digital
What Happens to Your Online Accounts When You Pass Away
By Jason Su ·
Every company sets its own rules, and the differences between them are large. Some let you name someone in advance who can request access after a period of inactivity. Some will only close the account, never hand it over. Some will release the contents if your family can show they are entitled to them. There is no central switch and no single law that settles it, which is why the most useful thing you can do is find out which group your main accounts fall into.
Why there is no simple answer
There is no single rule because two systems pull in opposite directions.
On one side, a company treats your account as theirs — subject to their terms of service, which almost always say the account is personal and non-transferable. On the other side, the law generally supports the idea that the person handling your affairs should be able to reach what you owned, including things that exist only online.
Most states have passed a version of a model law that tries to settle this, and the rules differ from state to state. On top of that, individual companies have their own policies. So the practical answer is always the same: it depends on the company, and the only way to know is to check.
The three things companies do
| What the company does | What it means for your family |
|---|---|
| Names someone you chose | Best case. Some email and cloud providers let you nominate a contact who can request access after the account goes quiet for a set period. You nominate them; they request; the timer runs. |
| Closes the account | Your family can shut it down, but they cannot get inside it. Common with social and subscription services, and it is often the only option offered. |
| Releases content on request | Some providers will hand over the contents if the person asking can show they are entitled to do so, with documentation. This can take weeks. |
A fourth category exists too: smaller services with no process at all. Nobody to call, nothing on the help pages, and no reply to email.
Email is the account that actually matters
If you only look at one thing, look at email.
Email is the reset key to almost everything else. Whoever can open your inbox can typically reset the password on your bank account, your phone, your social accounts, and your subscriptions. That is also exactly why companies guard it more carefully than anything else.
Two practical consequences:
- Set up your email provider’s contact feature if it has one. Many major providers offer a way to nominate someone who can request access after a period of inactivity. It takes about ten minutes.
- Do not treat email as private from whoever handles your affairs. If you have messages you would not want read after you are gone, decide now what to do about them. There is no way to make that call later.
Photos and cloud storage
This is the category families grieve over most, and it is the one most likely to be lost.
Money problems usually have a process attached. A decade of photographs in an account nobody can open simply ends. Storage accounts often have the same inactivity-contact features that email providers do, and they are worth setting up for that reason alone.
See how to leave digital passwords to family for how to make sure the people you chose can actually reach these accounts.
Money, banking, and payment apps
Financial accounts are handled differently, and mostly by the rules that already apply to money: the person handling your estate has authority over what you owned, and institutions have procedures for releasing it.
Two things catch families out:
- Banks do not take a password. Being able to log in does not make someone entitled to the money, and in most cases acting on it would be a serious problem. The estate process is what governs this.
- Payment apps are often forgotten. Balances sitting in a payment app, and cards still attached to subscriptions, are easy to miss because they do not appear in a bank statement.
Social accounts, and the difference between two options
Social platforms generally offer two paths, and the difference matters to families:
- Memorializing keeps the account visible in a changed form so friends can still see it. It usually stops future logins and stops anyone from posting.
- Deleting removes it.
Which one you would want is a personal decision, and it is worth writing down, because your family will otherwise be guessing while grieving. Note also that both paths usually require proof — a link to an obituary or a copy of a document — and neither gives your family access to your private messages.
What your family can actually do
Realistically, the process looks like this:
- Find out what exists. This is the hardest step and the one you can remove entirely by writing things down. Use the Password Log Sheet to record where logins live, never the logins themselves.
- Ask each company. Reach the account-help or bereavement team and ask what they require. Expect identity documents, proof of the account, and sometimes proof of your death — which is where a death certificate copy comes in.
- Wait. These processes are slow and usually run by email.
Phone support is rarely available for this, so an email address that your family can send from — and that will keep working — is genuinely valuable.
The one thing to do this week
Open your main email provider’s settings and look for a contact, legacy, or inactivity option. Set it up. That single step covers the account that unlocks everything else, and it takes less time than reading this page.
What not to do
- Do not put passwords in your will. In many states a will becomes a public document once it is filed, and a list of passwords in a public record is worse than no list at all. Name where your logins are stored, not what they are.
- Do not email a password list to yourself or anyone else. Email is the account most likely to be compromised.
- Do not assume the phone is enough. A locked phone with a password manager on it is a locked vault. Without the master password or recovery code, it stays locked.
- Do not rely on the company doing the decent thing. Some will. Some will only close the account. Plan around the rules that exist rather than the ones you think should.
- Do not list every account. Record the important ones and where the rest are stored. A complete inventory that goes stale is less useful than a short list that is accurate.
Frequently asked
Can my family just log in with my password?
Sometimes they can, practically — until two-factor authentication prompts them for a code that goes to a device they do not have. Whether it is permitted is a separate question: most providers’ terms treat the account as personal and non-transferable, so logging in after a passing can breach those terms. A named contact feature is the route that actually works.
Does my will cover my online accounts?
A will can say what should happen to them, and that is worth doing so the person handling your affairs knows your wishes. It does not give them a password or override a company’s rules. You need both: the instruction in writing, and the access path set up in advance.
What is a legacy contact, and should I set one up?
A legacy contact is a person you nominate with a provider to act on your account after it goes inactive. The exact powers differ enormously between providers — some allow content access, some only account management. Set one up if your provider offers it, and read what the person can actually do before you rely on it.
What about my phone’s passcode?
A phone passcode is a separate lock, and it is the one in front of everything else because it holds your email, your apps, and often your authentication codes. Write down where the passcode is stored — or make sure your trusted contact knows how to get into the phone — and see emergency access in your password manager for the general approach.
Do I need to do this for every account I own?
No. Prioritise in this order: email, banking and payment apps, cloud storage with photos, then your most-used social account. Those four cover the overwhelming majority of what families need and cannot get.
Next step
Start with email today — it is the account that controls the others, and most major providers have a setting for this. Then work outward to photos, money, and social accounts over the next few weeks.
Record what you have set up using the free Checklist Builder, and read digital estate planning 101 for the wider picture of what else needs a plan.
This is general information, not legal or financial advice. Company policies and state rules vary and change frequently — please confirm details with the provider’s own help pages and talk with a licensed professional about your situation.
General information only. Rules vary by state and change over time. Confirm details with the official source before acting. Read the full disclaimer.