Digital Estate Planning: Passwords, Accounts and Access

In 1995, settling an estate was tedious but solvable. You collected the mail for three months, and eventually every account you owned mailed you a statement and identified itself.

The mail was the map.

Today the mail contains a grocery flyer and a postcard from a dentist. Every statement is paperless. Every login needs a code sent to a phone that is locked. Every password reset goes to an email account nobody can get into.

This is the gap almost nobody plans for, and it has a fix that takes about three hours and costs nothing.

Four things changed at roughly the same time, and together they built a wall.

Notice the chain reaction. Email unlocks everything. The phone unlocks email. And the phone is the first thing families cancel to save $80 a month.

Do not cancel the phone line. Keep it active for six to twelve months. It is the cheapest and most important post-death decision a family makes, and almost everyone gets it wrong in week one.

This is not theoretical. State unclaimed property funds hold tens of billions of dollars, a large share of it from estates where nobody knew an account existed.

Here is what actually goes missing.

The crypto row is the only one where the money is truly, mathematically unrecoverable. Everything else is findable with enough effort. The question is whether anyone knows to make the effort.

Most states have adopted a law, generally called the Revised Uniform Fiduciary Access to Digital Assets Act, that gives executors a legal pathway to a deceased person's digital accounts.

Great in principle. Limited in practice.

The most important detail in that entire law is the priority order, and it decides everything:

So the two minute setting you click inside an app outranks your will. That is an extraordinary fact and almost nobody knows it.

Here is the structure that actually works. Each layer does one job.

Most people have zero of these. Doing layers one and two gets you roughly 80% of the benefit for three hours of work.

This is the single highest value document, and it contains no passwords at all. That is deliberate. A list of what exists is not dangerous. A list of how to get in is.

Write down:

One page. Two at most. Updated once a year, ideally when you do your taxes since everything is already in front of you.

Then tell one person it exists and where it is. A map nobody can find is not a map.

A password manager is the obvious answer, and the feature that matters is not the passwords. It is emergency access.

Most major password managers offer a version of this. You designate a trusted contact. If they request access, you get notified and have a waiting period, often 7 to 30 days, to decline. If you do not respond, because you cannot, they get in.

That last row is the one people miss. If your two factor codes live only in an authenticator app on a locked phone, the password manager alone will not get anyone in. Storing the 2FA seeds inside the manager, or using a manager that generates codes, closes the loop.

The alternative, and it is genuinely fine, is old fashioned. Write the master password on paper, seal it in an envelope, and put it somewhere physically secure that your executor can reach. Not the safe deposit box, which can be sealed at death in some states. A home safe, or with your attorney.📱 Layer three: the platform tools, one by one

These take minutes each and they legally outrank your will. Go do them.

The email row is the one to do first. If an executor can get into the email, they can eventually find almost everything else, because every institution you deal with has emailed you at some point. Search the inbox for "statement," "your account," and "tax document" and the estate reveals itself.

Which cuts both ways. Anyone who gets into your email while you are alive can also take over your entire financial life. Treat that account like the master key it is: strongest password you own, hardware key or app based 2FA, and never reused anywhere.

Two documents need explicit digital language, and most older ones do not have it.

That phrase about "content of electronic communications" is not decorative. Under the federal privacy laws these state statutes interact with, access to the content of emails generally requires explicit consent. Without those words, an executor may get metadata and be denied the actual messages.

The power of attorney row is arguably more urgent than the will. Incapacity lasts years. Death is a single event. If you have a stroke at 71 and nobody can log into anything for three years, that is the harder problem.

Everything else in this article is a delay. Crypto held in self custody is permanent loss.

Two rules if you hold any meaningful amount.

Someone must know it exists. Not the amount, not the keys, just that it exists and roughly where to look. An heir who does not know to look will never find it.

The seed phrase needs a durable physical home. Paper burns and fades. Metal seed plates exist for exactly this reason. Split storage across two locations is common practice.

