Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

A digital estate plan is a written set of instructions for your email, photos, social profiles, cloud files, financial logins, subscriptions, websites, digital purchases, and cryptocurrency after your death or incapacity. Make one by inventorying every account, deciding whether each should be preserved, transferred, memorialized, closed, or deleted, assigning the people responsible, activating provider legacy tools, and coordinating those choices with your will, trust, and power of attorney.

Do not assume that naming an executor gives that person your passwords or unrestricted access to private messages. In the United States, state versions of the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) distinguish digital property from electronic communications, and each provider applies its own procedures.

What a digital estate plan controls

Your digital estate includes information and rights that exist online or are needed to reach online services. The list is broader than social media. It can include personal email, text and messaging accounts, cloud documents, photographs, websites and domain names, online banking and payment services, shopping and rewards accounts, subscriptions, digital books or music, software licenses, and cryptocurrency or wallet arrangements.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The Uniform Law Commission describes RUFADAA as governing access to a person’s online accounts when the owner dies or loses the ability to manage them. The model law lets a fiduciary manage certain digital property, including files, web domains, and virtual currency, while restricting access to electronic communications such as email, texts, and social accounts unless the user gave consent in an applicable record. RUFADAA is not a federal rule or a universal grant of access; your state’s enacted version, the account contract, and the facts of the situation control.

Think of the plan as three connected layers:

  • An inventory: what exists, who provides it, and why it matters.
  • Disposition instructions: what should happen to each item.
  • Authority and access: which person may act, what a provider’s tool permits, and where lawful credentials or recovery information are secured.

A will that merely lists an account may not make the account transferable. A provider’s legacy setting may express your wishes but may not replace a legally effective authorization. The plan works when all three layers agree.

Step 1: Build a complete account inventory

Start with a private worksheet and work through your devices, browser password vault, paper statements, app stores, and recurring charges. Record an account even if you rarely use it; an old email address may be the recovery key for a more valuable service.

Category Examples to check Information to record
Email and communications Email, messaging, video-call and forum accounts Provider, address or username, recovery method, and whether messages should be preserved, exported, or closed
Social and community profiles Social networks, professional profiles, gaming communities Memorialization or deletion preference, designated manager, and important content to download
Cloud files and photographs Drive storage, photo libraries, shared folders, backups Folders to preserve, people who should receive copies, and any sharing restrictions
Financial and payment accounts Banking, brokerage, payment wallets, tax portals, insurance portals Institution, account type, paper-record location, beneficiary information, and the fiduciary who should coordinate access
Shopping and rewards Retail accounts, loyalty points, gift-card balances Balances or credits, transferable recipients if allowed, and closure instructions
Subscriptions Streaming, software, news, storage, memberships and automatic deliveries Billing method, renewal date if known, cancellation or continuation decision
Websites and domains Domains, hosting, website administration, newsletters Registrar and host, renewal payment, administrator role, and whether to maintain, sell, archive, or let expire
Digital purchases and licenses Books, music, films, games, apps and software licenses What is valuable, what the contract permits, and what cannot be transferred
Cryptocurrency and wallets Exchange accounts, hardware wallets, custodial and self-custody wallets Wallet type, recovery-key location, tax records, and the person authorized to follow the transfer procedure

For every row, capture the provider, account purpose, approximate value or importance, the preferred outcome, and the location of secure instructions. Do not put a seed phrase, private key, device passcode, or raw password in the worksheet itself. The worksheet should tell the fiduciary where the protected information is stored.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Step 2: Assign people by job, not by habit

One person may not be the right choice for every account. A fiduciary who pays bills and handles property can be different from the relative who should receive family photographs or manage a memorialized profile.

Choose a fiduciary for property and administration

Depending on the document and state law, this may be an executor, trustee, conservator, or agent under a power of attorney. Select someone organized enough to deal with providers, taxes, renewals, and documentation. Tell that person the plan exists and explain how to reach the secured instructions.

Choose content recipients or account managers

Specify who should receive photographs, writing, business files, or domain information. A recipient does not automatically become an administrator. For example, a family member may receive an exported photo archive while the executor handles the cloud contract and payment account.

Confirm willingness and backups

Ask each person before naming them. Record a successor if the first choice cannot serve. Review conflicts of interest: a business partner may need operational files, while a family member may be more appropriate for personal correspondence.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Step 3: Decide what should happen to each account

Use one disposition for each account rather than a general instruction such as “give my digital assets to my family.” The following choices cover most situations:

Disposition When it fits Instruction to write
Preserve Photos, records, creative work, tax files, or a business site have continuing value Identify the files, recipient, export format if important, and retention period
Memorialize A social profile should remain visible as a remembrance Name the permitted manager and state what public updates, if any, are appropriate
Close A service has no lasting value or creates an ongoing cost Cancel billing, download needed records, then close the account
Delete Privacy, safety, or personal preference outweighs preservation Identify the account and the point at which deletion should occur
Transfer where permitted A domain, business account, or transferable balance can lawfully move to another person Name the recipient and note contract or provider limits

Separate personal communications from ordinary files. You may want photographs preserved but email deleted, or a website maintained while private messages remain inaccessible. Write those choices account by account.

