Related to: Digital estate planning • Password management • Online legacy • Social media after death • Digital asset organization

A practical guide to managing the online accounts, passwords, and digital assets that will outlive you.

My colleague’s mother left behind a meticulously organized filing cabinet. Every insurance policy labeled. Every bank statement filed by year. The will in a fireproof safe with instructions for finding it.

Her phone was passcode-protected. Her email, locked. Her cloud storage - thousands of photos spanning decades, her last years, her last trips, the last pictures anyone would ever take of her - trapped behind a password nobody knew.

It took her daughter four months to get into the email account, and only because she found an old password written in the margin of a cookbook. The photos were never recovered. They’re still out there somewhere, in a server nobody can access, and they will be until the account eventually gets purged for inactivity.

Her mother had organized everything that mattered in the physical world. She hadn’t thought about what existed digitally. Most people haven’t.

Here’s what’s different about digital assets: they don’t just become hard to access when you die. They can become permanently, irreversibly gone. A locked safe can eventually be opened. A forgotten password can make an account unrecoverable forever. There is no locksmith for a dead person’s Apple ID.

What You’re Actually Leaving Behind

Most people significantly underestimate how much of their life exists online.

Financial accounts - banking, investments, PayPal, Venmo, any cryptocurrency. Subscriptions and services that will keep charging long after you’re gone. Email accounts that contain years of correspondence, legal documents, medical records, receipts, relationships. Photos and videos stored in the cloud - often the only copies that exist anywhere. Social media with years of posts, messages, memories. Work documents in Google Drive or Dropbox. Websites or creative projects stored online. Digital purchases: ebooks, music, software licenses. Loyalty program balances. Domain names that will expire and be purchased by strangers.

And for some people: cryptocurrency. If you hold significant cryptocurrency and your family doesn’t have your private keys and wallet information, that money is gone. Not locked away. Gone. The blockchain doesn’t care that you died. There’s no company to call, no legal process to invoke, no back door. The private keys are the only access that exists.

Without knowing what accounts you have and how to get into them, your family faces a version of this problem at every level. They can’t stop charges. They can’t access documents. They can’t recover photos. They can’t close accounts or decide what to preserve. And every week that passes without action makes things harder - some platforms automatically delete inactive accounts, some require legal documentation that takes months to obtain, some simply won’t cooperate at all.

Your digital life is real. It has real value, real meaning, real consequences when it’s left unaddressed. It needs a plan.

Build the Inventory First

Before passwords, before decisions about what to preserve or delete - you need to know what exists.

Go through your email for recurring charges. That’s the fastest way to surface accounts you’ve forgotten about. Check your phone for apps requiring login credentials. Think through every service where you’ve created an account: streaming, banking, shopping, social media, healthcare portals, creative tools, professional platforms, cloud storage.

Your list for each account should include the platform name, the email address associated with it, the username if different, and whether it contains anything financially valuable or personally irreplaceable. Don’t worry about passwords yet. Just map the territory.

This will take longer than you expect. Most people have between 100 and 200 online accounts. You’re not going to get them all, and that’s fine. Focus on the ones that matter: financial accounts, photo storage, primary email, social media with significant history, anything with real money in it.

The Password Problem

You need someone to be able to access your accounts after you die. You cannot just write your passwords in a document - that’s a security risk while you’re alive, a liability if the document is lost or found by the wrong person, and it becomes outdated every time you change a password.

A password manager solves this properly. Tools like 1Password, Bitwarden, and Dashlane all offer emergency access features that allow you to designate a trusted contact who can request access to your vault. The process works like this: your contact submits a request, you have a set period to deny it, and if you don’t respond - because you’re incapacitated or dead - access is granted automatically.

Setting this up is not difficult. It’s also not intuitive, and most people who use password managers don’t know the feature exists. You have to find it, configure it, designate your contact, set the waiting period, and then - critically - tell your designated contact that they’ve been named and what to do.

That last part is where most people stop short. The emergency access feature is useless if your contact doesn’t know they’re your emergency contact, doesn’t know which password manager you use, and doesn’t have the information needed to initiate the request.

