[{"data":1,"prerenderedAt":86},["ShallowReactive",2],{"watch-digital-estate-planning-online-accounts-after-death":3},{"id":4,"title":5,"author":6,"blogbody":7,"body":8,"category":15,"ctaLabel":16,"ctaUrl":17,"date":18,"description":19,"extension":20,"featured":21,"image":22,"lastReviewed":18,"meta":23,"navigation":24,"outboundlinks":25,"path":26,"reviewStatus":27,"seo":28,"seoTitle":29,"sources":30,"stem":70,"tags":71,"videos":77,"youtubelinks":25,"__hash__":85},"blog\u002Fblog\u002Fdigital-estate-planning-online-accounts-after-death.md","Give Your Family a Way Into the Digital Life You Leave Behind","Nick DiVito","## Executive summary\n\nYour family can inherit your phone and still have no way into the life you kept on it.\n\nThe photos might be in iCloud, while your tax records sit in an email account nobody else uses. A recording your family would love to keep could exist only on that locked phone. Even someone who knows you well can struggle to figure out where to start.\n\nA password list helps with part of the problem. Your family also needs to know which accounts matter and how they're allowed to use them. A login can still ask for a code from the phone they can't open.\n\nYou can work through this while you're here to explain it. Decide what you want someone to keep, what you'd rather leave private, and where they'll find the instructions. Include a plan for being alive but unable to respond: bills and business obligations won't necessarily wait for a feature built around a death certificate.\n\nI'd start with one collection, such as the family photos, and one person who should receive it. Get that working before trying to document every account you've ever opened.\n\n## Start with what your family will need to find\n\nThink about the person who will sit down to sort this out. They may know which bank you use. Do they know which email receives its notices? Which account holds the family photos? Whether a folder on your laptop contains originals or only shortcuts to cloud files?\n\nWrite down which service holds each important collection and which email identifies the account. Include where the instructions and required keys are kept. The person following this needs a place to begin that doesn't depend on asking you.\n\nWork out permission separately with your estate attorney and the provider. Someone may have authority to handle your affairs and still be unable to unlock a device. They may also be able to see information they don't own or aren't authorized to use. Decide what they should recover and where they'll keep it.\n\nLook closely at your phone. If it holds your email session and authenticator, losing access to it can also block access to accounts elsewhere. Leaving the phone to someone doesn't remove its passcode.\n\nApple cannot remove a device passcode without erasing the device. Removing Activation Lock lets someone reuse an iPhone, but it doesn't recover what was stored on it. Check [Apple's deceased-account guidance](https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F102431) for the available request routes and required documentation.\n\nCheck the files themselves before relying on a cloud feature. Open some older photos and recent additions from the backup or cloud account. Check an important document too. It's easy to assume a folder has been syncing when the files you care about never reached it.\n\n## When would someone actually get access?\n\nApple, Google, and Bitwarden offer different ways to prepare. The first thing I'd check is what has to happen before the other person can use each one.\n\n- Apple Legacy Contact requires a request after your death, with the access key and documentation Apple reviews. It covers eligible account data.\n- Google Inactive Account Manager waits until your account has been inactive for the period you selected, then notifies contacts or shares selected data.\n- Bitwarden Emergency Access starts when a contact requests access. You can approve the request, or it can go through after the waiting period. View and Takeover permissions grant different levels of access to your individual vault.\n\nKeep the relevant [Apple](https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F102678), [Google](https:\u002F\u002Fsupport.google.com\u002Faccounts\u002Fanswer\u002F3036546), or [Bitwarden](https:\u002F\u002Fbitwarden.com\u002Fhelp\u002Frequest-and-grant-emergency-access\u002F) instructions with your plan so the recipient can follow the current process.\n\nWaiting for family photos may be manageable. Waiting to run payroll or handle an urgent household bill is a different problem. Give the authorized backup person a supported way to do those tasks while you're alive, before they need it. An inactivity timer could leave them waiting far too long.\n\n## Apple Legacy Contact does not include your passwords\n\nApple Legacy Contact lets a person you choose request certain iCloud and backup data after your death. Your iCloud Keychain passwords and passkeys are excluded. If that's where you keep your logins, you'll need to plan for those accounts separately.\n\nRead [Apple's data-access list](https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F103128) before choosing a contact. Depending on what you store, they could receive messages, mail, health information, notes, and files alongside the photos. Purchased media, subscriptions, and payment information are excluded.\n\nYou might trust someone to keep the family pictures without wanting them to read your private conversations. For that job, a separate copy of the pictures may be enough.