Digital legacy: What happens to your digital stuff when you're gone?

Most people's estate planning stops at property and money. But a typical adult now holds decades of correspondence, tens of thousands of photographs, financial records, and the only copies of things nobody else has — in accounts that, legally speaking, they do not own.

That gap causes real harm. Families lose photo libraries because nobody could prove who was entitled to them. Executors spend months on support tickets. Grieving relatives get automated birthday reminders for someone who died two years ago.

This guide explains what actually happens to online accounts after a death, why the obvious solutions do not work, and the four things that genuinely help.

You license accounts; you rarely own them

Almost every consumer platform's terms of service grant you a personal, non-transferable licence to use a service. The account is not an asset that passes through your estate the way a car does. What may pass is the content you created — but your executor still has to get at it, and the platform is the gatekeeper.

Two further complications:

• Stored-communications law. In the United States, the Stored Communications Act restricts providers from disclosing the contents of communications, even to an executor, without lawful consent. This is why platforms are cautious about handing over an inbox: they are managing genuine legal exposure, not being obstructive.
• Unauthorised-access law. Logging in as someone else — even a deceased spouse, even with the correct password — can fall foul of computer-misuse statutes and of the terms of service. It is common, and it is legally murkier than most people assume.

Why "put the passwords in the will" fails

It is the most common advice and it is poor advice, for four reasons.

1. A will becomes a public record in many probate systems. Publishing your credentials is the opposite of what you want.
2. Probate is slow. Months can pass before the will is read. Two-factor codes go to a phone that has been disconnected, and recovery emails bounce.
3. Credentials rot. Passwords you write down in 2026 will not be current in 2034, and the list quietly becomes worthless.
4. It may not be lawful access. As above, having the password is not the same as being authorised.

Passwords are a fallback, not a plan.

The mechanism that does work: in-service designation

The single most important development in this area is that major platforms now let you nominate someone inside the product, in advance. This matters legally as well as practically.

In the United States, most states have adopted a version of the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA). Its central rule is a hierarchy:

1. An online tool provided by the platform, where you designated someone, controls.
2. If there is no online tool designation, your will or trust controls.
3. If neither exists, the platform's terms of service control.

Read that hierarchy again, because it is the practical heart of digital-legacy planning: a setting inside the platform overrides your will. Ten minutes of clicking outranks a solicitor's drafting.

The major online tools are:

• Apple — Legacy Contact. You nominate one or more people in your Apple Account settings. Each receives an access key. After your death they present that key plus a death certificate and can request your iCloud data, including photos and documents.
• Google — Inactive Account Manager. You choose how long the account must be inactive (a number of months), who is notified, what data they may download, and whether the account should then be deleted. It is the only major tool that is fully automatic and does not require a death certificate — it triggers on inactivity.
• Social account legacy settings. Check whether each service supports a designated contact, memorialisation, or deletion on death. Available permissions and eligibility vary; review the service's current help centre before choosing.
• Microsoft — Next of Kin process. No advance designation; the estate applies after the fact.

Not every service has one. For those that do not, the fallback is your executor and documentation.

Decide the outcome, not just the access

Access is only half the question. For each significant account, the real decision is what you want to happen:

• Delete. Nothing preserved. Appropriate for dating apps, search history, most messaging.
• Memorialise. The profile persists in a changed state so people can find it and post tributes. Appropriate for social profiles with a real community around them.
• Archive and transfer. Someone downloads the contents and the account closes. Appropriate for photo libraries, cloud storage, and email.
• Continue. A business account, domain, or subscription that must keep running. This needs a named operator and a billing method that will not fail.

Write the decision down per account. "Deal with the photos" is not an instruction anyone can act on; "download the iCloud photo library, give a copy to each of my siblings, then close the account" is.

The four steps

1. Inventory what actually matters. Do not try to catalogue every login. Sort them by consequence:

• Irreplaceable — photos, video, writing, correspondence.
• Financially significant — banking, brokerage, PayPal, crypto, domain names, ad revenue, storefronts.
• Access-critical — your primary email and your password manager, because they gate everything else.
• Sentimental or public — social profiles, blogs.
• Noise — everything else. Let it lapse.

The list of names and purposes is not itself secret and can live with your will. The credentials should not.

2. Set every online tool available. Work through Apple, Google, and Meta first; they hold the majority of most people's irreplaceable material. This is the step with the highest ratio of benefit to effort, and it overrides your will under RUFADAA.

3. Solve the two-factor problem. This is where well-made plans die. Your executor has your password but the code goes to a phone that has been cancelled.

• Keep the recovery codes every service issues at setup, in a password manager or a separately secured location. Tell your executor where they are and how to access them; do not attach them to a will or leave them in an ordinary shared document. They are single-use and they work without your phone.
• Prefer an authenticator app that syncs over one bound to a single handset.
• Tell your executor not to cancel the mobile number immediately. Keeping it live for a few months is often the difference between recovering the accounts and not.

4. Use a password manager's emergency access. Most reputable password managers offer emergency access: a nominated person requests access and, after a waiting period you set, receives it unless you refuse. It solves the credential-rot problem, because the vault is always current. Combined with the platform online tools, it covers most realistic scenarios.

