Digital Estate Planning: Passwords, Crypto, Social Media, and Online Accounts

Quick answer

Digital estate planning means making sure your family can access — or close — your online accounts, cloud storage, cryptocurrency, social media, and digital files after you die. The main tools: a password manager with an emergency-access feature, written instructions kept with your will (NOT inside the will, which becomes public), platform-specific legacy contact features (Apple, Google, Facebook all offer these), and naming a digital executor in your estate plan. Most US adults have 50-200 digital accounts; without a plan, families often lose access permanently to photos, financial records, and significant cryptocurrency holdings.

Educational guide — not legal or technical advice. Laws around digital assets vary by state and platform terms of service change. Consult a licensed attorney for advice on your specific situation.

Why this matters more than you think

Most American adults have 50 to 200 online accounts. Most have years of personal photos in cloud storage. Many have financial accounts that are paperless. A growing number own cryptocurrency. Some have substantial digital businesses, monetized social media, or content libraries.

When you die without a digital estate plan:

  • Photos and personal files may become permanently inaccessible. Apple, Google, and Microsoft cloud services delete accounts after extended inactivity.
  • Cryptocurrency held in self-custody wallets is permanently lost if no one has the private keys or seed phrases. Estimated $140 billion in Bitcoin alone is permanently lost this way.
  • Online banking and brokerage accounts without paper statements may go unclaimed.
  • Social media accounts may stay live indefinitely as awkward memorials, or get deleted by the platform after extended inactivity.
  • Email accounts containing important records may become inaccessible.
  • Subscriptions keep charging your credit card until someone figures out how to cancel them.
  • Identity theft risk rises sharply for deceased people whose digital footprint isn’t cleaned up.

This isn’t a hypothetical problem. Estate attorneys increasingly tell families: “We can settle your loved one’s estate, but we can’t get into their email.”

Federal law and most state laws now address digital assets — but the rules are complicated:

RUFADAA

The Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) has been adopted by most US states. It establishes a hierarchy:

  1. The user’s specific instructions to the platform (a Facebook Legacy Contact, Google Inactive Account Manager, Apple Digital Legacy)
  2. The user’s instructions in a will, trust, POA, or other estate document
  3. The platform’s terms of service

This means what you set up directly with the platform takes precedence over what’s in your will. If you want to give your family access to your iCloud, the most effective way is to set up Apple’s Digital Legacy feature — not just mentioning it in your will.

Computer Fraud and Abuse Act (CFAA)

A federal law that makes unauthorized access to a computer system illegal. Without explicit authorization, family members technically can’t log into your accounts even after your death.

Terms of Service

Most platform terms of service prohibit account sharing and grant non-transferable rights. This is why platform-specific legacy features matter — they’re the platforms’ explicit authorization for limited family access.

The seven things to handle

A complete digital estate plan addresses these categories:

1. Email accounts

Email is often the master key to everything else — password resets, account recovery, financial statements, important correspondence. Make sure your family can access at least your primary email.

  • Gmail: Set up Google’s Inactive Account Manager. You can specify how long of inactivity triggers the policy (3-18 months), name up to 10 trusted contacts who get notified, choose what data they can download, and optionally auto-delete the account.
  • iCloud Mail: Set up Apple’s Digital Legacy feature. Adds approved Legacy Contacts who can request access with a death certificate.
  • Outlook / Microsoft: No formal legacy feature; access is granted through Microsoft’s next-of-kin process with a death certificate, court documents, and identity verification.
  • Other email providers: Check the provider’s terms.

2. Photos and cloud storage

iCloud Photos, Google Photos, Microsoft OneDrive, Dropbox, etc. — the photos that document a family’s history.

The Apple and Google legacy features above also cover photos in those ecosystems. For Dropbox and similar, contact support with death certificate and identification.

Practical move: download a backup of your photos to a hard drive once a year and keep it with other important documents. Cloud accounts can disappear; physical media is more durable.

3. Financial accounts

Online banking, brokerage, retirement accounts, payment apps (Venmo, PayPal, Cash App), online crypto exchanges (Coinbase, Kraken, Gemini).

These typically have beneficiary designations or transfer-on-death (TOD) designations — set those up at the account level. Then keep a list of which accounts exist for your executor.

For payment apps and online wallets with small balances, the company typically follows next-of-kin procedures with proper documentation.

4. Cryptocurrency (the hardest one)

Crypto held on exchanges (Coinbase, Kraken, Binance.US, Gemini) is recoverable through next-of-kin procedures with death certificates and identification. Set up the exchange’s beneficiary feature if available.

Crypto held in self-custody wallets (hardware wallets like Ledger or Trezor; software wallets like MetaMask; paper wallets) is recoverable only if someone has the seed phrase (recovery phrase) or private keys. Without those, the crypto is permanently inaccessible.

For meaningful crypto holdings:

  • Document the existence of wallets and exchanges in your estate plan.
  • Store seed phrases securely but accessibly — never in plain text in the cloud, but in a way your trusted executor can find them.
  • Common approaches: split the seed phrase across multiple secure locations (Shamir’s Secret Sharing), use a hardware wallet with passphrase plus written backup in a safe, or use a service like Casa that’s designed for inheritance.
  • Tell your executor that crypto exists, where to look, and how to access it. This conversation is uncomfortable but necessary.

