Digital Legacy and Online Privacy

Why digital legacy is now estate-critical

A decade ago, "digital assets" meant a Yahoo email account. Today an average family's digital footprint includes:

• The email account that controls password resets for everything else.
• Banking, brokerage, and crypto access secured by phone-based 2FA.
• Photos, videos, and family records stored only in iCloud, Google Photos, or Dropbox.
• Recurring subscriptions, autopay, and stored payment methods on dozens of sites.
• Domain names, websites, online businesses, creator channels, and the income they produce.
• Cryptocurrency holdings whose entire value depends on a seed phrase nobody else knows.

When someone dies or becomes incapacitated and no one can get into the email account, the family loses access to almost everything else within 30 days — because services start sending password-reset and confirmation messages that no one can act on. Photos disappear. Subscriptions keep charging. Domain names lapse. Crypto becomes unrecoverable.

This is not a niche concern anymore. It needs to be part of every estate plan.

The legal landscape — RUFADAA

The Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) has been adopted by nearly every state. It creates a three-tier hierarchy for who controls your digital assets:

1. Online tools provided by the service. If Google's Inactive Account Manager or Apple's Legacy Contact is configured, those settings control. They override anything in your will or trust.
2. Your will, trust, or power of attorney, if the online tool is not used. Your estate planning documents can grant fiduciary access — but only if drafted with RUFADAA-aware language.
3. The terms-of-service agreement with the platform, if neither of the above applies. These typically grant almost nothing.

So: configure the platform's own tools first, draft estate documents to grant fiduciary access second, never rely on terms of service.

Email — the master key

Your primary email controls password resets for almost every other account. Protect it accordingly.

Action items:

• Configure Google Inactive Account Manager at https://myaccount.google.com/inactive — choose how long to wait (3–18 months) and what to share with which contacts.
• Apple has Legacy Contact at Settings → Apple ID → Sign-In & Security → Legacy Contact. Generates an access key the contact receives and uses with a death certificate.
• Microsoft accounts: the Next of Kin process is documented at https://support.microsoft.com — much more friction than Google or Apple.
• Document the recovery email and recovery phone for your primary account.
• If you use a custom domain for email (e.g., yourname.com), document the domain registrar credentials and renewal dates.

Password manager

A password manager is the single highest-leverage thing you can set up.

• Bitwarden, 1Password, Apple Passwords, Dashlane all support an "emergency access" or "legacy contact" feature.
• Your designated emergency contact requests access. After a delay you set (typically 7–30 days), they're granted full access unless you cancel.
• Document the master password somewhere secure but separate (e.g., a sealed envelope in a fireproof safe with your other estate documents).
• Do not put the master password in your trust document — trust documents become court records if challenged.

For trusts specifically: the trust document can authorize the trustee to use the password manager, but the actual credentials should live outside the trust, in the trustee letter of instruction or a separately sealed envelope.

Two-factor authentication (2FA)

2FA tied to a single phone number is a major risk. If the phone is lost, locked, or buried with the deceased, accounts become inaccessible — sometimes permanently.

Better setups:

• Use an authenticator app (Authy, Google Authenticator, 1Password TOTP) with backup codes stored in the password manager.
• For high-value accounts (banking, brokerage, crypto), use hardware keys (YubiKey) and store one with your estate documents.
• Document SIM-card PINs and carrier account credentials so the phone number can be ported if needed.

Cryptocurrency

Crypto is the asset class most often lost at death. The reason is simple: if no one has the seed phrase or private key, the funds are gone forever. There is no customer service.

Plan:

• Self-custody wallets (MetaMask, Ledger, Trezor, Phantom): write down the seed phrase, store in two separate physical locations (e.g., a home safe and a bank safe-deposit box, or two split locations using Shamir's Secret Sharing).
• Exchange-held accounts (Coinbase, Kraken, Binance): document the exchange, the email used, and the 2FA method. Most exchanges have death-of-account-holder procedures requiring a death certificate, will, and ID.
• Multi-sig wallets: consider 2-of-3 multi-sig with one key held by the trust, one by you, and one by an attorney or service. Provides protection while alive and recoverable at death.
• Document holdings: list each wallet/exchange and approximate holdings in the trustee letter — not in the trust itself, which is more public.
• Consider naming a "crypto trustee" — a separately named role for technical custody of digital assets, distinct from the financial trustee.

