass Family

A household fails on shared logins. One person changes the Wi-Fi password. Nobody else has it. A teenager reuses the Amazon password on a game site. A family password manager gives each person a private vault and a shared vault for the stuff you actually share.

Default pick: 1Password Families. One subscription. Officially five people, plus guest accounts. Unlimited devices. Unlimited shared vaults. Each person starts with a Private vault and a Shared vault. A family organizer who can recover a member (not themselves). No kids-monitoring product. It is a vault, not a nanny.

If the household already wants Proton: Proton Pass Family. Officially Pass Plus for up to six users. Each person gets their own account and private vaults, plus shared vaults. Admin tools exist for a couple of those accounts. Still not a kids SKU.

Unpaid control: Bitwarden Families. Six users. Officially $3.99 a month billed annually. Sharing is collections inside a Families organization, not a product called shared vaults. Premium alone does not include sharing. We do not earn a commission on it.

2. Antivirus: Malwarebytes Family

Phones and laptops in the same house do not share one infection. Each device needs its own protection. Real-time protection is the paid product, not the free scanner.

Pick: Malwarebytes Standard Family. Live pricing cards say it protects 10 devices. What is inside Standard is Premium Security plus Browser Guard. That is the real-time product, not Malwarebytes Free. Plus Family is also 10 devices and adds their VPN. Skip Plus Family if this kit’s VPN is already covering the house.

Turn Real-Time Protection on after install if it is not already on. On Mac, grant Full Disk Access first or the layers stay inactive. Ultimate Family and Total Family add identity-theft seats labeled adults and kids. That is identity insurance, not parental controls. Do not buy it for monitoring.

3. VPN: Surfshark (Proton Family if you want separate accounts)

The household VPN problem is slots. One person on a laptop, another on a phone, a tablet in the kitchen. Ten-device plans run out. Unlimited plans do not, with fine print.

Default pick: Surfshark. Officially Starter, One, and One+ allow an unlimited number of devices on one subscription. There is no separate family plan. You share one login. Fine print: their antivirus is max five devices, the terms reserve a fair-use limit on an immoderate number of connections, the trial is three devices, and the terms are not intended for users under 18. The web content blocker on One and One+ is not a parental-control app. Do not treat it as one.

Surfshark and Nord Security merged in February 2022. They operate as separate products. They are not a third independent VPN company. If that sister-brand overlap bothers you, use Proton Family or Mullvad instead.

If you want named accounts, not one shared login: Proton VPN Family. Officially up to six members (invite five). Duo is two. Proton’s own pages disagree on whether Duo and Family are 10 connections total or 10 per user. We are not picking a winner until they do. Invited accounts are described as always private. There is no kids VPN product.

Ten-device household on one login: NordVPN. Officially 10 simultaneous devices, no family plan. Nord’s own answer: there is no need for one. A router counts as a slot. Fine if the house is smaller than 10 connections. Not the pick if you keep adding phones.

Unpaid control: Mullvad. No family SKU. One numbered account. Officially up to five devices. Multiple people on that number is allowed. Five is tight for a house. We earn nothing from that sentence.

Setup

Do this at home.

Password manager. Start a 1Password Families subscription (or Proton Pass Family). Make yourself the organizer. Invite the people who live there. Each person starts with a Private vault and a Shared vault. Use the shared one for Wi-Fi, streaming, and school logins. Each person installs the app and the browser extension. Private stuff stays in a private vault.

Antivirus. Buy Malwarebytes Standard Family. Install it on the Windows and Mac machines that download files. Turn Real-Time Protection on. Grant Full Disk Access on Mac. Run one scan on each machine.

VPN. Install Surfshark (or Proton Family / NordVPN / Mullvad). Log in with the unique password in the manager. Turn Kill switch on. For Surfshark, one login covers the devices. For Proton Family, invite members in the admin panel and turn VPN on per person. Connect once on each device so you know it works.

What this kit does not do

This is a household stack. It is not parenting software.

• It does not monitor kids. None of these vendors sell a kids-monitoring SKU we are willing to put in this kit. Surfshark’s web blocker and Mullvad’s family DNS are not parental controls.
• It does not make the house anonymous. The VPN company still sees that the account is connected. Shared streaming logins still know who you are.
• It does not replace screen locks, disk encryption, or OS updates.
• It does not fix a laptop that is already compromised.
• It does not give a five-year-old their own Mullvad number and call that a family plan.
• It does not settle Proton’s 10-total vs 10-per-user conflict. Until Proton’s own pages agree, treat Family as named accounts with a device cap that is not fully clear.

If you only do one thing from this page: family password manager plus a VPN that will not run out of slots. Antivirus is the third leg on the machines that browse and download.

Ownership and how we get paid

Kit & Key is independent of the product companies in this kit.

Nord Security and Surfshark merged in February 2022. Official wording is a merger, not an acquisition. They say they operate independently. We still treat Surfshark as a Nord-group sister, not a fully separate family VPN.

Kape Technologies owns ExpressVPN, CyberGhost, and Private Internet Access, and review sites in the same neighborhood, including vpnMentor. Those sites can review sister products. We do not. This kit does not pick a Kape VPN.

Affiliate links: 1Password, Proton Pass, Malwarebytes, Surfshark, Proton VPN, NordVPN. If you buy through those links, we may earn a commission.

Unpaid controls: Mullvad and Bitwarden Families. No consumer affiliate program on the official pages we checked.