What Happens to Your Online Accounts When You Die?

What's Actually Happening

When someone dies, the digital aftermath is often more complicated than the physical one. The family can find the filing cabinet. They can access the safe deposit box with a death certificate. But the email account that holds every confirmation, receipt, and communication from the last decade? Locked. The bank account that's online-only? Inaccessible without two-factor authentication tied to a phone they can't unlock.

This isn't a future problem — it's a now problem. Roughly 30 million Facebook accounts belong to deceased users. Families spend an average of 200+ hours managing a deceased person's digital presence. Subscriptions keep charging. Cloud storage with irreplaceable photos becomes inaccessible. Cryptocurrency — which has no central authority — is simply lost forever without the private keys.

The legal framework is still catching up. The Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) has been adopted by most U.S. states, giving executors legal authority to access digital assets — but each platform implements access differently, and the process can take weeks to months.

What No One Told You

Your email is the skeleton key

Almost every online account can be reset through email. If your family can access your primary email account, they can access almost everything else. If they can't, they're locked out of everything. This makes your email password and recovery method the single most critical piece of information in your digital estate.

Platform "legacy" features exist but most people haven't set them up

Apple has a Legacy Contact feature (since iOS 15.2). Google has an Inactive Account Manager. Facebook and Instagram have Memorialization and Legacy Contact settings. These features work — but only if you activate them before they're needed. Each one takes about 5 minutes to set up. Almost nobody does it.

Two-factor authentication creates a catch-22

Two-factor authentication (2FA) is essential for security while you're alive. After death, it's a barrier. If 2FA is tied to a phone and the family doesn't know the phone passcode, they can't receive verification codes, which means they can't access accounts even with the password. Backup codes — the recovery codes generated when you set up 2FA — solve this, but only if they're saved somewhere accessible.

Digital subscriptions keep billing indefinitely

Netflix, Spotify, cloud storage, software licenses, streaming services, app subscriptions — they all keep charging after death. Families report 3-6 months of continued charges before they can identify and cancel everything. The charges hit credit cards that are also hard to access. One family reported $4,700 in subscription charges in the six months following a death.

Crypto without access documentation is gone forever

There is no "forgot password" for cryptocurrency. No customer service number. No death certificate process. If someone holds Bitcoin, Ethereum, or any other cryptocurrency in a self-custody wallet and the private keys or seed phrase aren't documented somewhere, the assets are permanently inaccessible. Estimates suggest 3-4 million Bitcoin (worth hundreds of billions of dollars) are permanently lost, much of it due to death or lost keys.

What to Do Right Now

1. Set up a password manager with emergency access — Use a password manager (1Password, Bitwarden, Dashlane, LastPass) and enable its emergency access or family sharing feature. This gives a designated person access to all your passwords after a waiting period you set. This single step covers 90% of the problem.
2. Create a digital asset inventory — List your key accounts: email, banking, investments, crypto, social media, cloud storage (Google Drive, iCloud, Dropbox), subscription services. Note which ones hold financial value, which hold sentimental value (photos, messages), and which are just administrative.
3. Set up legacy contacts on major platforms — Apple Legacy Contact, Google Inactive Account Manager, Facebook Legacy Contact. Five minutes each. Do it today.
4. Document your phone passcode and 2FA backup codes — Store these with your password manager's emergency access, or in a sealed envelope with your physical estate documents. Your phone is the gateway to everything.
5. Tell one person the plan exists — A password manager doesn't help if nobody knows it exists. Tell your executor, your spouse, or your designated person: "I use [password manager]. Here's how to access it if something happens to me." You don't need to give them access now — just tell them the plan.

What Comes Next

Digital estate planning connects directly to your broader estate plan. If you haven't had the will conversation with your family yet, that guide is the place to start. Your digital asset inventory should be referenced in your will or trust — especially if cryptocurrency or valuable digital property is involved. And if you're the person managing a parent's affairs, the managing aging parents guide covers how to get their digital house in order alongside the physical one.

Common Questions

What happens to your online accounts when you die?

When someone dies, their online accounts generally remain active until someone notifies each platform individually. Most platforms require a death certificate and proof of relationship to grant access or memorialize an account. Without pre-arranged legacy contacts or shared password access, family members may face weeks or months of delays accessing important accounts. Email, banking, and social media platforms each have different processes, and some accounts (particularly cryptocurrency wallets) may become permanently inaccessible without documented credentials.

What is a digital estate plan?

A digital estate plan is a documented strategy for ensuring your family can access your online accounts, digital assets, and subscriptions after your death or incapacitation. It typically includes a password manager with emergency access enabled, a digital asset inventory listing all significant accounts, legacy contacts set up on major platforms, documented phone passcodes and two-factor authentication backup codes, and instructions for your executor. Unlike a traditional estate plan, a digital estate plan focuses on access and continuity rather than asset distribution.

How do I access a deceased person's email?

The process depends on the email provider. For Google/Gmail, use the Inactive Account Manager if it was set up, or submit a request with a death certificate through Google's deceased user process. For Apple/iCloud, use the Legacy Contact feature if activated, or contact Apple Support with legal documentation. For Microsoft/Outlook, submit a Next of Kin request. All providers require a death certificate and proof of legal authority (executor status or court order). The process typically takes 2-8 weeks. Having the deceased's phone for two-factor authentication significantly speeds up access.

Can you recover cryptocurrency after someone dies?

Only if the private keys or seed phrase were documented and accessible. Cryptocurrency stored in self-custody wallets (hardware wallets like Ledger or Trezor, software wallets like MetaMask) has no central authority that can grant access. If the private keys or 12/24-word seed phrase are lost, the cryptocurrency is permanently inaccessible. Cryptocurrency held on exchanges (Coinbase, Kraken, etc.) can typically be accessed through the exchange's estate process with a death certificate and legal documentation, similar to a traditional financial institution.

What This Looks Like When It's Working

The family that's done this right has one place where all the access information lives. The password manager emergency contact knows they're designated. The Apple Legacy Contact is set. The 2FA backup codes are saved. When the worst happens, the family can access email within hours instead of weeks — which means they can access everything else.

Families who take digital estate planning seriously keep their digital inventory alongside their physical estate documents in a shared family system. Kinstone gives families a secure place to store document locations, access instructions, and account inventories — so the person who needs the information can find it when it matters, not after months of platform request forms.