A non-techie surviving spouse trying to recover crypto without instructions is the most common loss scenario. Plan for the surviving spouse, not for yourself.

Photos, videos, and family records

For most families, these have more emotional value than financial value — and they live in cloud services that delete after extended inactivity.

• iCloud Photos, Google Photos: configure Legacy Contact / Inactive Account Manager. Without these, family members face long, uncertain processes to retrieve photos.
• Periodically back up to a local drive (Network Attached Storage, external SSD). Cloud-only is fragile.
• Print or print-book the photos that matter most. A photo book on a shelf will outlast every cloud service.

Subscriptions and recurring charges

A separate "subscription audit" document is worth its weight. List every recurring charge:

• Streaming (Netflix, Hulu, Disney+, Spotify, Apple Music, etc.)
• Software (Microsoft 365, Adobe, Notion, ChatGPT, etc.)
• Cloud storage (iCloud, Google One, Dropbox, Backblaze)
• News and media (NYT, WSJ, Substack newsletters)
• Memberships (Costco, AAA, gyms, professional associations)
• Business or creator tools (Substack, Patreon, Calendly, etc.)

For each: the email used, the credit card charged, and how to cancel. Many subscriptions auto-renew for years after the holder dies because nobody knew they existed.

Domain names and websites

If you own domain names:

• Document the registrar (GoDaddy, Namecheap, Cloudflare, etc.) and login.
• Set domains to auto-renew with a long renewal window (2–5 years).
• Add a renewal-reminder email accessible to your successor.
• Set up auto-pay on a credit card less likely to be cancelled.

For active websites or online businesses: document hosting provider, DNS configuration, CMS access (WordPress, Shopify, etc.), Stripe/payment processor, and email forwarders.

Social media

Each platform handles death differently. Configure in advance:

• Facebook: Settings → Memorialization Settings → designate a legacy contact, choose memorialize-or-delete.
• Instagram: similar memorialization request process, but no advance legacy contact yet.
• X (Twitter): deletion via family request and death certificate; no advance settings.
• LinkedIn: family or designated person can request memorialization or deletion.
• TikTok, YouTube: variable; Google Inactive Account Manager covers YouTube via the Google account.

Decide whether each account should be deleted, memorialized, or transferred (where possible). Document the decision.

Creator accounts and income

If you earn money from digital channels, those revenue streams are estate assets:

• YouTube AdSense, TikTok Creator Fund, Substack subscriptions, Patreon, Twitch — each platform has different payout-on-death and account-transfer policies.
• Document the bank account used for payouts and the tax ID associated with each platform.
• Some platforms permit accounts to be transferred to heirs; others terminate. Plan accordingly.

Trustee instructions — what to actually give them

In the trustee letter of instruction (separate from the trust):

1. The location of the password manager master password and the email recovery method.
2. The location of crypto seed phrases (without writing them in the letter itself).
3. A list of platforms with online tools configured (Google IAM, Apple Legacy Contact, etc.) so the trustee knows to use them.
4. A list of high-value digital assets and which platforms they're held with.
5. A subscription list to cancel.
6. A photos-and-records backup location.
7. A directive on each social media account: delete, memorialize, or transfer.

Update this letter every 12 months. Digital assets shift faster than any other category.

What not to do

• Do not put passwords in your will or trust. These become court records in any dispute and may circulate among heirs you didn't intend.
• Do not rely on one person knowing things. A spouse with sole knowledge of the master password is one accident away from a catastrophic loss.
• Do not share crypto seed phrases by text, email, or photo. Any digital transmission can be intercepted or screenshotted. Physical written copies in secure locations only.
• Do not assume platforms will help. Customer support for deceased-account requests is slow, inconsistent, and often dead-ends. Pre-configuration is the only reliable path.

Sources

• Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA): https://www.uniformlaws.org
• Google Inactive Account Manager: https://myaccount.google.com/inactive
• Apple Legacy Contact setup: https://support.apple.com/en-us/HT212360
• Facebook Memorialization Settings: https://www.facebook.com/help/991335594313139
• IRS guidance on cryptocurrency and digital assets: https://www.irs.gov/businesses/small-businesses-self-employed/digital-assets