What happens to your accounts when you die
Most people don’t plan for their accounts after death because the question feels morbid or hypothetical. But the mechanics are worth understanding while you’re alive and can still make choices, because the default outcome for almost every service is not “your family gets access.” The default is that the account just sits there, locked behind a password only you knew.
Nothing happens automatically
An account doesn’t know its owner has died. There’s no signal that triggers unless someone tells the platform, and most platforms only act on a death report if a person shows up with documentation and follows a specific process. Until that happens, the account stays exactly as it was: logged out, waiting for a password, sometimes still billing a card, sometimes still receiving password reset emails for other services that use it as a recovery address.
This matters because a dormant account isn’t neutral. It’s a static target. If the email tied to it gets breached later, or if the phone number attached to two factor authentication gets recycled by the carrier, an inactive account can be a way into someone’s financial life years after they stopped checking it. Planning digital legacy accounts isn’t just about sentimental access to photos. It’s about closing off attack surface that nobody is watching anymore.
Google’s inactive account manager
Google has a feature called Inactive Account Manager that’s been around for years and works on a timeout basis. You set a period of inactivity, between three and eighteen months, and if Google doesn’t see you log in or use any Google service during that window, it acts on instructions you configured in advance. You can name trusted contacts who get notified and, if you choose, given access to specific categories of data like Gmail, Photos, or Drive. You can also set the account to delete itself entirely after the timeout.
The important detail is that this is opt-in and requires setup before anything happens. If you never touch Inactive Account Manager, Google will not proactively hand your Gmail to a grieving spouse. Family members without your credentials or a court order have to go through Google’s separate deceased user process, which is slower and doesn’t guarantee full access to content.
Apple’s legacy contact
Apple’s legacy contact system works differently. You designate someone directly on your device, and that generates an access key the person needs to keep. After you die, they submit the access key along with a death certificate, and Apple grants access to most iCloud data: photos, messages, notes, files, backups. It explicitly excludes some things, including anything protected by end to end encryption that Apple itself can’t decrypt, along with items like licensed media tied to your Apple ID, such as purchased movies or subscriptions, which aren’t transferable.
The access key is the whole mechanism. If the legacy contact loses it, there’s no backdoor Apple will open just because someone is family. This is a case where the privacy design that protects you while alive, Apple not holding keys to everything, is the same design that limits what a legacy contact can retrieve.
Meta accounts get memorialized, not handed over
Facebook and Instagram don’t give anyone login access when a user dies. Instead, a reported death triggers memorialization: the word “Remembering” appears near the name, and the account is frozen in a specific sense. It won’t show up in birthday reminders or friend suggestions, and depending on settings, a designated legacy contact can update the profile picture or pin a tribute post. What a legacy contact cannot do is log in as the deceased, read their private messages, or see content the person never shared publicly. Without a legacy contact set in advance, family members can typically only request memorialization or removal, not access.
Encrypted messengers don’t have a grief exception
This is where the privacy angle gets concrete. Signal is built so that the company holds essentially none of your message content or metadata, by design, not as a policy choice it could reverse. That means there’s no support ticket that gets a family member into a deceased person’s Signal history, because Signal never had it to give. WhatsApp encrypts message content the same way, though Meta does retain more metadata around who messaged whom. Either way, the strong end to end encryption that protects a live conversation from interception is the same mechanism that makes it inaccessible after death unless the device itself is unlocked. If the messages only exist on a locked phone, getting them back depends entirely on getting into that phone, not on asking the messaging service.
Password managers are the actual hub
Most of these platform-specific legacy tools only cover one company’s data. The thing that actually determines what a trusted person can reach is whatever holds your passwords. Some password managers build this in directly. Bitwarden, for example, has an emergency access feature where you name a trusted contact, set a waiting period, and that person can request access; if you don’t respond within the waiting window, they’re granted it. Other managers rely on family or organizer plans where an account admin has some ability to help a member recover access, which is a narrower guarantee and worth checking against what you’re actually assuming will happen.
None of this works if nobody besides you knows the password manager exists, or if the master password itself isn’t recorded anywhere accessible to your legacy contact. A password manager only solves the problem if someone can get past its own front door.
Crypto wallets: no seed phrase, no recovery
Self-custody crypto wallets are the sharpest version of this problem, because they were designed with no recovery path on purpose. If your coins sit in a wallet where you hold the private keys or seed phrase, and only you know that phrase, there is no company, court order, or support desk that can get them back once you’re gone. This is the same property that makes self-custody attractive for privacy and control while you’re alive: nobody can freeze or seize what they can’t access. Custodial exchange accounts are different, since the exchange holds the keys and typically has some estate process, similar to a bank. But a hardware wallet with an unrecorded seed phrase is, functionally, money that disappears.
The threat you’re actually planning for
The realistic risk isn’t a stranger breaking into a locked account out of nowhere. It’s opportunistic fraud built on public information. Obituaries routinely include full names, birthdates, hometowns, and family relationships, which happen to be exactly the data used in security questions and identity verification at banks and phone carriers. This kind of detail gets scraped and used for targeted account takeover or SIM swap attempts in the weeks after a death, when accounts are least likely to be monitored. Being thoughtful about how much detail an obituary or memorial page includes is a small, concrete step that addresses a real pattern, not a hypothetical one.
Where not to put your passwords
A will feels like the natural place to write down account access, but it has a specific downside worth knowing before you use it that way: once a will is filed with a probate court, in many places it becomes part of the public court record. A document that lists your master password or crypto seed phrase stops being private the moment it’s filed, which defeats the purpose. If you want a durable, offline record of what a trusted person needs, a sealed document held by that person, a safe deposit box, or a password manager’s own emergency access feature all keep the sensitive part out of a public filing. If you want to understand how this actually plays out in your jurisdiction, that’s a question for an estate attorney, not something a privacy explainer can settle for you.
A workable plan, not a perfect one
Use the legacy tools the platforms already built, since they exist precisely for this and don’t require your family to guess. Pick one password manager as the actual hub and make sure your legacy contact knows it exists. Keep a physical, offline note of what that manager is and how to start the recovery process, stored somewhere only trusted people can reach, not in a note synced to the same account that needs the plan. Accept that some things, particularly self-custody crypto and anything protected by real end to end encryption, will be permanently gone if the keys aren’t separately recorded. That’s not a flaw to patch around; it’s the same design choice that made those things private while you were using them.
Want more on how these encryption and access tradeoffs actually work day to day? Head back to the homepage for the rest of our breakdowns.