Digital legacy: what happens to your accounts after you die

Nothing happens automatically. An account stays exactly as you left it until somebody tells the company you have died, and when they do, most companies will close the account or freeze it rather than hand it to your family. Whether anyone can reach the photos, the documents and the money inside depends almost entirely on arrangements you make while you are alive: the legacy settings the platforms already offer, a password manager with emergency access, and a short written note telling your family where to look. This is general information about how the systems work, not advice about your own estate.

What the companies actually do

Accounts do not run on a clock tied to you. They run on clocks tied to activity and to payment, and those keep ticking through the weeks when your family is arranging a funeral.

A paid subscription keeps charging the card until the card is cancelled or expires, then the service usually downgrades or suspends. A free mailbox may be reclaimed after a long stretch of inactivity, typically counted in one to two years rather than months. Cloud storage that stops being paid normally goes read only first and deletes later, which is a mercy but only if somebody notices in time.

The most common loss is not dramatic. It is a photo library that lived in one account nobody could open, on a plan nobody knew to keep paying.

The legacy settings platforms already give you

Two designs have become standard, and both have to be switched on while you are signed in. The first is a legacy contact: you name a person now, and after your death they can present a death certificate and an access key to reach a defined slice of your data. The second is an inactive account manager: you choose how long silence counts as silence, typically between three and eighteen months, and the service then either shares chosen data with people you named or deletes the account outright. Social platforms usually add memorialization, which freezes a profile so it cannot be logged into or used for new posts.

These are worth more than any other arrangement, because they are the company's own supported route. Support staff cannot refuse a process their employer built, and in much of the United States the setting legally outranks anything your will says.

Account access and data access are not the same

Families ask for the password. What companies hand over, if anything, is a data export: a download of photos, files and sometimes messages, delivered once. The account itself normally stays shut, because the terms you agreed to make it personal and non transferable, and because privacy law in several countries restricts a provider from disclosing the contents of private communications even to relatives.

That distinction decides what is worth asking for. An export is enough to rescue photos, tax documents and address books. It is not enough to keep a small business running, to receive the password reset emails other services send, or to stop a subscription that renews from the mailbox nobody can open.

Why the password in the will is a bad plan

It is the advice people reach for first, and it fails in four separate ways. A will that goes through probate becomes a public document in many jurisdictions, so anything written inside it can be read by strangers. A will is often not located and read for weeks, by which time subscriptions have lapsed. Passwords change, and nobody rewrites a will because they rotated a login. And signing in as somebody else, even with permission, can breach the service terms and in some places brushes against computer misuse law, which puts the person you trusted in an uncomfortable position.

Split the two jobs instead. The will says who should receive what and who has authority. The secrets live in a password manager or a sealed letter that the will merely points to. The same logic applies while you are alive, which is why there are better ways to share a password than typing it into a message.

What an executor can and cannot do

An executor, called a personal representative in some places, can do a great deal with a death certificate and a grant of probate: close accounts, cancel subscriptions, claim balances, redirect mail and ask each provider to run its bereavement process. What an executor generally cannot do is compel a platform to reveal a password, or demand the full contents of private messages.

In the United States, most states have adopted a version of the Revised Uniform Fiduciary Access to Digital Assets Act. It sets a clear order of priority: an online tool you filled in, such as a legacy contact setting, beats your will, and your will beats the provider's terms of service. It also separates a catalog of who you communicated with, which a fiduciary can usually get, from the content of those messages, which normally needs your explicit consent recorded in advance.

The United Kingdom has no equivalent dedicated statute, so executors work through each company's own bereavement procedure under general estate law. Across the European Union, data protection rules do not apply to people who have died, and member states are left to legislate for themselves, so some countries let you file binding instructions about your data after death while others leave it to the platforms. Wherever you are, the practical conclusion is identical: the settings you filled in yourself do far more work than the law does.

Your family will also want to know which accounts should simply be shut, and deleting an account rather than abandoning it is the difference between data that is gone and data that is merely dormant. If the estate involves tax or a business, take professional advice in your own country.

Helping a parent set this up

Raising this with an older relative is easier if you frame it as a favor to the people left behind rather than a conversation about dying. Offer to do yours at the same time, side by side. Let them type and let them choose the legacy contact, which is the core idea in helping a relative with technology without taking over.

The same session is a good moment to fix the thing that breaks everything else. If the recovery phone number on an account belongs to a handset that was replaced in 2019, no legacy arrangement will save it, so getting account recovery right before you need it comes first.

The setup worth doing this month

Six steps, and most people finish in an afternoon.

1. Write an inventory. Not passwords: a list. Email addresses, banks and card providers, the phone carrier, the cloud storage plan, any domain names, anything that bills monthly, and where the tax documents live.
2. Set every legacy tool you can find. Start with the main email account, because it controls password resets for everything else, then the phone platform and the social accounts.
3. Turn on emergency access in a password manager. This is the piece that scales, because it covers accounts you forget to list. If you are not using one yet, a password manager keeps one encrypted vault behind one strong passphrase, and the emergency feature grants a named person access after a delay you choose, which you can cancel if you are simply on holiday.
4. Write a letter of instruction. Plain language, not legal language: where the inventory is, who the legacy contacts are, which accounts to close, which to preserve, and what you want done with your photos. Store it where your will is stored and tell one person it exists.
5. Record device passcodes somewhere safe. A locked, encrypted phone with no known passcode is often unrecoverable by anyone, including the manufacturer. That is the security working as designed, and it is the single most common dead end families hit.
6. Get the photos out of one basket. A copy on a drive at home means the archive survives an account nobody can open, and the three copies, two formats, one off site rule is the version worth following.

Review it once a year, on a date you already remember. Households with children or shared subscriptions can fold it into a broader household technology setup, which covers the same ground while everyone is still around to be asked.