Digital Legacy Planning —
The Complete Guide

Most Americans now live significant portions of their lives online. They bank online, store photos in the cloud, pay for a dozen subscriptions, maintain social profiles built over years, and in some cases hold thousands of dollars in cryptocurrency — all secured behind passwords nobody else knows. When they die, that digital life doesn’t pause. Subscriptions keep charging. Accounts sit idle until platforms delete them. Photos, messages, and financial records become inaccessible to the people who need them most.

The average American has more than 100 online accounts. Fewer than one in three have made any plan for what happens to them. That gap — between how much of our lives now exists online and how little most of us have done to address it — is the problem digital legacy planning exists to solve.

Digital legacy planning is the process of documenting, managing, and providing access to your digital accounts and assets after you die. It covers everything from your email and social media to your cryptocurrency wallets, online banking, cloud storage, and the subscriptions quietly auto-renewing every month.

The legal framework hasn’t kept up. There’s no federal law governing digital asset inheritance in the US. The Revised Uniform Fiduciary Access to Digital Assets Act — adopted by most states since 2015 — provides a partial framework, but platform terms of service often conflict with what state law permits, and enforcement is inconsistent. Families are frequently left navigating platform bureaucracy while an estate sits frozen, costs accumulate, and irreplaceable data disappears.

The good news: most of these problems are solvable with relatively simple preparation. Designating a legacy contact, using a password manager with an emergency access feature, and leaving clear written instructions can prevent the majority of what typically goes wrong. This guide covers all of it — social media, email, subscriptions, passwords, cryptocurrency, and the role of a digital executor — so you can understand what’s at stake and know what to do.

Social media accounts after death

Social media profiles are the most visible part of a person’s digital presence, and what happens to them matters to families in ways that go beyond practicality. A Facebook profile built over fifteen years contains photos, conversations, and memories that have no physical equivalent. Losing it — or having it sit unmanaged — creates real distress.

Each major platform has its own policy, and the differences matter.

Facebook and Instagram

Facebook offers two options: memorialization and deletion. A memorialized account displays “Remembering” next to the person’s name, allows friends to continue posting tributes, and locks the profile from appearing in birthday reminders or “People You May Know” suggestions. Facebook’s Legacy Contact feature allows you to designate someone — before you die — who can manage the memorialized account: pinning a post, updating the profile photo, downloading a copy of your data. What they can’t do is log in as you, read your private messages, or post as you.

If no legacy contact is designated, a family member can still request memorialization, but the process requires a death certificate and proof of relationship, and moves at Facebook’s pace — which can be slow.

Instagram follows the same structure. Accounts can be memorialized or removed; the legacy contact system mirrors Facebook’s. Without pre-planning, access is limited and deletion requests can take weeks.

Google accounts

Google accounts — including Gmail and YouTube — are governed by Google’s Inactive Account Manager. This lets you designate up to ten people to receive a download of your account data if your account goes inactive for a period you specify (between three and eighteen months). It’s not the same as giving someone your password or login access. They receive a data export — emails, photos, documents — not a working account.

YouTube channels can transfer management rights to a legacy contact if set up in advance. Without that, a family member must go through Google’s formal legal process, which requires probate documentation and typically takes months.

Google updated its inactive account deletion policy in 2023. Accounts inactive for two years are now eligible for deletion, including all associated data. If you don’t set up the Inactive Account Manager and your family doesn’t act quickly, your Gmail, Google Photos, and Google Drive contents can be permanently lost.

Twitter/X and TikTok

Twitter/X allows memorialization or deletion upon request, but requires proof of death and proof of authority (typically a death certificate plus documentation of your relationship to the deceased). Accounts dormant for more than six months may be deleted under Twitter’s inactive account policy — so timing matters if a family wants to preserve the profile.

TikTok’s policy is the least defined of the major platforms. There’s no official legacy contact feature. Families must contact support and submit documentation on a case-by-case basis. The outcome is inconsistent. Given that TikTok is now one of the largest social platforms in the US, this gap is significant.

Snapchat and LinkedIn

Snapchat deletes accounts upon proof of death. There’s no memorialization option and no data recovery. Everything is gone.

LinkedIn allows accounts to be memorialized or removed. The profile is locked from activity. This matters mainly to people with large professional networks or valuable published content on the platform.

Email accounts after death

Email is the most consequential digital account most people have, not because of what’s in it but because of what it controls. Almost every other account — banking, social media, subscriptions, cloud storage — uses email for password resets. Without access to someone’s email, a family can’t cancel their Netflix. They can’t recover their Amazon account. They can’t stop automatic charges. They can’t access two-factor authentication codes. One locked email account creates a cascade of inaccessibility.