For small crypto holdings, the practical question is whether the recovery effort is worth it for the family. For substantial holdings, professional crypto-estate-planning services exist (Casa, Unchained, and others).

5. Social media

Facebook, Instagram, Twitter/X, LinkedIn, TikTok, Snapchat, YouTube, etc.

  • Facebook: Set up a Legacy Contact to memorialize your account, or specify that the account should be permanently deleted at death.
  • Instagram: Memorialized through Facebook’s process (Meta owns both).
  • LinkedIn: Family can request removal or memorialization with a death certificate.
  • Twitter/X: Family can request deletion with death certificate.
  • TikTok: Family can request removal with death certificate.
  • YouTube: Tied to Google account; the Inactive Account Manager covers this.

Decide whether you want each account memorialized (kept live as a tribute) or deleted. Tell your family.

6. Subscriptions and recurring charges

Netflix, Hulu, Spotify, gym memberships, magazine subscriptions, software licenses, domain registrations, web hosting — anything billing your credit card monthly or annually.

Keep a list of recurring charges so your executor can cancel them. Some subscriptions are paid for via the family’s continuing use; others would silently keep charging for years.

7. Personal digital files

Documents, project files, music libraries, ebooks, video games, NFTs.

Some of this is sentimental (family photos), some is financially valuable (a draft novel, business records, an NFT collection), some is licensed and non-transferable (Kindle books, iTunes music — usually they die with you under terms of service).

For meaningful files, physical backups of important digital assets remain the most reliable inheritance vehicle.

The password manager solution

A password manager handles most of the practical access problem if set up correctly:

  • 1Password, Bitwarden, Dashlane, and LastPass all offer emergency access or legacy features that let a designated person request access after a waiting period.
  • The designated person initiates the request; you have a window (12-48 hours typically) to deny it; if you don’t deny (because you’re incapacitated or dead), they gain access.
  • The trusted person now has your master password and can log into everything.

This is the single highest-leverage move for digital estate planning. Set up a password manager, store all your passwords in it (you should be doing this anyway for security), and enable emergency access for a trusted person.

What to put in writing

A few important rules about written instructions:

Don’t put passwords in your will

Your will becomes a public record during probate. Passwords in your will become public.

Instead, keep a separate written document — a “letter of instruction” — that:

  • Lists your major accounts (without passwords)
  • Notes which password manager you use
  • Explains how to access the password manager (where the master password is stored)
  • Lists which platform-specific legacy features you’ve set up
  • States your preferences (memorialize this Facebook account; delete this Instagram; preserve all photos; delete all email after copying important messages)

Keep this letter with your will but separate from it.

In your will or POA, include language authorizing your executor (and agent) to access your digital assets. RUFADAA requires explicit authorization for full access. A common clause:

“I authorize my executor [or agent] to access, control, and dispose of my digital assets, electronic communications, and online accounts in accordance with my written instructions and with applicable law.”

Your estate attorney will use updated language that complies with your state’s version of RUFADAA.

Name a digital executor

You can name a separate digital executor in your will — typically a tech-savvy family member or friend who handles digital assets specifically. This person works alongside your main executor and focuses on the technical access work.

A simple sequence

  1. Install a password manager if you don’t have one. Move all passwords into it.
  2. Set up the password manager’s emergency access feature with a trusted person.
  3. Set up platform-specific legacy features:
    • Apple Digital Legacy
    • Google Inactive Account Manager
    • Facebook Legacy Contact (and decide memorialize vs. delete)
  4. Document your crypto (existence, location, recovery method) for substantial holdings.
  5. Make a list of major accounts and recurring subscriptions.
  6. Write a letter of instruction with this information. Keep it with (but separate from) your will.
  7. Tell your trusted person and your executor that all of this exists and where to find it.
  8. Review annually — accounts come and go, especially with subscriptions.

Common questions

My family already knows my passwords. Isn’t that enough? Technically, no — under the Computer Fraud and Abuse Act, unauthorized access (even with a password) can be illegal. Use the platform-specific legacy features for legitimate authorization. Practically, most families do use shared passwords, but this isn’t a defensible long-term plan.

Can I just leave my master password in a sealed envelope? You can, but it’s brittle. The envelope can be lost, found by the wrong person, or stored in a bank safe deposit box that gets sealed at death. The password manager’s emergency-access feature is more robust.

What about Bitcoin? Can my family recover it without the seed phrase? For self-custody wallets, no. The seed phrase is mathematically required. Without it, the Bitcoin is permanently inaccessible. For exchange-held crypto (Coinbase, Kraken), next-of-kin recovery is possible with documentation.

Will my Kindle books pass to my heirs? Generally no — Amazon’s terms of service make most digital purchases non-transferable. They terminate at your death. The same applies to most digital media libraries.

What happens to my domain name? Domain registrations can be transferred to a new owner with proper documentation (death certificate, executor authorization). Note that the registration auto-renewal will continue charging until you cancel.

Should I include all my account passwords in my will? No. Your will becomes public during probate. Use a password manager with emergency access and a separate written letter of instruction.


Educational information only — not legal, financial, or technical advice. Laws around digital assets vary by state and change over time. Platform terms of service change. Consult a licensed attorney about your specific situation and verify current platform features before relying on this page. Sources: Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA); Computer Fraud and Abuse Act; platform-published documentation (Apple, Google, Microsoft, Facebook/Meta, LinkedIn, X); American Bar Association.