Digital Life & Cyber Estate Planning Guide

Before you can plan for anything, you need to know what exists. Most people vastly underestimate the size of their digital footprint. The average person has well over 100 online accounts.

1.1 -- Account Inventory Checklist

Work through each category. For every account, record the service name, your username/email, and what the account is used for. Do not put passwords in this list -- that's handled separately in Section 2.

Email Accounts

• Primary personal email (Gmail, Outlook, Yahoo, ProtonMail, etc.)
• Secondary/backup email accounts
• Work or professional email accounts
• Legacy email accounts you still have but rarely use (old ISP emails, university alumni email, etc.)
• Email aliases or forwarding addresses

Financial & Banking

• Bank accounts (checking, savings, money market)
• Credit card accounts and portals
• Investment and brokerage accounts
• Retirement accounts (401k, IRA portals)
• Cryptocurrency wallets, exchanges, and DeFi accounts
• Payment platforms (PayPal, Venmo, Zelle, Cash App, Apple Pay, Google Pay)
• Tax preparation services (TurboTax, H&R Block, etc.)
• Peer-to-peer lending or crowdfunding accounts
• Buy Now Pay Later accounts (Affirm, Klarna, Afterpay)

Social Media & Communication

• Facebook / Meta
• Instagram
• X (Twitter)
• LinkedIn
• TikTok
• Snapchat
• Reddit
• YouTube (if separate from Google)
• Threads, Bluesky, Mastodon, or other newer platforms
• Discord servers (especially if you own/admin any)
• WhatsApp, Signal, Telegram
• Dating apps (if applicable)
• Forums or community boards you participate in

Cloud Storage & Photos

• Google Drive / Google Photos
• iCloud / Apple Photos
• Dropbox
• OneDrive
• Box
• Amazon Photos
• Other cloud backup services (Backblaze, Carbonite, etc.)
• Photo printing/book services with stored photos (Shutterfly, Mixbook, etc.)

Subscriptions & Recurring Services

• Streaming video (Netflix, Hulu, Disney+, Max, Paramount+, Peacock, Apple TV+, Amazon Prime Video, YouTube Premium, etc.)
• Streaming music (Spotify, Apple Music, Amazon Music, Tidal, YouTube Music, etc.)
• News and media subscriptions (NYT, WSJ, Washington Post, Substack, etc.)
• Software subscriptions (Adobe, Microsoft 365, etc.)
• Gaming subscriptions (PlayStation Plus, Xbox Game Pass, Nintendo Online, Steam, etc.)
• Meal kit or grocery delivery (HelloFresh, Instacart, etc.)
• Fitness and health apps (Peloton, gym memberships with apps, meditation apps)
• AI services (ChatGPT Plus, Claude Pro, Midjourney, etc.)
• VPN services
• Domain registrations and website hosting
• Cloud computing services (AWS, Azure, Google Cloud -- especially if you run anything)

Shopping & E-Commerce

• Amazon
• eBay
• Etsy
• Walmart, Target, and other retail accounts
• Grocery delivery accounts
• Any accounts with stored payment methods or shipping addresses

Healthcare & Insurance Portals

• Health insurance portal
• Medicare/Medicaid portals
• MyChart or other patient portals
• Pharmacy accounts (CVS, Walgreens, mail-order)
• Dental, vision, and specialist portals
• Life insurance online portals
• FSA/HSA account portals
• Mental health app accounts (BetterHelp, Talkspace, etc.)

Government & Official Accounts

• Social Security Administration (ssa.gov / my Social Security)
• IRS account (irs.gov)
• State tax portal
• DMV / driver's license renewal portal
• Veterans Affairs (va.gov) if applicable
• USPS Informed Delivery
• Voter registration portal
• TSA PreCheck / Global Entry / CLEAR
• Passport renewal portal
• Login.gov and/or ID.me accounts (used for many federal services)

Smart Home, IoT & Connected Devices

• Smart home hub accounts (Google Home, Amazon Alexa/Echo, Apple HomeKit, Samsung SmartThings)
• Smart thermostat (Nest, Ecobee)
• Security cameras and doorbells (Ring, Nest, Wyze, Arlo, SimpliSafe)
• Smart locks and garage door openers
• Robot vacuums (iRobot, Roborock)
• Smart lighting (Hue, LIFX)
• Vehicle accounts and connected car apps (Tesla, FordPass, MyChevrolet, OnStar, etc.)
• Pet tech (smart feeders, GPS trackers, vet portals)
• Wearables (Fitbit, Garmin, Whoop, Apple Watch health data)

Professional & Business

• Professional licenses with online portals
• Business accounts you own or administer
• Freelance platform accounts (Upwork, Fiverr, etc.)
• Domain names you own (and which registrar)
• Websites or blogs you maintain
• Professional association memberships
• CRM or business tool logins
• Intellectual property registrations

Loyalty Programs & Rewards

• Airline miles accounts
• Hotel loyalty programs
• Credit card rewards portals
• Retail loyalty programs with stored value
• Cashback programs (Rakuten, Ibotta, etc.)

