Start them with the idea that a few things matter far more than the others. Email because all password resets use it, file storage as any identity theft will pr

Start them with the idea that a few things matter far more than the others. Email because all password resets use it, file storage as any identity theft will probably try and use it, and so on. Use a long pass phrase and two-factor authentication for the few things that really matter. These are: your domain name seller, your email provider, your file storage provider. If you suspect your family members will do a poor job of keeping their 2FA backup codes, or that they lose their phone often... then centralizing the 2FA codes through Authy and choosing a long backup phrase there allows your family to use their 2FA codes on more than one device. Note: I haven't even said "unique pass phrase per site". Yes it would help, but simply having a long pass phrase with 2FA is probably going to be more helpful for those who already find LastPass or 1Password too much to use that they needed the same password everywhere.