Digital Estate
By Tim O. · July 29, 2026 · 11 min read
What Happens to Your Online Accounts When You Die?
Nearly half of Americans, 48%, have left no instructions at all for what should happen to their digital accounts when they die. Even among people who have gone to the trouble of writing a will, almost a quarter never addressed their online life. And here is the part most families discover at the worst possible moment: knowing the password is not the same as having the right to use it.
One widely shared account of a family's experience captures it: after a death, Apple released the photos but nothing else. Google released dates, recipients, and subject lines of emails, but not one message's contents. The phone carrier refused to unlock the phone entirely. Every company followed its own rules, and none of those rules were written for grieving families.
I spend my time writing about keeping people out of your accounts. This article is about the opposite problem, and it is the one almost nobody plans for: making sure the right person can get in when you no longer can. The fix takes one evening. What happens without it can take years, or be permanent.
What actually happens, account by account
Your email: the frozen master key
Email matters more than any other account because every password reset flows through it. When the owner dies, it freezes. Providers will not hand over the login, and privacy law restricts them from releasing message contents without prior authorization. Families are routinely offered metadata at most. And while that inbox sits locked, every account attached to it becomes unreachable too: the utility bills, the airline miles, the brokerage statements arriving to an address no one can open.
Your photos and files: sentimental value, legal limbo
Decades of family photos increasingly live in exactly one place: a cloud account behind one password. Platforms differ wildly in what they release. Some will provide photos with the right paperwork, others require court orders, and the paperwork itself, death certificates, proof of legal authority, sometimes both birth and death certificates, takes months while storage subscriptions quietly lapse and auto-delete timers run.
Your money: the accounts nobody knew existed
Estates routinely lose track of digital financial assets because the paper trail that used to expose them, statements in the mailbox, no longer exists. Online-only bank accounts, payment apps with balances, reward points worth real money. And the most unforgiving of all: cryptocurrency. If nobody has the private keys or the recovery phrase, that money is gone. Not delayed, not tied up in probate. Gone, permanently, with no company to appeal to.
Your social media: running forever, unattended
Social accounts do not close themselves. They keep running indefinitely, which makes deceased people's profiles a favorite target for hijackers, since nobody is watching the login alerts. Facebook can memorialize an account or delete it, but the smooth version of that only works if you chose a legacy contact while alive. Without one, your family faces the paperwork process during the hardest weeks of their lives.
Your subscriptions: the estate that keeps paying
Streaming, storage, software, memberships: they renew until someone finds and cancels each one. Executors describe playing detective for months, watching a bank statement to reverse-engineer a life's subscriptions one charge at a time.
Why "they'll just use my password" fails
This is the plan most people are silently relying on, and it has three problems. First, terms of service: nearly every platform prohibits anyone else from logging in, even a spouse, even after death, so an account accessed this way can be flagged and locked at any moment. Second, the law: US privacy statutes restrict providers from disclosing account contents without authorization, which is why they stonewall families by default. Third, and most practically: your family cannot use passwords they cannot find. If your logins live in your head or scattered across sticky notes, the plan fails on discovery alone. The average person has over a hundred accounts. Write down every one your family would need, honestly, from memory. That gap is the plan failing in advance.
The one-evening fix: five steps
Do them in order. Steps 1 and 2 do most of the work.
-
Put every account in a password manager
This is the foundation, because it solves the discovery problem: one vault holds every login your family would otherwise spend months hunting for. If your passwords currently live in your memory, your browser, and a notebook, consolidating them is the single highest-value hour of this whole plan. It also fixes your everyday security as a side effect, since the manager gives every account a strong unique password. Our NordPass review covers the one I recommend to most people for this.
-
Set up emergency access
Good password managers, NordPass Premium among them, let you name a trusted person who can request access to your vault. If you do not respond within a waiting period you set, they get in. This is the mechanism that legally and practically hands over the keys without sharing passwords while you are alive. Note one honest caveat from my testing: check that the feature works on the devices your trusted person actually uses before relying on it.
The tool for steps 1 and 2
NordPass handles both: every account in one encrypted vault, plus emergency access for the person you choose. There is a free 30-day trial with no card, which is enough time to load your accounts and set your trusted contact.
Try NordPass free for 30 daysAffiliate link. SPG earns a commission at no extra cost to you.
-
Turn on the platform legacy tools
Three take about fifteen minutes combined. Google's Inactive Account Manager lets you decide what happens after a period of inactivity: share selected data with people you name, or delete everything. Apple's Legacy Contact lets a named person access your iCloud data with a key Apple gives you now. Facebook's legacy contact controls whether your profile is memorialized or deleted. These are the official routes, the ones that spare your family the death-certificate paperwork.
-
Write down what is NOT in the vault
Some things do not belong in any online account: your crypto recovery phrases, the master password to the vault itself, the PIN to your phone. Put those on paper, in a sealed envelope, in the same place as your other important documents, and tell your trusted person it exists. Low-tech is the point.
-
Add one line to your will
A sentence directing your executor to your digital estate plan, and authorizing them to access your digital assets, gives the legal cover that platform terms of service otherwise deny. If you have a lawyer, this is a five-minute addition. If you do not have a will at all, you are in the majority, and this is a good excuse to fix that too.
Where to start tonight
The honest starting point is knowing what you actually have. Most people cannot list their own accounts, which means their families certainly cannot. The 30-Minute Digital Life Audit walks you through finding every account, password, and gap in one sitting, and the finished audit doubles as the exact inventory your family would need. It is $9 and it turns this article's advice from a good intention into a document. Pair it with the 30-minute security audit checklist and one evening covers both problems: keeping strangers out, and letting the right person in.
Common questions
Can my family just use my password after I die?
Legally, usually not. Almost every platform's terms prohibit anyone else from logging in, even a spouse, even after death, and privacy law restricts companies from releasing contents without authorization. Families do it anyway when they have the password, but accounts can be flagged and locked, and for financial accounts it can create real legal problems. The safe route is the official legacy tools plus written authorization in your estate documents.
What happens to my email when I die?
It freezes unless you set up a legacy tool. Google's Inactive Account Manager can share chosen data with named people after a period of inactivity, or delete everything. Without it, families typically get metadata at most. Email matters most because every other account's password reset flows through it.
What happens to cryptocurrency when someone dies?
If nobody has the private keys or recovery phrase, it is permanently gone. No company can reset it and no court can recover it. Store the recovery information on paper where a trusted person can eventually reach it.
Do social media accounts get deleted automatically?
No, they run indefinitely, which is why deceased people's accounts get hijacked. Facebook can memorialize or delete an account cleanly if you set a legacy contact in advance; without one, your family faces a paperwork process.
Is a password manager enough on its own?
It is the most useful single piece, because one emergency-access grant covers everything in the vault. Pair it with the platform legacy tools and one authorizing line in your will and you have covered what actually goes wrong.
The kindest hour you'll spend online
Nobody enjoys thinking about this, which is exactly why 48% of people have done nothing. But the work is small and the alternative lands on the people you love, during the worst weeks of their lives, in the form of locked photo albums, frozen inboxes, and money nobody can reach. Start with the inventory: know what you have, get it into one vault, name your person. The Digital Life Audit gets you there in one sitting.
Get the audit · $9Keep reading