Digital legacy: what happens to your online accounts when you die

Most people's estate planning stops at property and money. But a typical adult now holds decades of correspondence, tens of thousands of photographs, financial records, and the only copies of things nobody else has — in accounts that, legally speaking, they do not own.

That gap causes real harm. Families lose photo libraries because nobody could prove who was entitled to them. Executors spend months on support tickets. Grieving relatives get automated birthday reminders for someone who died two years ago.

This guide explains what actually happens to online accounts after a death, why the obvious solutions do not work, and the four things that genuinely help.

You license accounts; you rarely own them

Almost every consumer platform's terms of service grant you a personal, non-transferable licence to use a service. The account is not an asset that passes through your estate the way a car does. What may pass is the content you created — but your executor still has to get at it, and the platform is the gatekeeper.

Two further complications:

• Stored-communications law. In the United States, the Stored Communications Act restricts providers from disclosing the contents of communications, even to an executor, without lawful consent. This is why platforms are cautious about handing over an inbox: they are managing genuine legal exposure, not being obstructive.
• Unauthorised-access law. Logging in as someone else — even a deceased spouse, even with the correct password — can fall foul of computer-misuse statutes and of the terms of service. It is common, and it is legally murkier than most people assume.

Why "put the passwords in the will" fails

It is the most common advice and it is poor advice, for four reasons.

1. A will becomes a public record in many probate systems. Publishing your credentials is the opposite of what you want.
2. Probate is slow. Months can pass before the will is read. Two-factor codes go to a phone that has been disconnected, and recovery emails bounce.
3. Credentials rot. Passwords you write down in 2026 will not be current in 2034, and the list quietly becomes worthless.
4. It may not be lawful access. As above, having the password is not the same as being authorised.

Passwords are a fallback, not a plan.

The mechanism that does work: in-service designation

The single most important development in this area is that major platforms now let you nominate someone inside the product, in advance. This matters legally as well as practically.

In the United States, most states have adopted a version of the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA). Its central rule is a hierarchy:

1. An online tool provided by the platform, where you designated someone, controls.
2. If there is no online tool designation, your will or trust controls.
3. If neither exists, the platform's terms of service control.

Read that hierarchy again, because it is the practical heart of digital-legacy planning: a setting inside the platform overrides your will. Ten minutes of clicking outranks a solicitor's drafting.

The major online tools are:

• Apple — Legacy Contact. You nominate one or more people in your Apple Account settings. Each receives an access key. After your death they present that key plus a death certificate and can request your iCloud data, including photos and documents.
• Google — Inactive Account Manager. You choose how long the account must be inactive (a number of months), who is notified, what data they may download, and whether the account should then be deleted. It is the only major tool that is fully automatic and does not require a death certificate — it triggers on inactivity.
• Meta (Facebook) — Legacy Contact. You nominate someone to manage a memorialised profile: they can pin a post, update the profile picture, and respond to friend requests. They cannot read your messages. Alternatively you can instruct Facebook to delete the account permanently on death.
• Microsoft — Next of Kin process. No advance designation; the estate applies after the fact.

Not every service has one. For those that do not, the fallback is your executor and documentation.

Decide the outcome, not just the access

Access is only half the question. For each significant account, the real decision is what you want to happen:

• Delete. Nothing preserved. Appropriate for dating apps, search history, most messaging.
• Memorialise. The profile persists in a changed state so people can find it and post tributes. Appropriate for social profiles with a real community around them.
• Archive and transfer. Someone downloads the contents and the account closes. Appropriate for photo libraries, cloud storage, and email.
• Continue. A business account, domain, or subscription that must keep running. This needs a named operator and a billing method that will not fail.

Write the decision down per account. "Deal with the photos" is not an instruction anyone can act on; "download the iCloud photo library, give a copy to each of my siblings, then close the account" is.

The four steps

1. Inventory what actually matters. Do not try to catalogue every login. Sort them by consequence:

• Irreplaceable — photos, video, writing, correspondence.
• Financially significant — banking, brokerage, PayPal, crypto, domain names, ad revenue, storefronts.
• Access-critical — your primary email and your password manager, because they gate everything else.
• Sentimental or public — social profiles, blogs.
• Noise — everything else. Let it lapse.

The list of names and purposes is not itself secret and can live with your will. The credentials should not.

2. Set every online tool available. Work through Apple, Google, and Meta first; they hold the majority of most people's irreplaceable material. This is the step with the highest ratio of benefit to effort, and it overrides your will under RUFADAA.

3. Solve the two-factor problem. This is where well-made plans die. Your executor has your password but the code goes to a phone that has been cancelled.

• Keep the recovery codes every service issues at setup, printed, with your will or in a sealed envelope in a safe. They are single-use and they work without your phone.
• Prefer an authenticator app that syncs over one bound to a single handset.
• Tell your executor not to cancel the mobile number immediately. Keeping it live for a few months is often the difference between recovering the accounts and not.

4. Use a password manager's emergency access. Most reputable password managers offer emergency access: a nominated person requests access and, after a waiting period you set, receives it unless you refuse. It solves the credential-rot problem, because the vault is always current. Combined with the platform online tools, it covers most realistic scenarios.

Write the letter

Alongside the technical steps, leave a short plain-language document — sometimes called a letter of instruction — that says, in order:

• Which accounts exist and why they matter.
• What you want done with each.
• Where the recovery codes are.
• Who you have already designated, in which service.
• Anything you specifically do not want read or preserved.

That last line is worth real thought. Digital legacy is not only about preservation. Deciding what should be deleted unread is a legitimate and kind thing to specify, and it spares your family the burden of deciding on your behalf.

If you are handling someone else's accounts now

Start here rather than with the list above.

• Secure before you explore. Identify the primary email account first; it controls password resets everywhere else.
• Do not start deleting. Deletion is irreversible and often begins a countdown that cannot be paused. Download first.
• Gather documents once. You will need a death certificate, proof of your authority (grant of probate, letters of administration, or equivalent), and your own photo ID. Platforms ask for the same three things; having scans ready turns weeks into days.
• Use the official channels. Every major platform has a dedicated bereavement or memorialisation form. Support chat will not have the authority.
• Expect a wait, and keep a log. Note dates, reference numbers, and names. Requests do get lost, and a log is what gets an escalation taken seriously.

A reasonable minimum

If you do nothing else, do these three things this week. They take about half an hour in total and cover the majority of the risk:

1. Set a Legacy Contact on your Apple account, if you use one.
2. Set Inactive Account Manager on your Google account.
3. Print your recovery codes for email and your password manager, and put them somewhere your family can find them.

Everything else is refinement.

---

This guide is general information about how consumer platforms handle account succession. It is not legal advice, and the rules that govern estates vary significantly between jurisdictions. For decisions with financial or legal consequences, consult a qualified professional in your own country.