\n\n### Make sure the other person has the key\n\nFollow [Apple's illustrated setup instructions](https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F102631). On a supported iPhone or iPad, open Settings, select your name, then Sign-In & Security and Legacy Contact. Add the intended person and complete the access-key handoff.\n\nIf you use Apple's Messages invitation, have the recipient accept it and confirm that the key appears in their settings. Otherwise, arrange a protected copy they can retrieve. Do not leave the only copy behind your own locked phone or in a cloud account they cannot open.\n\nStore the key somewhere protected and tell the intended person how to retrieve it. A physical copy can work if they can reach it when needed. Forwarding copies around the family makes it harder to keep track of who has access.\n\n### Save what you want to keep\n\nApple's approved legacy access lasts three years from approval of the first Legacy Contact request, not three years from death. The recipient needs to preserve the content they intend to keep. Advanced Data Protection adds an Apple-device sign-in requirement for web access; the [recipient instructions](https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F102678) cover it.\n\nInclude that deadline in the instructions. The recipient needs time to download and store what they want to keep.\n\n## Google Inactive Account Manager waits for inactivity\n\nIn [Google's Inactive Account Manager](https:\u002F\u002Fsupport.google.com\u002Faccounts\u002Fanswer\u002F3036546), choose your contacts and what data each should receive. Check whether you've selected data sharing or only a notification; a notification by itself won't give them the files.\n\nGoogle checks activity such as sign-ins, Gmail use, and Android check-ins. That means continued account use could delay the trigger, even when the family is waiting for access.\n\nGoogle does not notify contacts during setup. Tell them yourself and confirm their details. An unfamiliar download email months later should not be their first introduction to the arrangement.\n\nWrite down the waiting period, selected data, and any deletion choice somewhere outside the account. The recipient gets the sharing or notification arrangement you configured, rather than your normal login. Make a separate plan for records they'll need sooner.\n\n## Check what your password manager will share\n\nA password vault can contain far more than the few accounts you want someone to handle. Open yours and look through it before choosing an emergency contact.\n\nBitwarden's [Emergency Access](https:\u002F\u002Fbitwarden.com\u002Fhelp\u002Femergency-access\u002F) has two permissions. View exposes the items in your individual vault, including passwords and attachments. Takeover replaces your master password and removes the Bitwarden two-step login methods you previously configured.\n\nView access still reveals passwords and lets someone read documents they could copy. Even without permission to edit your vault, they can try a visible password at the bank or another service. You're granting access to the individual vault as a whole, so check for anything you wouldn't want that person to receive.\n\nKeep company credentials in the company's approved arrangement. A household emergency contact may have no reason to hold those logins.\n\n### Confirm the contact before you rely on the setup\n\nYou need Bitwarden premium access to add emergency contacts; the recipient can use a free account on the same server. Some managed-account policies prevent the feature. Check the [contact setup guide](https:\u002F\u002Fbitwarden.com\u002Fhelp\u002Fadd-and-manage-trusted-emergency-contacts\u002F) for your account.\n\nSetup requires your invitation, the recipient's acceptance, and your confirmation. Verify the displayed fingerprint phrase with the intended person as the instructions direct. Check the final contact status, permission, and wait time together.\n\nChoose a wait time that gives you a chance to reject an accidental or improper request without leaving the contact waiting too long in an emergency. Protect their account too: it now provides a route into yours.\n\n### Keep recovery separate from routine sign-in\n\nBitwarden's [request process](https:\u002F\u002Fbitwarden.com\u002Fhelp\u002Frequest-and-grant-emergency-access\u002F) doesn't require a death certificate. Talk with the contact about when they should request access, including what to do if you're alive but can't respond.\n\nKeep normal multifactor authentication enabled. Vault access does not guarantee access to every service: a separate hardware key, unavailable phone, or provider review may still block a login. Bitwarden's takeover changes concern Bitwarden authentication, not every bank or account in the vault.\n\nCheck your current password manager's options before switching products. Our [password-manager article](\u002Fblog\u002Fdo-you-need-paid-password-manager) covers choosing a vault and setting up recovery, including which paid features are worth having.\n\n## Keep legal authority and account settings aligned\n\nA working password won't tell your family whether they're allowed to move money or read private correspondence. Settle those questions with your estate attorney while you can explain what you want.\n\nGive your estate attorney the account categories, intended recipients, provider settings, and privacy choices. Ask who may act during incapacity, who may act after death, and whether the documents and online directions agree. They do not need a spreadsheet of live passwords to start that discussion.