Step 4: Activate provider-level legacy controls

Provider tools are useful because they record your preference while you are able to set it. They are not interchangeable: one may trigger after inactivity, another after verified death, and another may only allow management of a memorialized page.

Provider tool Trigger What it can do Important boundary
Google Inactive Account Manager A period of inactivity selected by the account holder Notify or share selected data with up to ten contacts; the user chooses all or specific data types and may configure account deletion after the inactivity period Some information is not shareable; Google does not provide passwords or other login details in deceased-account requests
Apple Legacy Contact Death verified through an access key and death certificate Request eligible account data, which may include photos, messages, notes, files, and device backups Does not provide passwords or passkeys in iCloud Keychain, and excludes purchased movies, music, books, subscriptions, and other listed categories; documentation varies by country or region
Facebook legacy contact Profile has been memorialized after notification of death Write a pinned post, respond to new friend requests, update profile and cover photos, download certain shared information if the setting permits, or request deletion of the memorialized account Cannot log in, read private messages, change older posts, or remove friends

Google: plan for selected data, not a password handoff

Google describes Inactive Account Manager as “a way for users to share parts of their account data or notify someone if they’ve been inactive for a certain period of time.” Open the Google Account controls, find Inactive Account Manager, choose the inactivity period, add up to ten recipients, and select the data categories each recipient may receive. Decide separately whether the account should be deleted after the process runs.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use a real email address for each recipient and tell them that a notification may arrive only after the selected inactivity trigger. An inactivity trigger is not proof of death: a person may be traveling, ill, or unable to sign in. For that reason, combine this setting with your legal documents and a review process.

Google also accepts requests from family members or representatives after a user’s death. It says requests are reviewed carefully and that it cannot provide passwords or other login details. Your plan should therefore identify the secured credential or recovery-information location rather than promising that Google will disclose a login.

Apple: give the contact the access key and the required proof

Apple’s Legacy Contact feature lets an account holder designate one or more people. The designated person needs the access key created when the feature is enabled and a death certificate to request eligible data. Depending on the account and region, eligible material can include photographs, messages, notes, files, and device backups.

The contact cannot use the feature to obtain iCloud Keychain passwords or passkeys. Apple also lists purchased movies, music, books, subscriptions, and other excluded account information. Store the access key where the named contact and fiduciary can locate it, but keep it separate from an unsecured worksheet. Check the current Apple documentation for the relevant country or region because requirements differ.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Facebook: choose memorialization or deletion

A Facebook legacy contact does not receive a login. After the profile is memorialized, the contact can perform only the actions Facebook allows, such as posting a pinned message, responding to new friend requests, updating profile and cover images, downloading certain shared information when the account setting permits, or requesting deletion.

The contact cannot read private messages, change older posts, remove friends, or sign in as the deceased person. If you prefer no memorialized profile, use Facebook’s setting that requests deletion after death and document that choice alongside the name of your fiduciary.

Step 5: Coordinate the plan with legal documents

Ask an estate-planning attorney licensed where you live to review your will, trust, and power of attorney together with the inventory. The American Bar Association notes that a representative’s access can depend on a provider’s online tool or authorization in a will under applicable law. Your attorney can determine whether your state’s RUFADAA enactment requires express consent for electronic communications and how that language should interact with other provisions.

Give the attorney a categorized list, not a file containing passwords. Discuss:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Who may manage digital property during incapacity and after death.
  • Whether the fiduciary may request, copy, archive, or delete electronic communications.
  • Who receives personal files, business records, domains, and cryptocurrency.
  • How conflicts between a provider setting and an estate document should be handled.
  • Whether a business, joint account, foreign service, or regulated financial account needs separate authority.

An executor’s appointment alone does not guarantee access to every message or credential. Provider terms, privacy laws, authentication requirements, and the applicable state’s law still matter. Cross-border accounts, cryptocurrency, and business systems deserve specific legal and tax advice.

Step 6: Secure credentials and recovery information

The plan should make lawful access possible without turning your will into a password list. The American College of Trust and Estate Counsel recommends using a password manager and an emergency password kit for digital assets.

Use a protected credential system

Keep passwords, recovery codes, device passcodes, cryptocurrency seed phrases, and private keys in a reputable password manager or another encrypted method. Use its emergency-access or designated-contact function only after understanding its waiting period, proof requirements, and ability to deny or revoke access.

Separate the map from the secrets

Your inventory can state “recovery information is in the sealed emergency kit in the safe” without exposing the secret itself. Keep a current copy of the location instructions where the fiduciary can find them. Do not file raw passwords, seed phrases, or passkeys in a publicly accessible will or an ordinary cloud document.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Record devices and two-factor recovery

List phones, computers, hardware security keys, authenticator apps, backup codes, and the location of charging or unlock instructions. A provider may require a code from a device that is no longer active. Include a lawful method for the fiduciary to reach the recovery channel without guessing.

