Digital Legacy Planning - Managing Accounts and Passwords After Death
About 12 min read
Published: Last updated:
Most people accumulate more online accounts than they can keep track of, yet only a small share have decided what should happen to those accounts after death. In a McAfee survey conducted in 2011, people valued their own digital assets at about $37,000 on average worldwide and about $55,000 in the United States. When someone dies without a digital legacy plan, families face locked accounts, ongoing subscription charges, identity theft risks from dormant profiles, and the permanent loss of irreplaceable photos and documents. This article provides a practical framework for password management inheritance, platform-specific memorial features, and step-by-step digital end-of-life planning.
Risks Caused by Abandoned Accounts
Financial Risks
A particularly direct risk of abandoned accounts after death is financial loss. Subscriptions linked to credit cards continue charging until cancelled. Video and music streaming, creative tools, and various SaaS subscriptions add up quickly when several of them run in parallel, and the charges keep coming for years on services nobody uses. Even more serious is cryptocurrency. In January 2021, reporting based on Chainalysis estimates placed roughly 20 percent of the Bitcoin then in existence in lost or otherwise stranded wallets, worth about $140 billion at the prices of that time.
Also see internet safety for seniors for related guidance.
Security Risks
Abandoned accounts are prime targets for attackers. Since nobody notices password reset notifications, account takeover becomes easy. Hijacked accounts are exploited for phishing attacks on the deceased's contacts, impersonation fraud, and personal data trading. Fraud that exploits a deceased person's information is known as ghost fraud, and it tends to be noticed late because the victim cannot dispute anything and relatives rarely watch the accounts. Cases where social media accounts are hijacked and fraudulent messages sent under the deceased's name cause significant emotional burden for families.
Platform-Specific Memorial and Inheritance Features
Apple and Google Digital Legacy Features
Apple offers a "Digital Legacy Program" since iOS 15.2. You can designate up to 5 "Legacy Contacts" who can access iCloud data (photos, notes, email, backups) by presenting a death certificate and access key. However, Keychain (passwords) and licensed media are excluded. Google also offers an "Inactive Account Manager" that can share data with up to 10 designated people after a period of inactivity (3-18 months). Gmail, Google Drive, and YouTube data are covered, but Google Pay balances are not included.
Social Media Memorial Accounts
Facebook (Meta) offers a "Memorialized Account" feature where you can pre-designate a "Legacy Contact." The contact can change the profile photo, pin memorial posts, and respond to friend requests, but cannot view past messages or log in. Instagram has a similar memorial account feature. X (formerly Twitter) has no official memorial feature, only a process for families to request deletion. LinkedIn deletes accounts upon family contact. Platform responses are not standardized, making advance preparation important.
Secure Password Inheritance Methods
Password Manager Emergency Access
The safest and most practical method for password inheritance is using password manager emergency access features. 1Password allows vault sharing among family members with its "Family Plan," and Bitwarden's "Emergency Access" feature lets designated trusted contacts access the vault after a waiting period. LastPass also offers similar emergency access. The key is how to inherit the master password itself. Writing the master password on paper, sealing it in an envelope, and entrusting it to a trusted person or storing it in a safe deposit box is recommended.
Inheritance Methods to Avoid
Never send passwords to family via LINE or email. Beyond interception risks, if the recipient's account is compromised, all passwords leak. Creating a list in Excel or text files saved on the desktop is also dangerous. Unencrypted files are easily exfiltrated through device theft or malware. Using the same password for all services so "you only need to remember one" is out of the question, as one compromised service endangers all accounts. For secure password sharing methods, see also secure password sharing.
Digital End-of-Life Planning Checklist
How to Inventory Your Accounts
The first step in digital end-of-life planning is inventorying all your online accounts. If you use a password manager, the list of saved entries becomes your inventory. If not, search your email inbox for keywords like "account created," "registration complete," or "welcome" to identify past registrations. When inventorying, classify each account into "Financial (banks, securities, crypto)," "Social/Communication," "Subscriptions," "Work-related," and "Other," and prioritize accordingly. Financial accounts need inheritance planning as the highest priority.
Managing 2FA Recovery Codes
Often overlooked, managing two-factor authentication recovery codes is critically important. Without TOTP app (Google Authenticator, Authy) seed information or recovery codes, accounts cannot be accessed even with the correct password. Save recovery codes as notes in each password manager entry, or print them and store in a sealed envelope with the master password. Since Authy has cloud backup, remember to include Authy account information in your inheritance plan.
Legal Aspects of Digital Legacy
Japanese current law does not yet have clear provisions regarding digital asset inheritance. Under civil law, digital data itself is generally interpreted as not being "property" subject to ownership rights. However, cryptocurrency was legally defined as "crypto assets" by the 2019 Payment Services Act amendment (in force from 2020) and is subject to inheritance tax. Online banking deposits are inherited like regular deposits, but without access information, families risk not knowing accounts exist. Including digital asset provisions in wills is recommended, but writing passwords directly in wills risks public disclosure, so indirect references like "the master password is stored in the safe deposit box" are safer.
Take Action Now
- Set up your password manager's emergency access feature and designate a trusted family member as your emergency contact
- Set up Apple's Digital Legacy Program or Google's Inactive Account Manager today
- Inventory your online accounts and create inheritance plans starting with financial accounts
- Set unique strong passwords for each service with Passtsuku.com and consolidate them in a password manager, so inheriting one master password covers all accounts
Frequently Asked Questions
- At what age should I start digital legacy planning?
- Regardless of age, you should start as soon as you have online accounts. Accidents and sudden illness can happen at any age. Especially if you hold cryptocurrency or store important photos and documents in the cloud, plan urgently.
- What if I don't use a password manager?
- First, we strongly recommend adopting a password manager. If that is difficult, write important account passwords on paper, seal them in an envelope, and store in a safe deposit box or home safe. Managing in digital files (Excel, etc.) is not recommended unless encrypted.
- Do I have legal rights to access a deceased person's accounts?
- In Japan, heirs have the right to inherit the deceased's property, but access rights to online accounts depend on each service's terms of use. Many services accommodate account deletion or data download upon submission of a death certificate, but procedures can take weeks to months. Advance preparation is the most reliable approach.
Was this article helpful?