The main providers — Gmail, Outlook, Yahoo, and Apple — all restrict access by default. They do not hand over login credentials to family members. The formal process requires death certificates, probate documentation, and in some cases a court order. That process takes months.

Gmail gives families two routes: the Inactive Account Manager (if the deceased set it up) or Google’s formal legal request process. The legal route is slow — realistically two to six months — and delivers a data export, not account access. Outlook follows a similar model. Yahoo is stricter: accounts inactive for twelve months are permanently deleted, and recovery options are minimal. Apple’s iCloud recovery process requires legal documentation and moves slowly.

The practical consequence is that during probate — when an estate is frozen and nothing can be resolved quickly — email access is often impossible. Subscriptions continue charging because executors can’t trigger password resets. Financial documents sent to that email address are out of reach. Business records, contracts, and estate-relevant correspondence disappear if the account is deleted before anyone acts.

The solution is simple but requires pre-planning: use Google’s Inactive Account Manager to designate someone to receive your data, and document your email login in a secure place accessible to your executor. Leaving even a recovery email or trusted phone number on file makes the formal process significantly faster.

Subscriptions and recurring payments

Subscriptions are a slow financial bleed that most families don’t notice until it’s too late. The average American pays for eight to twelve active subscriptions — streaming services, cloud storage, software, fitness apps, news publications, gaming platforms. These services don’t stop charging when someone dies. They charge the card on file until someone cancels them.

Cancellation sounds simple. It isn’t. Most subscription services require an active login to cancel. If you can’t access the account — because you can’t access the email used to reset the password — you can’t cancel from within the platform. Calling customer service and explaining that the account holder has died triggers a documentation process that can take weeks. Simply closing the credit card doesn’t work reliably; merchants often retry the charge or have backup payment methods on file.

The financial impact compounds with probate timelines. A six-month probate process with ten uncancelled subscriptions averaging $12 per month produces $720 in preventable losses. More complex estates — with software subscriptions, cloud services, and premium memberships — can lose significantly more.

The FTC’s Negative Option Rule, updated in 2023, requires subscription services to make cancellation straightforward. In practice, this helps living customers more than executors navigating a deceased person’s estate.

The only reliable solution is documentation. A list of active subscriptions — service name, cost, associated email, and how to cancel — should be part of every digital legacy plan. A password manager makes this easier: every subscription with a stored login becomes traceable. Without this list, an executor is searching months of bank and credit card statements to identify charges they didn’t know existed.

Closing and memorializing online accounts

Beyond social media, most people have dozens of accounts — retailers, forums, healthcare portals, financial platforms, gaming services, professional tools — that need to be closed or preserved after death. There’s no central registry of what accounts a person holds, no automatic notification system, and no standard process across providers.

Closing accounts that hold no financial or emotional value is straightforward in principle: contact the service, provide a death certificate, request closure. In practice, each platform has its own documentation requirements, timelines, and contact channels. Some have formal bereavement teams. Many don’t.

Memorialization — keeping an account active as a tribute — is only offered by a handful of platforms. Outside social media, it’s rare. Most accounts will be closed and data deleted when a family contacts the provider.

The risks here are less about losing the accounts themselves and more about what’s inside them. Healthcare portals may contain records needed for insurance claims or estate documentation. Amazon accounts may hold gift card balances or ongoing subscriptions. PayPal and Venmo accounts may hold cash balances that need to be claimed before the account is closed. Gaming accounts with in-game currency or items may have real monetary value — a category that platforms almost universally refuse to transfer.

An account inventory — a documented list of significant accounts, what they contain, and whether they hold any financial balance — is the practical tool that makes this manageable. Without it, families are guessing.

Passwords and access after death

The most common practical problem in digital legacy planning is also the most fundamental: the people who need to access an account have no idea what the password is.

Password reuse is dangerous for security and common in practice. Many people use a small number of passwords across dozens of accounts, sometimes with minor variations. When they die, families may guess correctly — or may not. Guessing a password doesn’t violate any law if you’re guessing. Accessing an account through other means — social engineering, exploiting account recovery — can breach the Computer Fraud and Abuse Act, which makes unauthorized computer access a federal crime. The line between “trying to help” and “unauthorized access” is legally unclear and emotionally fraught.

The right tool is a password manager. Services like 1Password, Bitwarden, and LastPass allow you to store passwords securely and, in some cases, designate an emergency contact who can request access. 1Password’s Emergency Kit and Bitwarden’s Emergency Access feature both allow a pre-designated person to request your vault after a waiting period you control — typically between one and seven days. If you don’t respond to deny the request, they gain access.