Write the letter

Alongside the technical steps, leave a short plain-language document — sometimes called a letter of instruction — that says, in order:

• Which accounts exist and why they matter.
• What you want done with each.
• Where the recovery codes are held — not the codes themselves.
• Who you have already designated, in which service.
• Anything you specifically do not want read or preserved.

That last line is worth real thought. Digital legacy is not only about preservation. Deciding what should be deleted unread is a legitimate and kind thing to specify, and it spares your family the burden of deciding on your behalf.

Executor preparation checklist

Choose and prepare an executor before anyone needs to act. This is a practical handoff, not a substitute for legal advice about who has authority in your jurisdiction.

• Name the person and a backup. Tell them where the plan is kept, what decisions they may make, and whom to contact for legal or financial questions.
• Inventory the accounts that matter. Record the provider, account identifier or recovery email, purpose, and intended outcome (close, memorialise, preserve, or transfer eligible files). Do not put passwords or recovery codes in the inventory.
• Set provider controls now. Use each service's legacy-contact, inactive-account, or estate tools where available, and note the choices and any limits they impose.
• Plan for device and sign-in access. Keep the primary phone number and recovery routes documented. Use a password manager's emergency-access feature or another provider-supported process rather than sharing credentials in a will.
• Review the handoff together. Confirm the executor can locate the plan, understands what must not be deleted, and knows when to seek professional advice.

A storage model that keeps the plan usable

Keep the account map, sensitive access material, and legal authority separate. That limits exposure while giving the executor a clear route to the information they need.

Information	Where to keep it	Executor handoff
Account inventory and intended outcomes	A dated, access-controlled document with the estate records. Include provider names and account identifiers, not passwords.	Tell the executor how to locate it and when it was last reviewed.
Passwords and recovery codes	A reputable password manager with emergency access or a trusted-contact process. Keep any recovery key separately secured; never write credentials into a will or an ordinary shared document.	Explain the provider-supported access process and where any separately secured recovery key is held.
Legal documents and provider instructions	Originals with the estate papers, plus a secure digital copy where appropriate. Keep provider-specific instructions beside the inventory.	Identify who holds originals and which platform request route applies; legal authority requirements vary.
Photos and irreplaceable files	At least two maintained copies in separate locations, with one encrypted copy and a documented way to restore it.	Record the storage locations and access method, and periodically verify that a copy can be restored.

Review the inventory and access instructions at least once a year and after major life changes. Provider features change, so check each service's current process rather than relying on an old checklist.

Family governance cadence: the quarterly review checklist

Digital estate plans fail when they sit in an unmaintained drawer for five years. Break digital legacy maintenance into four lightweight 15-minute quarterly checks:

Quarter	Focus area	Action items	Verification checkpoint
Q1 (January)	Emergency Access & Device Hardware	• Audit designated Legacy Contacts in Apple ID, Google Inactive Account Manager, and social-account legacy settings. • Confirm password manager emergency access contacts are current. • Re-verify phone numbers and trusted devices on root email accounts.	Perform a dry-run test: confirm your designated executor knows where physical emergency keys are kept.
Q2 (April)	Recurring Subscriptions & Financial Vaults	• Review recurring digital subscriptions (cloud storage, streaming, software licenses, domain renewals). • Document active banking, investment, cryptocurrency, and pension login portals. • Ensure bank statement emails route to a documented, monitored address.	Update cancellation instructions for non-essential digital subscriptions to prevent recurring card charges.
Q3 (July)	Media Backups & Photo Preservation	• Run an export of phone camera rolls to an offline external hard drive or secure secondary cloud. • Verify family photo libraries are shared with designated relatives. • Confirm offline backups boot cleanly (test opening 5 randomly selected archive files).	Enforce the 3-2-1 rule: 3 copies of irreplaceable media, 2 different storage media types, 1 stored off-site.
Q4 (October)	Legal Directives & Asset Inventory	• Verify power-of-attorney documents include explicit digital asset authorization clauses (such as RUFADAA in the US). • Review asset inventory list for newly opened accounts, closed services, or changed usernames. • Confirm physical copies of emergency documents are legible and intact in fireproof storage.	Have an informal 10-minute check-in with your designated digital executor to confirm they remain comfortable with the role.

If you are handling someone else's accounts now

Start here rather than with the list above.

• Secure before you explore. Identify the primary email account first; it controls password resets everywhere else.
• Do not start deleting. Deletion is irreversible and often begins a countdown that cannot be paused. Download first.
• Gather documents once. You will need a death certificate, proof of your authority (grant of probate, letters of administration, or equivalent), and your own photo ID. Platforms ask for the same three things; having scans ready turns weeks into days.
• Use the official channels. Every major platform has a dedicated bereavement or memorialisation form. Support chat will not have the authority.
• Expect a wait, and keep a log. Note dates, reference numbers, and names. Requests do get lost, and a log is what gets an escalation taken seriously.

A reasonable minimum

If you do nothing else, do these three things this week. They take about half an hour in total and cover the majority of the risk:

1. Set a Legacy Contact on your Apple account, if you use one.
2. Set Inactive Account Manager on your Google account.
3. Print your recovery codes for email and your password manager, and put them somewhere your family can find them.

Everything else is refinement.

---

This guide is general information about how consumer platforms handle account succession. It is not legal advice, and the rules that govern estates vary significantly between jurisdictions. For decisions with financial or legal consequences, consult a qualified professional in your own country.