What Happens to Your Online Accounts When You Die? A Practical Guide

Short answer: most of your accounts do not close themselves, and they do not automatically pass to your family. Each platform has its own rules. Some let you name a trusted person in advance. Some delete accounts after a long stretch of inactivity. A few will not release anything without a court order. If you do nothing, the people you trust are often left guessing, locked out of photos, unsure which subscriptions to cancel, unable to find the one document they actually need.

The good news is that putting a plan in place is mostly small, free steps you can do in an afternoon. This guide walks through what the major platforms actually do, then the practical moves that make the biggest difference. None of it requires a lawyer, though a few decisions are worth running past one.

The default: nothing happens automatically

When someone dies, their accounts keep existing in roughly the state they were left in. An email inbox stays full. A photo library stays locked behind a password. A password manager keeps everything sealed exactly as designed.

This matters because being someone's executor, spouse, or next of kin does not give you legal access to their private accounts by default. In the United States, federal law, specifically the Stored Communications Act, generally prevents email and messaging providers from handing over the contents of private messages without the account holder's prior consent or a court order. That is a privacy protection working as intended, but it means the most reliable path is for the account holder to set things up ahead of time, while they can.

So the question is less "what happens" and more "what did you decide in advance." Here is what the big platforms let you decide.

Google: Inactive Account Manager

Google has the most flexible built-in tool, and it is free. It is called Inactive Account Manager, and it covers Gmail, Google Photos, Drive, YouTube, Contacts, and more.

Here is how it works. You choose a waiting period of 3, 6, 12, or 18 months, during which Google watches for signs you are still using your account, such as sign-ins, recent activity, and Android check-ins. If you go quiet for the full period, Google first tries to reach you with reminders by email and text. If you still do not respond, it follows the plan you set.

You can name up to 10 trusted contacts and choose, per person, exactly which data each one may download. Your executor might get Gmail and Drive. Your spouse might get Photos and Contacts. An adult child might get only YouTube. You can also tell Google to delete the account entirely once the process is finished.

To set it up, go to your Google Account, open Data & Privacy, scroll to "Make a plan for your digital legacy," and follow the prompts. Worth knowing: Google's separate inactivity policy means a personal account untouched for two years may be deleted anyway. Inactive Account Manager lets you control what happens before that point.

Apple: Legacy Contact

Apple's equivalent is called Legacy Contact, and it governs the data in your Apple Account, including photos, messages, notes, files, and device backups stored in iCloud.

You add a Legacy Contact in Settings, under your name, then Sign-In & Security, then Legacy Contact. On a Mac it is in System Settings under your name. You need two-factor authentication turned on, and a device running iOS 15.2 or macOS Monterey 12.1 or later.

The important detail is the access key. When you add someone, Apple generates a key. If you send it to them through iMessage and they accept, their device stores a copy automatically. After you pass away, your Legacy Contact needs both that access key and a copy of your death certificate to request access. So it is worth making sure the person actually has the key saved, not just a vague memory that you "added them once."

One limit to plan around: a Legacy Contact cannot access items in your iCloud Keychain, which is where Apple stores your saved passwords, passkeys, and payment details. That data stays sealed, which is exactly why a separate plan for passwords matters. More on that below.

Facebook and Instagram: memorialization and legacy contacts

Facebook lets you choose what happens to your profile. Have it memorialized, or have it permanently deleted. A memorialized account shows "Remembering" before the name, is locked so no one can log in, and stays visible for friends to share memories.

You can also name a Facebook legacy contact. This is a limited role, not a handover. A legacy contact can pin a post, respond to new friend requests, and update the profile photo, but they cannot log in, read your private messages, or see anything you did not already share with them. You set this up under Settings, in the Accounts Center, under Account ownership and control. Instagram has its own memorialization process as well.

X (Twitter), Microsoft, and the "no plan" platforms

Not every platform offers a tool. X, formerly Twitter, has no way to designate anyone. Family can request removal of a deceased person's account, and accounts left inactive for long enough may be removed under its inactivity policy. Microsoft and Apple generally do not transfer purchases, because games, apps, movies, and books are licensed to you rather than owned outright, so they typically cannot move to another account.

For platforms with no built-in option, the only real lever you have is making sure a trusted person can find your instructions and, where appropriate, your login details. That brings us to the two things that matter most.

Passwords: the single highest-impact step

Your password manager is the master key to your digital life, and most are designed so that not even the company can open your vault. That is excellent security and a real problem at exactly the wrong moment.

Most major password managers now offer an emergency-access feature. You nominate a trusted person, set a waiting period, and if they request access and you do not decline within that window, they get in. Turning this on for one or two people you trust is probably the most useful single thing in this entire guide. If your manager does not offer it, at minimum make sure someone knows where to find your master password in an emergency, stored securely, never in a will.

Which leads to the cardinal rule: never put passwords, PINs, or recovery phrases in your will. A will typically becomes a public record when it goes through probate. Anything written in it is exposed to far more than the person you intended.

Crypto and self-custody: a special case

If you hold cryptocurrency in self-custody, there is no company to call and no "forgot password" link. If your heirs cannot reach your seed phrase or recovery details, the funds are simply gone. Yet writing those details anywhere careless creates the opposite risk, which is theft while you are alive.

The needle to thread is making recovery information reachable by the right person at the right time, and by no one before then. That usually means splitting the secret, using encrypted storage, or a system that only releases information under specific conditions you control. Treat this as its own project, and consider professional guidance given the stakes.

What the law says, briefly, and see a professional for your situation

Most US states have adopted a version of RUFADAA, which sets the priority order. A platform's own legacy tool, such as Inactive Account Manager or Legacy Contact, beats your will, and your will beats the platform's terms of service, but only for what it covers. The content of communications usually stays protected unless you explicitly consented to disclosure.

Two practical takeaways. The in-platform tools described above are the strongest instruction you can leave, which is why they come first in the checklist below. And a will that never mentions digital accounts leaves your executor arguing with a support queue. This is general information, not legal advice, and an estate attorney can map it to your state.

A short, practical checklist

You do not need to do all of this at once. In rough order of impact:

1. Turn on emergency access in your password manager for one or two trusted people.
2. Set up Google Inactive Account Manager and Apple Legacy Contact if you use those ecosystems.
3. Choose memorialization or deletion on Facebook and Instagram, and name a legacy contact.
4. Write a plain-language "in case" document. Not your passwords, but where things are and what you want done. Tell someone it exists and where to find it.
5. Handle crypto and other self-custody assets deliberately and separately.
6. Name a digital executor in your estate documents, and talk to a professional about your specific situation. Estate and inheritance rules vary by where you live, and a short conversation now prevents real headaches later.

Where a dedicated tool fits in

Platform tools are great for the platforms they cover, but they leave gaps: the instructions you want delivered, the message you want a specific person to read, the credentials no single platform manages. For that piece, some people use a dedicated service designed to deliver messages and instructions to trusted contacts if you become unavailable, usually built around a check-in mechanism known as a dead man's switch. If you want to understand how those work and how to evaluate one, see our companion guide to dead man's switch apps and how to choose one.

Aegis DMS is one option in that category. Its approach is built around staged delivery to the people you choose if you can no longer deliver your words and instructions yourself, and its core is open source and self-hostable, so you can verify how it works rather than take it on trust. If that fits your situation, you can create an account and try arming a switch on the free tier. Whatever tool you use, the steps above are the foundation worth putting in place first.

This article is general information, not legal advice. Estate and inheritance rules differ by jurisdiction. Consult a qualified professional for your situation.