\n\nOnline choices can also affect what a provider discloses. In Kansas, [statute 58-4804](https:\u002F\u002Fwww.kslegislature.gov\u002Fb2025_26\u002Flaws\u002F058_000_0000_chapter\u002F058_048_0000_article\u002F058_048_0004_section\u002F058_048_0004_k\u002F) gives qualifying online directions that users can change or delete at any time priority over conflicting directions in a will, trust, power of attorney, or other record. The rule concerns disclosure of digital assets. Ask your attorney how the law in your state applies to your choices and who owns the underlying assets.\n\nAuthority can also change when a person dies. The Office of the Comptroller of the Currency explains that a [power of attorney generally expires at the account holder's death](https:\u002F\u002Fwww.helpwithmybank.gov\u002Fhelp-topics\u002Fbank-accounts\u002Fopening-closing-inactive-bank-accounts\u002Fclosing-a-bank-account\u002Fclosing-poa.html), subject to state law and its terms. Confirm the appropriate route with counsel and the institution instead of continuing to use the deceased person's credentials.\n\n### Keep passwords out of the will or trust itself\n\nA filed will may become publicly viewable, as the [Orange County court's wills guidance](https:\u002F\u002Fwww.occourts.org\u002Fself-help\u002Fself-help-probate\u002Fwills-trusts) explains. Trusts are generally more private, though beneficiaries and heirs can obtain copies in circumstances described in the court's [living-trust guidance](https:\u002F\u002Fwww.occourts.org\u002Fself-help\u002Fself-help-probate\u002Fmedical-financial-end-life\u002Fliving-trusts).\n\nPasswords also change. Putting them in a legal document leaves old copies circulating through offices long after you've changed the login.\n\nKeep the passwords and recovery material in separate protected storage. Agree with your attorney on how the authorized person should find it and when they may retrieve it. If you use a safe or safe-deposit box, check who can legally open it and how they'll do that.\n\n## Build one handoff your family can actually follow\n\nHere's an example. You want your adult child to keep the family photos and home videos. You don't want to give them your private messages or work files along with the pictures.\n\nIdentify the cloud library and its backup, then give your child a current copy of the collection you've chosen. Have them open some older photos, a recent addition, and a video from their own copy. You can both see what arrived and whether it works.\n\nWrite down where that collection lives and how you'll keep it updated. Include the provider's recovery process for anything that still depends on your account, along with the location of any required key. Keep these instructions somewhere your child can reach without your phone. Record when you checked the setup together.\n\nA shared album link may still depend on your account. Check that your child has the actual files and can open the downloaded copies. Then agree on how you'll add future photos; a copy that worked today won't include next year's birthdays on its own.\n\nApply the same approach to a few important records. Keep a private index with the service and account identifier, who should receive the records, and how they can retrieve them. Note any required documents, where the key is stored, and when you last checked the arrangement. Store passwords, recovery codes, and identity-document scans separately. The index itself deserves privacy because it maps your accounts and relationships.\n\nCheck for one easy-to-miss mistake: instructions encrypted with a key stored only in the vault they're supposed to help someone recover.\n\n### Walk through it together\n\nAsk the intended person to find the instructions using their own device. Have them locate the official provider page and any key they've saved. Check their emergency-contact status together and talk through when they're authorized to act. You'll learn more from watching them try than from asking whether they remember your conversation.\n\nKeep the walkthrough to those checks. Leave authentication on and avoid triggering a live vault takeover or submitting a death request as a test. Record what you verified and which steps will still require the provider's review.\n\nRevisit the arrangement after changing your phone, primary email, vault, trusted person, or estate documents. Also put a recurring review on your calendar. Confirm the people still agree to the role and can find the instructions.\n\n## Recover the records before closing accounts\n\nSurvivors often face a pile of subscriptions and bills. Closing everything quickly can destroy the route to information they still need.\n\nGoogle warns that once you close a deceased person's account, it cannot process a later request for its contents. When a content request is already underway, complete it before submitting subsequent requests. Its [deceased-user request page](https:\u002F\u002Fsupport.google.com\u002Faccounts\u002Ftroubleshooter\u002F6357590) also explains that Google does not provide passwords or login details.\n\nName one person to coordinate account closures. Ask relatives to check with that person before wiping a device, cancelling a phone number, or deleting email and storage. The account they're about to close may still receive a recovery code for something else.\n\nReport suspicious activity promptly through official channels. Ask the institution how to protect the account and meet any notice requirements while preserving needed records. If there's no plan in place, start with the provider's deceased-account process and your estate attorney.