Digital Estate Planning: Passwords, Crypto & Online Accounts

Our digital lives contain financial accounts worth

Our digital lives contain financial accounts worth thousands or millions of dollars, irreplaceable family photos, business assets, intellectual property, and cryptocurrency holdings. Yet only 5% of Americans have a digital estate plan.

When someone dies or becomes incapacitated without one, families face months of frustrating attempts to access accounts, often hitting legal and technical barriers. Banks may freeze online-only accounts. Email providers may refuse access. Cryptocurrency can be permanently lost. Social media accounts may remain active indefinitely, causing distress to family members.

The legal landscape is improving — 49 states have adopted some version of the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) — but the law alone does not solve the practical problem of accessing accounts protected by passwords, two-factor authentication, and encryption.

Financial accounts

Start by listing every digital account and asset you own. Organize them into categories:

Financial accounts: Online banking, investment and brokerage accounts, retirement accounts, PayPal/Venmo/Cash App, cryptocurrency exchanges and wallets, tax preparation accounts (TurboTax, H&R Block).

Email and communication: All email accounts (these are master keys to password resets), messaging apps, social media accounts.

Subscriptions and services: Streaming services, software subscriptions, cloud storage (Google Drive, Dropbox, iCloud), domain names and hosting.

Digital media and content: Photo libraries (Google Photos, iCloud, Amazon), music and movie purchases (iTunes, Amazon), e-book libraries (Kindle), gaming accounts with purchased content.

Business assets: Websites, domain names, online stores, affiliate accounts, advertising accounts, intellectual property stored digitally, client files.

Cryptocurrency: Exchange accounts, hardware wallets, software wallets, DeFi positions, NFTs. Include wallet addresses, exchange names, and approximate values.

Use a password manager with emergency access

Use a password manager with emergency access: This is the cornerstone of any digital estate plan. Services like 1Password and Bitwarden offer emergency access features that let a designated person request access to your vault. After a waiting period you set (24-72 hours), they gain access unless you deny the request — preventing unauthorized access while you are alive and able to respond.

How to set it up: Store all account credentials in your password manager. Enable emergency access and designate your spouse, executor, or trusted family member. Walk them through how to use the password manager — they need to create their own account first. Test the emergency access process together so they know what to expect.

Master password storage: Your password manager's master password should be written on paper and stored in a sealed envelope in a home safe or safety deposit box. Include the name of the password manager, your account email, and the master password. Update this if you change the master password.

Two-factor authentication backup: If your accounts use 2FA, ensure your designated person can access your authenticator app or has backup codes. Many 2FA apps (Authy, Google Authenticator) offer cloud backup or multi-device access — enable these features.

Exchange-held crypto

Cryptocurrency creates unique estate planning challenges because there is no bank, broker, or customer service to call. If your private keys or seed phrases are lost, the assets are gone permanently.

Exchange-held crypto: Cryptocurrency on exchanges (Coinbase, Kraken, Gemini) is the easiest to transfer — your executor needs your login credentials and may need to go through the exchange's estate process. Include exchange account details in your password manager.

Self-custody wallets: Hardware wallets (Ledger, Trezor) and software wallets require your seed phrase (12-24 words) for recovery. Without it, the crypto is unrecoverable.

Seed phrase storage: Write your seed phrase on paper or stamp it into metal (fire and water resistant). Store in a home safe or safety deposit box. Never store seed phrases digitally in plain text — they can be stolen by malware. Some people split the seed phrase across two locations (first 12 words in one safe, last 12 in another) for additional security.

Include instructions: Your family may not understand cryptocurrency. Include a simple instruction sheet: what exchanges you use, what wallets you own, where seed phrases are stored, approximate current values, and step-by-step instructions for accessing or transferring the assets. Consider designating a crypto-knowledgeable person as your digital executor even if they are not your primary estate executor.

Google (Inactive Account Manager)

Major platforms have built-in tools for handling accounts after death — but they must be configured while you are alive:

Google (Inactive Account Manager): Set a timeout period (3-18 months of inactivity). Google can then notify designated contacts and optionally share account data (Gmail, Drive, Photos, YouTube). Or set it to auto-delete everything. Configure at myaccount.google.com/inactive.

Apple (Legacy Contact): Designate a Legacy Contact who can access your iCloud data after your death with a death certificate and access key. Set up in Settings > Apple ID > Legacy Contact. Critical if your family photos are in iCloud.

Facebook/Meta (Legacy Contact): Choose someone who can manage your memorialized profile — pin tribute posts, update profile photo, respond to friend requests. They cannot read your messages or log in as you. Or request account deletion upon verified death.

Other platforms: Twitter/X, LinkedIn, Instagram, and most major platforms have processes for memorializing or deleting accounts with proof of death. These are handled case-by-case and can be slow without advance planning.

Email accounts are the priority: Ensure your executor can access your primary email — it is the master key for password resets on virtually every other account.

Reference your digital plan in your will

Reference your digital plan in your will: Your will should name a digital executor (who may or may not be your general executor) and reference your digital asset inventory. However, do not include passwords in your will — wills become public documents during probate.

Grant fiduciary access: Under RUFADAA (adopted in 49 states), your executor can access your digital assets if you have authorized it. Include explicit language in your will or trust granting your fiduciary access to digital accounts. Without this authorization, platforms may legally refuse access.

Power of attorney for digital assets: Your durable power of attorney should explicitly cover digital assets and accounts. This allows your agent to manage digital accounts during incapacitation, not just after death.

Terms of service considerations: Many platforms' terms of service technically prohibit sharing login credentials. RUFADAA provides legal override in most states, but having platform-specific legacy features enabled (Google Inactive Account Manager, Apple Legacy Contact) avoids this conflict entirely.

Update annually: Review your digital inventory at the same time you review your overall estate plan. New accounts, closed accounts, changed passwords, and cryptocurrency value changes all warrant updates.