Digital estate planning is less about handing over a password list than deciding who can do what with an online life after death or incapacity. A survivor may need to cancel subscriptions, preserve cloud photos, run a revenue-producing account, or locate cryptocurrency. Those jobs involve different things: legal authority, technical access, and the platform’s own rules. They do not reliably arrive together.
In the US, estate and probate questions are chiefly governed by state law, according to Benjamin Orzeske, chief counsel at the Uniform Law Commission. But providers also face federal privacy limits under the Stored Communications Act, which restricts their ability to disclose online communications without the account holder’s permission, Orzeske said.
That divide explains an awkward result under the Revised Uniform Fiduciary Access to Digital Assets Act, or RUFADAA. A designated fiduciary may be able to close an account, while getting the actual contents, such as email text, direct messages, photos, videos, and attachments, requires express authorization from the deceased person. Without it, the fiduciary may receive only a catalog of metadata, such as dates and possible sender or recipient information, rather than the communications themselves.
Wired reported that RUFADAA had been enacted in 48 states, Washington, DC, and the US Virgin Islands at the time of its reporting. Massachusetts had adopted but not enacted the measure, while Louisiana used a similar but different statute. The details remain state-specific, which is exactly the sort of administrative trap nobody needs while settling an estate.
What should a digital estate plan include?
Start with an inventory of accounts, files, devices, and the way each is protected. Death with Dignity’s planning guide recommends recording whether an account relies on two-factor authentication and whether the one-time code arrives by email or text. The inventory should cover more than social media: financial and business accounts, cloud storage, email, domains, digital intellectual property, and hardware can all matter.
Then classify each item. Is it an account to close, a file collection to preserve, a device to unlock, a financial asset to administer, or a licensed service? The answer affects what a fiduciary needs. Purdue Global Law School notes that many digital music, book, and video purchases are licenses rather than transferable ownership; whether a family can keep using them depends on the relevant service agreement.
- State the intended treatment of each important account or asset.
- Name the person authorized to act, and define whether they need account-management authority, access to private content, or both.
- Record access methods securely, including recovery routes and two-factor authentication, without treating credentials as legal authorization.
- Review platform tools, such as Google’s Inactive Account Manager and the legacy features offered by Apple and Meta, as an additional layer rather than a substitute for an estate plan.
Catherine Hodder, a senior attorney editor at FindLaw, told Wired that the authority should be documented in a will or similar instrument, but usernames and passwords should stay out of the will because it becomes public. A separate, secured credential record can be updated without republishing the keys to a person’s digital life.
Cryptocurrency deserves its own line item. Wired notes that assets in a private wallet can become irretrievable if nobody has the key; holdings with a third-party provider, such as Coinbase or PayPal, present a different access situation. People with consequential assets or unresolved estate questions should obtain state-specific professional advice, since platform terms, privacy law, asset type, and local law can all change the outcome.
This story draws on original reporting from WIRED.