\n\n## Give business accounts their own plan\n\nOwners often mix personal and business dependencies without noticing. A personal email handles the domain renewal. One phone receives the payroll login code. The only administrative account belongs to the founder.\n\nIdentify one operation that stops when you are unavailable. Arrange a separate named account for the authorized backup person, limit its permissions, and have that person demonstrate the approved task. Record who can recover administrative access and approve changes. Keep customer information and company secrets out of a household archive.\n\nSomeone who inherits an interest in the business may have no intention of becoming its technical administrator. Work with the company's advisers to decide who can approve account changes and who will carry them out. Give those people the access their role requires.\n\n## Choose one thing to sort out this week\n\nPick the photos or records you'd be most upset to lose. Sit down with the person you want to receive them and check whether they can find and open what you've prepared. Write down whatever they had to ask you. Those questions are the gaps to fix first.\n\nUse our [Personal Cyber Foundations guide](\u002Fresources\u002Fpersonal-cyber-foundations) to work through your other accounts, backups, and shared access. Keep its worksheets private; do not submit secrets or sensitive records to Trawvid Sec.\n\nThrough the [Personal Cyber Risk Review](\u002Fservices\u002Fpersonal-cyber-risk-review), Trawvid Sec works through the accounts and devices your plan depends on. We check how recovery works, who has shared access, and where personal accounts also control business information. We do not need or retain your passwords. Your estate attorney handles legal authority and documents.\n\n[Book a 30-minute consultation](https:\u002F\u002Fcalendar.app.google\u002FqT8vtwaEDG2Pt51o8) to work through the access and recovery gaps before your family has to navigate them without you.",{"type":9,"value":10,"toc":11},"minimark",[],{"title":12,"searchDepth":13,"depth":13,"links":14},"",2,[],"General Cybersecurity","Book a 30-minute consultation","https:\u002F\u002Fcalendar.app.google\u002FqT8vtwaEDG2Pt51o8","2026-10-27","Plan who can recover your photos, records, and online accounts after death. Compare Apple, Google, and vault access without exposing your whole digital life.","md",false,"\u002Fimg\u002Fblog\u002Fblog-personal-cyber.jpg",{},true,null,"\u002Fblog\u002Fdigital-estate-planning-online-accounts-after-death","Current",{"title":5,"description":19},"Digital Estate Planning: Online Accounts After Death",[31,34,37,40,43,46,49,52,55,58,61,64,67],{"label":32,"url":33},"Apple: Add a Legacy Contact","https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F102631",{"label":35,"url":36},"Apple: Data a Legacy Contact can and cannot access","https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F103128",{"label":38,"url":39},"Apple: Request access as a Legacy Contact","https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F102678",{"label":41,"url":42},"Apple: Deceased-account requests and device limitations","https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F102431",{"label":44,"url":45},"Google: Inactive Account Manager","https:\u002F\u002Fsupport.google.com\u002Faccounts\u002Fanswer\u002F3036546",{"label":47,"url":48},"Google: Requests regarding a deceased user's account","https:\u002F\u002Fsupport.google.com\u002Faccounts\u002Ftroubleshooter\u002F6357590",{"label":50,"url":51},"Bitwarden: Emergency Access overview","https:\u002F\u002Fbitwarden.com\u002Fhelp\u002Femergency-access\u002F",{"label":53,"url":54},"Bitwarden: Add and manage trusted emergency contacts","https:\u002F\u002Fbitwarden.com\u002Fhelp\u002Fadd-and-manage-trusted-emergency-contacts\u002F",{"label":56,"url":57},"Bitwarden: Request, grant, and revoke emergency access","https:\u002F\u002Fbitwarden.com\u002Fhelp\u002Frequest-and-grant-emergency-access\u002F",{"label":59,"url":60},"Kansas 58-4804: Directions for disclosure of digital assets","https:\u002F\u002Fwww.kslegislature.gov\u002Fb2025_26\u002Flaws\u002F058_000_0000_chapter\u002F058_048_0000_article\u002F058_048_0004_section\u002F058_048_0004_k\u002F",{"label":62,"url":63},"OCC: Power of attorney after an account holder's death","https:\u002F\u002Fwww.helpwithmybank.gov\u002Fhelp-topics\u002Fbank-accounts\u002Fopening-closing-inactive-bank-accounts\u002Fclosing-a-bank-account\u002Fclosing-poa.html",{"label":65,"url":66},"Orange County Superior Court: Wills and trusts","https:\u002F\u002Fwww.occourts.org\u002Fself-help\u002Fself-help-probate\u002Fwills-trusts",{"label":68,"url":69},"Orange County Superior Court: Living trusts and privacy","https:\u002F\u002Fwww.occourts.org\u002Fself-help\u002Fself-help-probate\u002Fmedical-financial-end-life\u002Fliving-trusts","blog\u002Fdigital-estate-planning-online-accounts-after-death",[72,73,74,75,76],"Digital estate planning","Account recovery","Personal Security","Password managers","Business continuity",[78],{"title":79,"url":80,"description":81,"uploadDate":82,"duration":83,"thumbnailUrl":84,"watchPage":24},"What Happens to Your Online Accounts When You Die?","https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=c4fenrXoOqs","Nick DiVito explains digital inheritance through Apple Legacy Contact, Google Inactive Account Manager, and Bitwarden Emergency Access, including privacy limits and a practical family handoff.","2026-10-27T12:00:04-05:00","PT12M10S","https:\u002F\u002Fi.ytimg.com\u002Fvi\u002Fc4fenrXoOqs\u002Fmaxresdefault.jpg","dEn7OLe8-l8Wp0bo0EUIGPerg2EyBV92gz58H0aNGdg",1793125836320]