When someone dies, their physical possessions pass through a well-understood legal process. Their digital accounts mostly do not. Terms of service typically grant a personal, non-transferable licence rather than ownership, platforms are legally cautious about granting access to anyone other than the account holder, and the practical result is that families spend months trying to reach photos, documents, and money that nobody can find.
Passkeys and hardware-backed authentication improved security and made this harder. Planning for it takes an afternoon.
This is general information, not legal advice. Estate law varies by jurisdiction; consult a qualified professional.
What changed in 2026
- Platform legacy tools became more capable. Major providers expanded designated-contact features, which are far more reliable than any instruction left elsewhere.
- Passkey adoption complicated access. Removing shared passwords removed the informal path families relied on, making documented planning genuinely necessary.
- Crypto losses stayed the hardest category. Self-custodied assets with no documented recovery remained permanently unrecoverable, and the accumulated total kept growing.
- Fiduciary access law matured unevenly. Legal frameworks giving executors defined authority over digital assets advanced in some jurisdictions and not others.
What can and cannot pass on
| Asset type |
Typically transferable |
What to do |
| Purchased media libraries |
No; personal licence |
Do not plan around it |
| Photos and documents in cloud storage |
Yes, via legacy contact or executor process |
Set a legacy contact now |
| Email accounts |
Access varies; often via a formal request |
Legacy contact where offered |
| Social media |
Memorialize or delete; content export varies |
Set the preference in advance |
| Domain names and websites |
Yes; they are property |
Document registrar and renewal |
| Custodial financial and crypto accounts |
Yes, through the provider's estate process |
Note the institution, not the password |
| Self-custodied crypto |
Only with the seed phrase |
Documented recovery path or it is lost |
| Loyalty points and airline miles |
Varies widely by programme |
Check each programme's policy |
Self-custodied crypto is the row that matters most because the failure is total and irreversible. There is no provider to appeal to and no recovery process. Without the seed phrase, the assets simply cease to be accessible by anyone, permanently.
Setting it up
Start with the platform tools, because they are the mechanism that actually works. Major providers offer a designated contact who can request access or receive specified data after death, and configuring that takes minutes per account. It is honoured by the platform, which is more than can be said for instructions in any other document.
Next, use your password manager's emergency access feature. Most offer a trusted contact who can request access, with a waiting period during which you can decline. That covers the accounts without their own legacy tooling.
Then write an inventory — not credentials, an inventory. Which institutions hold accounts, which email addresses they are registered to, where the password manager is, where any hardware keys or crypto recovery phrases are physically stored. Keep this with your estate documents, and tell your executor it exists.
For crypto specifically, the recovery phrase needs a physical, secure, documented location that a named person can find. A safe deposit box or a home safe with the location noted in your estate papers is the common approach.
Never put credentials or seed phrases in the will itself. Wills can become public records during probate, which would publish exactly what you were protecting.
Common mistakes
- Assuming family can just log in. Modern authentication is designed to prevent that, and it succeeds.
- Putting passwords in the will. Probate can make it public.
- Documenting the crypto wallet but not the recovery phrase location. Knowing an asset exists does not make it reachable.
- Never testing emergency access. Configure it and confirm your contact knows they are named and what to do.
- Ignoring the executor's legal authority. Access permission from a platform and legal authority over an estate are separate questions; both matter.
FAQ
Can my executor legally access my accounts?
That depends on your jurisdiction, the platform's terms, and what you documented. Legal frameworks vary considerably, which is why platform legacy tools are the more reliable route.
What happens to subscriptions?
They continue billing until cancelled. Your inventory should list recurring charges so the estate can stop them promptly.
Should I share my password manager master password with a spouse?
Emergency access with a waiting period is generally safer than sharing the master credential outright, and it produces a record of use.
How often should I update this?
Annually, or whenever you open a significant account or change where recovery material is stored.
Where to go next
For securing accounts while you are using them, read passkey migration guide. For reducing what is exposed in the first place, personal AI privacy checklist and data broker opt out.