And never put a seed phrase in a will. Wills become public record in probate. You would be publishing the keys.

A less dramatic problem, and a surprisingly expensive one.

After a death, autopays keep running. Streaming services, cloud storage, gym memberships, software subscriptions, storage units, magazine renewals, domain registrations. Estates commonly bleed for a year before anyone notices.

Include a list of recurring charges in the map. Your executor will thank you, and the estate keeps four thousand dollars.

If you are the executor right now and there is no map, here is the search order that works. It is unglamorous detective work and it finds most things.

Step one deserves emphasis. The tax return is the best map anyone ever leaves behind, and it is written by the IRS. Every 1099 corresponds to an institution. Every K-1 is a partnership. Every Schedule E is real estate. Three years of returns will surface almost everything that produces income.

What it misses: accounts holding growth stocks that pay no dividends, crypto, and anything with a zero balance that was funded later. Which is exactly why the map still matters.

When an executor is trying to get into an account, the order of operations matters, and doing it wrong locks you out harder.

That last row saves hours. Every large bank and brokerage has a dedicated estate or deceased account services team. General customer service cannot help you and will transfer you in circles.

And on logging in as the deceased: it is extremely common, it is technically a terms of service violation, and in some contexts it can create legal exposure. Practically, families do it constantly. The safer path, where an account is significant, is the formal one with documents.

Everyone frames this as a death problem. It is at least as much an incapacity problem, and incapacity is far more likely.

The durable power of attorney is the document for this, and it needs the same digital language the will has. A spouse who cannot log into the household accounts during a six month hospitalization is in genuine trouble, and "I know his password" is not a legal authority.

Choosing the digital contact is a different decision from choosing an executor, and people conflate them.

It is completely reasonable to name a capable adult child as the digital access person while naming a different, more organized person as executor. Split the jobs by skill.

And name a backup for both. The most common estate planning failure is not choosing badly. It is choosing one person and never revisiting it while everyone ages together.

Canceling the phone line immediately. The single most damaging early move. It kills two factor access to everything.

Putting passwords in the will. Wills become public in probate. Never.

Relying on a spouse who also does not know. In most households one person handles the money. If that is you, the map is for the other one.

A sticky note under the keyboard. It is a security problem while you live and an incomplete solution when you do not.

Assuming the executor can just call and explain. Companies are trained to refuse. They are protecting themselves from fraud, and they should be.

Never updating it. A 2019 map is barely better than none. Once a year, at tax time.

Ignoring old accounts. The forgotten 401(k) from two jobs ago is the most commonly lost asset in America.

Storing the only copy in a safe deposit box. In some states the box is sealed at death until a court says otherwise, which is exactly when you need it.

That is the whole project. No lawyer required for most of it. No cost.

Estate planning has a blind spot, and it is not a legal one. It is an access problem.

The will handles ownership. It does not handle the password, the 2FA code, the forgotten pension, the paperless brokerage account or the crypto wallet nobody knew existed.

And the tools that actually solve this are not documents your attorney drafts. They are settings inside apps, a password manager feature, and a one page list you write yourself.

Three hours. This weekend. Then tell somebody where it is.

And whatever happens, do not let anyone cancel the phone.

See you next issue. 🪙

This is general education, not legal, tax, or financial advice. Digital asset access laws, platform legacy tools, password manager features, probate procedures, safe deposit box rules and privacy statutes vary by state and by provider and change frequently. Subscription and unclaimed property figures here are illustrative. Consult a licensed estate attorney in your state about the specific digital asset language in your will, trust and durable power of attorney.

Sources: Uniform Law Commission Revised Uniform Fiduciary Access to Digital Assets Act and state adoptions; federal electronic communications privacy law as it applies to fiduciary access; National Association of Unclaimed Property Administrators and state unclaimed property program data; Consumer Financial Protection Bureau guidance on managing someone else's money and on debts of a deceased relative; platform published legacy contact and inactive account documentation.