Digital Assets and Password Access After Death

A generation ago, an executor's job was mostly about physical property and paper accounts. Today, a meaningful part of most people's lives — photos, financial accounts, email, social media, sometimes cryptocurrency — exists only behind a password, on a platform whose terms of service were never written with death in mind. This creates a genuinely modern legal gap, and the rules for navigating it are still evolving.

Why This Is Legally Different From Physical Property

An executor's authority to access a deceased person's physical property and traditional financial accounts is well established — probate law has handled this for centuries. Digital accounts add two additional layers: the platform's own terms of service (which the deceased agreed to, and which often restrict account access to the original account holder only), and federal computer-privacy laws that were originally written to prevent unauthorized computer access, not anticipating executors trying to lawfully administer an estate.

RUFADAA: The Legal Framework Most States Use

Most states have adopted some version of the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), a model law specifically designed to give executors and other fiduciaries a legal path to access digital accounts. Broadly, it works in a tiered priority order:

1. The platform's own built-in tool, if the deceased used one (several major platforms let users designate a "legacy contact" or similar in advance) — this takes priority over everything else.
2. Instructions in the deceased's will or a separate digital estate plan, if they left explicit direction about who should have access to what.
3. Default legal authority for the appointed executor, subject to the platform's own terms of service and applicable law, absent either of the above.

Whether your state has adopted RUFADAA, and the exact details of how it applies, varies by state — a small number of states have their own distinct approach — so don't assume the framework above applies exactly as described without checking your state's specific law.

What This Looks Like Platform by Platform

Email providers generally require a copy of the death certificate and proof of the requester's legal authority (Letters Testamentary or Letters of Administration) before granting any access, and even then, many will only provide limited access — sometimes downloading content rather than granting full login access to the account itself.

Social media platforms typically offer options to memorialize an account, or in some cases delete it, based on a request from an authorized representative with proof of death and legal authority. Full login access is often more restricted than for email.

Financial and cryptocurrency platforms are treated more like traditional financial accounts — the executor generally needs the same documentation (Letters Testamentary, death certificate) required for any other financial institution. Cryptocurrency held in a private wallet, however, presents a unique problem: if the private keys or seed phrase aren't documented anywhere and known only to the deceased, the assets can become permanently unrecoverable, regardless of legal authority — there's no institution to serve legal paperwork on for a self-custodied wallet.

Cloud storage (photos, documents) generally follows similar rules to email — proof of death and legal authority, often resulting in a data export rather than ongoing access.

Practical Steps for an Executor

Start with a device, not an account. If you have lawful access to the deceased's phone or computer (as executor, generally you do, as part of estate property), you may be able to find password managers, saved logins, or notes with account information that make formal legal requests to each platform unnecessary.

Gather your legal authority documents early. Every platform will want to see Letters Testamentary or Letters of Administration and a certified death certificate — have several certified copies of the death certificate on hand, since you'll likely need to submit one to multiple institutions.

Check each platform's specific policy. Major platforms generally publish their own deceased-user account policies, and following that specific process is usually faster than trying to negotiate around it.

Take cryptocurrency and private wallets seriously, early. If you have any reason to believe the deceased held cryptocurrency, look for hardware wallets, written seed phrases, or password manager entries as soon as possible — this is the one category where waiting can mean the assets are lost permanently, unlike a bank account that will simply sit there until claimed.

For the Future: Encourage Digital Estate Planning

If you're reading this proactively rather than in the middle of handling someone's estate, the single most useful thing you can do is use the legacy-contact or similar tools major platforms now offer, and keep a secure, updated record of account information for whoever will eventually need it. This turns a legal and procedural headache into a much simpler handoff.

Understanding digital assets is often just one piece of a broader inventory question — what actually needs to go through probate, and what your state's rules require. A ProbateClarity report can help frame that bigger picture, which is useful context as you work through the specific, more modern problem of digital account access.