If you don’t use a password manager, the minimum acceptable alternative is a secure, encrypted document containing your most critical credentials, stored somewhere your executor can find, with clear instructions attached. Not on your desktop. Not in an email. Somewhere physically secure with instructions for accessing it.

What Happens to Each Account

Once someone can get in, they need to know what you want done. Not every account should be treated the same way.

Some things need to be downloaded before anything else is closed: your photo library from Google Photos, iCloud, or wherever you store images. Years of photos can disappear if accounts are closed before the files are saved locally. This should be the first thing your designated contact does - before closing email, before deleting social media, before anything else.

Some accounts need to be transferred: shared streaming services, cloud storage a family uses together, websites you own and maintain, anything with monetary value.

Some need to be memorialized: Facebook lets you designate a legacy contact who can manage a memorialized version of your profile. Instagram can be memorialized. These options exist and are worth using - a memorialized account is different from an active one, and prevents the jarring experience of a dead person’s account appearing in friend suggestions or sending automated birthday reminders.

Some need to be deleted permanently: dating apps, accounts with sensitive personal information, platforms you wouldn’t want family members to access.

And some need to be canceled immediately: every subscription service you pay for. They will keep charging indefinitely if nobody cancels them. One month of charges is annoying. Six months is a financial drain on an estate that’s trying to settle.

Write down what you want done with each significant account. Don’t make your family guess.

Platform Policies Are Inconsistent and That’s Your Problem to Solve

Here’s an honest assessment of what your family will face if they try to handle your digital accounts without your preparation.

Facebook has a relatively clear memorial and legacy contact process. Google has an Inactive Account Manager - a tool that lets you configure exactly what happens to your Google data if your account goes inactive, including automatic data download for a designated person. These are genuinely useful and take about ten minutes to set up. Do it today.

Most other platforms are more complicated. Instagram can be memorialized or deleted, but the process requires submitting documentation and often takes weeks. X (Twitter) will deactivate accounts with proof of death from family members. Apple’s Digital Legacy program allows designated contacts to access iCloud data with a death certificate and an access key generated in advance - but only if you set up the program before you die.

Two-factor authentication is a particular problem nobody thinks about until they’re locked out. If your accounts require a code sent to your phone, and your family can’t access your phone, they’re locked out of accounts even with your passwords. Note which accounts use two-factor authentication and what device or app generates the codes.

The broader reality: platform policies change. What’s possible today may not be possible next year. The best protection is a password manager with emergency access - that gets your family past the authentication layer regardless of what any individual platform’s policy says.

The Things People Forget

Cryptocurrency: If you hold it, your family needs your wallet address, your private keys, and clear instructions for accessing each wallet. Write this down and store it with the same security as a physical asset of equivalent value - because that’s what it is. If you have significant holdings, consider working with an attorney who handles digital assets.

Domain names: If you own domain names, they renew annually and will expire without attention. Someone needs account access to the registrar before this happens.

Digital purchases: Ebooks, music, software licenses. Most aren’t transferable and will simply be lost. Worth noting so your family doesn’t spend time trying to transfer something that legally can’t be transferred.

Automatic payments with stored balances: PayPal, Venmo, Cash App, and similar services sometimes hold balances. These need to be claimed through the estate, which requires account access.

Do This Week

Not this month. This week.

Day one: Create your account inventory. Spend two hours going through email and bank statements. Get the list on paper.

Day two: Set up a password manager if you don’t have one. Configure emergency access. Designate your contact.

Day three: Set up Google’s Inactive Account Manager and Apple’s Digital Legacy program. Ten minutes each. Just do it.

Then: Tell your designated contact they’ve been named, show them where your credential list is, and write down what you want done with each major account.

That’s it. Four steps across a few days. And then your family will be able to find your photos, close your accounts, stop the charges, and handle your digital life without spending months locked out of it.

My colleague’s mother’s photos are still out there somewhere. No one can get to them. She didn’t know she needed to plan for this. Now you do.

Explore planning tools designed to help you inventory accounts, store credentials securely, and communicate your wishes. Start this week - the accounts that matter most to your family deserve more than good intentions.