Passing on passwords and digital accounts: a guide for every stage of life

The problem nobody planned for

A generation ago, the contents of a person's life were mostly paper: a filing cabinet, a safe, a folder of policies. Today a large share of it sits behind passwords. Bank accounts, investment platforms, email, photo libraries, subscriptions, cloud storage — all of it invisible to anyone who does not have the right login. When someone passes without leaving access, their family can face weeks of frozen accounts, lost photographs, and bills they cannot cancel.

The good news is that this problem is almost entirely solvable with a small amount of planning. The goal is not to hand out passwords recklessly — it is to make sure the right person can reach the right account, at the right time, in the right way.

The accounts that matter most

Not every account needs the same level of attention. Focus first on the ones your family will need to act on, and the ones that hold things worth preserving.

• Email — often the master key, because password resets flow through it. A trusted person who can reach your email can unlock almost everything else.
• Online banking and investment accounts — your executor will need to work with these institutions, and a list of account names and numbers (even without passwords) speeds the process enormously.
• Bill-pay and subscription accounts — so recurring charges can be stopped or transferred without mystery.
• Cloud storage where you keep photos, documents, or irreplaceable files.
• Any account with a balance — PayPal, Venmo, gift card wallets, loyalty points — that might otherwise go unclaimed.
• Social media, so the accounts can be memorialized or closed according to your wishes.

Options that do not require handing out passwords today

There is a reasonable fear in writing down passwords: if that list falls into the wrong hands, or is found by the wrong person at the wrong time, it creates a security problem today. Several approaches give your trusted people the access they will need without that risk.

• A password manager with emergency access. Several reputable password managers allow you to designate a trusted contact who can request access, subject to a waiting period you set. If you do not claim the request within that window, they gain access. This mirrors a verified hand-off — it is deliberate, not automatic.
• Platform legacy settings. Google Inactive Account Manager, Apple Legacy Contact, and Facebook's Memorialization Request all let you name someone in advance through the platform itself. These are free, built-in, and the cleanest way to handle the accounts that support them.
• A sealed envelope with your attorney or in your secure vault. Some families choose to write a master list and keep it with their estate documents — secured during life, accessed only when the time comes.

What to record, even without sharing passwords

Even if you choose not to leave passwords, a record of your accounts is enormously useful. Your executor or trusted family member can use it to notify institutions, stop charges, and locate assets they might otherwise never find.

• The name of each platform or service and the email address used to register.
• The rough purpose of the account (checking, investments, photos, work).
• Whether you use a password manager, and how to find or access it.
• Any accounts with monetary value, even small ones.
• Your wishes for each social media profile — memorialize, close, or leave it.

The legal limits worth knowing

Accessing another person's account without authorization can raise legal questions even after they have passed. Some platforms treat account credentials as non-transferable under their terms of service, and some jurisdictions have laws governing digital estate access. The cleanest path is to use the platform's own legacy tools where they exist, leave a written record of your accounts, and grant formal access in your estate documents rather than simply sharing passwords. If in doubt, an estate attorney familiar with digital assets can advise.

Cryptocurrency is a special case

Cryptocurrency and other self-custodied digital assets deserve particular care, because there is no password-reset option and no institution to call. If the private keys are lost, the assets are gone. See our full guide on what happens to cryptocurrency after you pass — the planning steps are different from every other account.

Keeping it secure and current

Passwords change, accounts open and close, and platforms update their legacy settings. Build a habit of reviewing your digital account plan once a year — the same day you review the rest of your estate plan. A secure digital vault like Legatus Vault is a natural place to keep this information: encrypted during your life, released to the people you name when the time comes, and easy to update as things change.