Sharing your account with your Spouse

One account, two people. Family Sharing lets you invite your Spouse to see everything in your account — every account, balance, transaction, budget and goal — with a login of their own. You never hand over your password, and you decide whether they can change anything or only look.

Inviting your Spouse

Settings → Family Sharing → Invite your Spouse. Enter the email address they will sign in with and choose an access level:

• Full Edit — they can add and change anything in your account except bank connections and account alerts. Because this is write access to real money, choosing it asks for your password (and your authenticator code, if you use one).
• Read Only — they can see everything and change nothing. The database itself refuses the change, not just the screen.

They get an email with a link. The invitation expires after 14 days, and you can resend or cancel it from the same page.

Accepting

The link opens in Lamp & Ledger. Your Spouse signs in — or creates a login with the address you invited — and lands on the invitation. Two things have to be true before they can accept:

• Two-factor sign-in is set up. Every Spouse uses it, because they are looking at someone else’s money. The invitation page sends them to set it up and brings them straight back.
• Their login has nothing of its own. A Spouse sees your account instead of one of their own, so a login that already has accounts, rules or a bank connected cannot accept. A fresh login with that email can.

Once they accept, every page they open is yours, under a banner that says so. You get an email that they joined.

What stays yours alone

Whatever access you choose, only you can connect, reconnect or disconnect a bank, and only you set account alerts. A Spouse sees the banks you connected and never the keys behind them. Your Spouse’s own sign-in, two-factor, theme, timezone and idle timeout stay theirs — those are about the person, not the account.

Changing your mind

Both directions are one click on Settings → Family Sharing. Switch your Spouse between Full Edit and Read Only (switching to Full Edit asks for your password again), or remove them entirely — their login keeps working, it just stops seeing your account. Your Spouse can leave from the same page. Each side gets an email when sharing starts, changes or ends.

Deleting an account

You cannot delete your account while a Spouse is attached or an invitation is pending — remove them or cancel it first, then delete. If your Spouse deletes their own login, they leave your account first, automatically, and you are told by email.

The longer version

Our Privacy Policy describes what we record about sharing and who can see what, and the Security page explains how the database enforces it. For what we hold about you in general, see What we hold about you.