This is the closest thing to a practical solution that exists. The vault becomes the master key: every account, every password, every recovery code, all accessible to the right person at the right time.

For people who don’t use a password manager, the next best option is a sealed physical document stored with estate papers that lists critical accounts and passwords, updated at least annually. It’s less secure, but infinitely better than nothing.

Two-factor authentication complicates things further. If accounts are secured with 2FA via an app like Google Authenticator, and the phone is inaccessible, the code generator is gone. Backup codes — printed and stored physically — solve this. Recovery phone numbers and backup email addresses on file with major platforms also provide a route in.

Digital assets checklist before death

Most people underestimate how many digital assets they have. A digital assets checklist is a comprehensive inventory — every account, asset, and piece of access information that someone would need to settle your estate and preserve what you’d want preserved.

A complete checklist covers:

• Email accounts: provider, login, recovery options, and any forwarding rules or important contacts
• Social media: platform, username, designated legacy contact (or instructions for how you want the account handled)
• Financial accounts: online banking, investment platforms, PayPal, Venmo, digital wallets
• Subscriptions: service name, cost, billing cycle, and how to cancel
• Cloud storage: Google Drive, iCloud, Dropbox, OneDrive, and what’s stored there
• Cryptocurrency: exchange accounts, self-custody wallets, and seed phrases (see the next section)
• Password manager: which one you use, and how to access the vault in an emergency
• Online businesses: domains, hosting, ad accounts, storefronts, associated contracts
• Government and tax portals: IRS account, state tax accounts, Social Security
• Healthcare portals: patient portals, insurance accounts, prescription services
• Gaming accounts: especially those with monetary value or in-game assets

This document should be stored securely — either in a password manager, a fireproof home safe, or with an estate attorney — and updated at minimum once a year. It should not be stored in an email draft or an unprotected notes app.

The checklist doesn’t need to contain passwords for every account. For accounts managed in a password manager, a reference to the manager and instructions for emergency access are sufficient. The goal is to give your executor a starting point, not a security liability.

Cryptocurrency and digital financial assets

Cryptocurrency is the highest-stakes area of digital legacy planning because the consequences of failure are absolute. If the private key or seed phrase for a self-custody cryptocurrency wallet is lost, the funds are permanently inaccessible. There is no customer service line. There is no recovery process. The blockchain doesn’t know you died and it doesn’t care.

An estimated four million Bitcoin — worth over $120 billion at 2023 prices — is believed to be permanently lost, much of it belonging to people who died without passing on their access credentials.

There are two categories of cryptocurrency holdings, and they work very differently.

Exchange accounts (Coinbase, Kraken, Gemini, Binance.US) function more like brokerage accounts. They hold cryptocurrency on your behalf, and they have account recovery processes. They require ID verification, death certificates, and probate documentation — but recovery is possible. The risk is that exchange accounts are subject to platform solvency, regulatory action, and their own terms of service.

Self-custody wallets (hardware wallets like Ledger or Trezor, software wallets like MetaMask) hold funds directly on the blockchain, accessible only to whoever holds the seed phrase — typically twelve or twenty-four words in a specific order. If you hold cryptocurrency this way, your seed phrase is the only thing that matters for inheritance purposes.

Beyond cryptocurrency, digital financial assets include:

• PayPal and Venmo balances: these are real cash balances that can be claimed by an estate, but require account access or formal request
• Gift card balances: often forgotten; collectively significant across multiple retailers
• Online investment platforms: Robinhood, Webull, and similar platforms hold actual securities and have formal estate transfer processes
• NFTs and digital collectibles: held in wallets and governed by the same seed phrase rules as cryptocurrency; value is speculative but can be significant
• Online business assets: domain names, ad account balances, affiliate revenue, digital product storefronts

Tax implications exist across all of these. Cryptocurrency is treated as property by the IRS; gains must be reported. Estate executors have a fiduciary obligation to identify and report these assets accurately. Failing to do so creates tax liability that can become an estate administration problem.

The digital executor

A digital executor is the person responsible for managing your digital estate after you die. They may or may not be the same person as your legal executor — the two roles can overlap, or they can be separated if different people are better suited to each.

The legal executor handles probate, distributes physical assets, files final tax returns. The digital executor handles online accounts, digital asset recovery, subscription cancellations, social media memorialization, and access to passwords and files.

Most people’s legal executors are family members who may be technically capable but emotionally overwhelmed, or technically comfortable but without the documentation they need. Separating the digital role — and documenting it clearly — prevents delays and errors.

A digital executor should know:

• Where your digital assets checklist is stored
• How to access your password manager
• What your wishes are for each social media account (memorialize or delete)