Step 7: Store, test, and maintain the plan

  1. Choose the storage location. Keep the inventory and location instructions in a secure place that the fiduciary can access, such as an encrypted vault, a safe, or an attorney’s protected file system.
  2. Tell the right people that it exists. Explain the roles, the location of the instructions, and the difference between receiving files and administering accounts.
  3. Test the workflow without exposing secrets. Confirm that the named contact can find the access key, emergency instructions, or legal-document reference. Do not perform a live deletion or memorialization test on a real account.
  4. Update after major changes. Revisit the plan after marriage, divorce, a move, a change in executor or agent, a new business, or the opening of an important account.
  5. Review it periodically. Verify that contacts, recovery methods, payment details, domains, subscriptions, and provider settings still match your wishes. Google allows Inactive Account Manager settings to be edited or turned off; platform labels and procedures can change, so check the current help documentation when you review.

What happens when a fiduciary needs access

After death or incapacity, the fiduciary should first secure devices and prevent automatic deletion or renewal where appropriate. The next steps usually are:

  1. Locate the estate documents, inventory, and secured credential instructions.
  2. Identify which provider tool has already been activated and follow its proof or access-key process.
  3. Request records from providers using the documents they require, such as proof of death, appointment, or authority.
  4. Separate property management from communications access. A request for cloud files or a domain does not automatically authorize reading email or private messages.
  5. Preserve records needed for taxes, litigation, business continuity, or family instructions before closing an account.
  6. Cancel payments and subscriptions only after checking for records, refunds, domain renewals, or services that must remain active.

Keep a log of requests, responses, dates, and files received. If a provider denies access, do not bypass security by impersonating the account holder. Ask the attorney handling the estate what authority or court process is available.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Common mistakes and how to correct them

“My will lists the account, so my executor can log in.”

Why it fails: Listing an account identifies an asset but may not grant access to communications or override a provider contract.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Correction: Add legally appropriate authorization through an attorney, activate the provider’s tool, and document the secured credential location.

“I gave one person every password.”

Why it fails: One person may not be suitable for financial, family, business, and private communications decisions, and a static list becomes dangerous when passwords change.

Correction: Assign roles and use a protected password manager or emergency kit with a maintained location guide.

“A legacy contact can read everything.”

Why it fails: Apple, Google, and Facebook each limit access differently. Facebook’s contact cannot read messages; Apple excludes passwords and passkeys; Google does not hand over login details.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Correction: Write the exact data or action expected from each provider and plan separately for excluded material.

“Inactivity proves death.”

Why it fails: Travel, illness, a lost device, or a forgotten account can trigger an inactivity workflow.

Correction: Select an inactivity period carefully, add a notification recipient, and align the setting with your fiduciary and legal documents.

“Cryptocurrency is covered by a general digital-assets paragraph.”

Why it fails: Custodial exchange access, self-custody wallets, hardware devices, seed phrases, taxes, and transfer instructions present different risks. Losing a recovery key can make the asset unreachable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Correction: Identify the wallet type, secure the recovery material separately, name the person who understands the procedure, and obtain jurisdiction-qualified legal and tax advice.

“I never need to review the plan.”

Why it fails: Contacts change, subscriptions renew, domains expire, recovery methods are replaced, and provider features evolve.

Correction: Review after every major life change and on a regular calendar schedule.

A practical one-page worksheet

For each account, use a row with these fields:

Field What to enter
Provider and account identifier Service name, username or email, and the account’s purpose
Asset type Communication, file, photograph, financial account, domain, subscription, purchase, or wallet
Disposition Preserve, memorialize, close, delete, or transfer where permitted
Responsible person Fiduciary, content recipient, memorial manager, or successor
Provider setting Legacy contact, inactivity manager, memorialization, deletion request, or no available tool
Required proof Access key, death certificate, appointment document, identity proof, or other provider requirement
Secure-instruction location Where the password-manager entry, recovery code, device, or key is protected
Review date Next check and the event that should prompt an earlier update

Keep the worksheet free of raw secrets. Its purpose is to give the fiduciary a reliable map, while the protected credential system supplies only the access that is lawful and necessary.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Final checklist before you sign or store the plan

  • Every email, cloud, social, financial, shopping, subscription, domain, purchase, and cryptocurrency category has been considered.
  • Each account has a specific outcome and a named responsible person.
  • Fiduciary, family, business, and memorial roles are separated where appropriate.
  • Google Inactive Account Manager, Apple Legacy Contact, Facebook memorialization or deletion, and other available controls match the written instructions.
  • Your attorney has reviewed authority for digital property and electronic communications under the law where you live.
  • Passwords, passkeys, recovery codes, device access, and cryptocurrency keys are secured outside the will and worksheet.
  • The fiduciary knows where the instructions are and what documentation providers may require.
  • A review date is scheduled, with earlier review after marriage, divorce, relocation, a change in fiduciary, or a major new account.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.