A Difficult, Increasingly Common Task
When someone dies, they leave behind a digital estate: email, photos, social media, subscriptions, financial logins, sometimes cryptocurrency. Grieving families are often blindsided by locked accounts and the maze of getting into them. This guide covers what's actually possible, the official processes, and how you can spare your own loved ones the same difficulty. It's written with the understanding that you may be reading it at a hard time.
First Steps
- Gather what you have: the death certificate (you'll need copies; most services require it), any passwords or devices the person left accessible, and legal documents naming you as executor.
- Don't rush to delete anything. Photos, messages, and documents may be irreplaceable and hard to recover once gone. Access and preserve before removing.
- Check for a password manager or written records. Many people leave a list, or a manager with emergency access set up. This is by far the easiest path when it exists.
The Major Platforms' Processes
The big services have specific, if bureaucratic, procedures:
- Google (Inactive Account Manager): If your relative set this up in advance, chosen contacts get access after a period of inactivity, the smoothest option. Otherwise, Google has a request process for next of kin, requiring documentation, with no guarantee of full access.
- Apple (Legacy Contact / Digital Legacy): Apple lets users name Legacy Contacts who, with a death certificate and an access key, can retrieve the iCloud data. Without a Legacy Contact, access is very difficult due to Apple's encryption.
- Facebook and Instagram: Accounts can be memorialized (frozen as a tribute) or deleted. A designated Legacy Contact (Facebook) can manage a memorialized profile. Requests require proof.
- Microsoft, Yahoo, and others: Each has a next-of-kin process; expect documentation requirements and varying outcomes.
Notice the pattern: accounts where the person planned ahead (legacy contacts) are far easier than those where they didn't. That's the central lesson for your own preparation.
Practical Priorities
- Stop recurring charges: subscriptions and services keep billing. Cancel through the accounts or the card issuer.
- Preserve memories: download photos, videos, and messages you want to keep before any account is closed.
- Secure financial and sensitive accounts: notify banks and close or transfer as the estate process requires; watch for fraud, as scammers target the recently deceased.
- Handle email carefully and last: it's the recovery key to other accounts, so preserving access to it (where legally permitted) can help with everything else.
The single kindest thing anyone can do for their family is set up legacy contacts and leave an accessible record of their accounts. It turns weeks of bureaucratic heartache into a manageable afternoon.
A Note on 2FA and Encryption
The same protections that kept your relative's accounts safe (2FA, encryption, strong passwords) now stand between you and their data. This isn't a flaw; it's the security working as designed. It's also why the official legacy processes exist, and why they require legal proof: services must balance family access against protecting the deceased from impersonation. Where your relative left recovery codes or a password manager with emergency access, use those first. Where they didn't, the platform processes above are the legitimate route; avoid shady "account recovery" services, which are often scams.
Preparing Your Own Digital Legacy (The Real Takeaway)
Spare your family this ordeal. It takes an hour:
- Set up legacy contacts on Google (Inactive Account Manager) and Apple (Legacy Contact), and a Facebook Legacy Contact.
- Use a password manager with emergency access (Bitwarden, 1Password both offer it), naming a trusted person who can request access after a waiting period.
- Leave a written record of your important accounts and where to find the keys, stored with your will or estate documents, not in a plain file online. Our backup storage guide covers doing this safely.
- Include your primary email and recovery details, since they unlock everything else (our recovery email explainer).
Frequently Asked Questions
Can I just use my relative's saved passwords to log in?
Practically it may work, but legally it's a grey area, and 2FA often blocks it anyway (codes go to their phone). Where you have legitimate authority as executor and access to their devices, preserving data is usually reasonable, but formal transfers (financial, legal) should follow the estate process. When in doubt, consult the estate's legal advisor.
What if there's cryptocurrency involved?
This is the hardest case. Self-custody crypto is controlled by a seed phrase; without it, the funds are permanently inaccessible, no company can help. Search thoroughly for written seed phrases or hardware wallets. Exchange-held crypto follows the exchange's next-of-kin process. This is a stark reminder to document crypto access in your own estate planning.
How long do these processes take?
Highly variable: legacy contacts give access in days; formal next-of-kin requests can take weeks or months and may not fully succeed. Start early, keep copies of all documentation, and be patient with the bureaucracy.
Should accounts be deleted or memorialized?
That's a personal family decision. Memorialization (on social media) preserves a space for remembrance; deletion removes the account entirely. There's no wrong answer, and some families do different things for different platforms. Preserve any content you want to keep before choosing either.
How do I protect against fraud targeting the deceased?
Identity thieves do target the recently deceased. Notify banks and credit bureaus promptly, watch for accounts opened in their name, and secure or close online accounts to prevent takeover. The general breach-response instincts apply (our breach response guide), adapted with the estate's legal authority.