Digital Content & Purchases

• E-books (Kindle, Nook, Kobo)
• Digital music purchases (iTunes, Amazon)
• Digital movie/TV purchases
• Video game libraries (Steam, PlayStation, Xbox, Nintendo, Epic, GOG)
• App purchases (iOS App Store, Google Play)
• NFTs or digital collectibles (if applicable)

Important note about digital purchases: Most digital content (e-books, music, movies, apps) is licensed, not owned. This means it generally cannot be transferred or inherited. Your family may lose access to your Kindle library, iTunes purchases, etc. This is worth knowing when deciding how to preserve important content.

This is the single most impactful thing you can do for your survivors. Without access credentials, your loved ones face an uphill battle with every single account -- often requiring death certificates, court orders, and weeks of waiting per account.

2.1 -- Password Manager Setup

• Choose and set up a password manager (1Password, Bitwarden, Dashlane, LastPass, Keeper, etc.)
• Migrate existing passwords from browsers, sticky notes, and memory into the password manager
• Ensure every account has a unique, strong password (the manager generates these)
• Set up the password manager's emergency access or family sharing feature -- this is critical

Password Manager Emergency Access Features to Configure:

• 1Password: Set up a Family or Teams account; share a vault with your trusted person; store your Emergency Kit (account key + master password) in a physical safe
• Bitwarden: Use the "Emergency Access" feature to grant a trusted contact access after a configurable waiting period
• Dashlane: Use the "Emergency Contact" feature
• LastPass: Use the "Emergency Access" feature with a trusted contact and waiting period
• Keeper: Use the "Emergency Access" (KeeperChat) feature

2.2 -- Two-Factor Authentication (2FA) Planning

Two-factor authentication protects your accounts while you're alive, but it can lock everyone out after you die if not planned for.

• Document which accounts have 2FA enabled
• Store 2FA backup/recovery codes in your password manager AND in a physical location (printed, in a safe or sealed envelope)
• If you use an authenticator app (Google Authenticator, Authy, Microsoft Authenticator), document which app and what device it's on
• Consider using Authy (which allows multi-device sync and cloud backup) instead of Google Authenticator (which is device-bound)
• If you use a hardware security key (YubiKey, Titan), document where it is physically located and register backup keys
• Store your phone's passcode/PIN securely -- many 2FA methods require the phone itself
• Document your phone carrier's account PIN/password (needed to transfer or cancel service, and to prevent SIM-swap attacks on 2FA)

2.3 -- Device Access

• Document the passcode/PIN/password for every device: phones, tablets, laptops, desktops
• Document biometric backup methods (your fingerprint won't work, but backup PINs will)
• Document the Apple ID password or Google account password tied to each device
• Note any encrypted drives or volumes and their decryption passwords
• Record the location of any recovery keys for disk encryption (FileVault, BitLocker)
• If you have a NAS (network-attached storage) or home server, document its admin credentials

2.4 -- Physical Storage of Access Information

• Store your password manager's master password and emergency kit in a fireproof safe, safe deposit box, or sealed envelope with your attorney or trusted person
• Consider splitting sensitive information (e.g., the master password in one location, the emergency kit in another)
• Let your executor/trusted person know where this information is, without telling them what it is yet
• Review and update this information at least annually

Many major platforms now offer built-in tools to manage what happens to your account. Setting these up takes minutes and saves your survivors enormous headaches.

3.1 -- Platform-by-Platform Legacy Settings

Google (Gmail, Drive, Photos, YouTube, etc.)

• Set up Google Inactive Account Manager at myaccount.google.com/inactive
  • Choose an inactivity timeout period (3, 6, 12, or 18 months)
  • Add up to 10 trusted contacts to notify and/or share data with
  • Choose which data types each contact receives
  • Decide whether to auto-delete the account after contacts are notified
  • Tip: If you have a YouTube channel with subscribers or revenue, this is especially important

Apple (iCloud, Photos, Messages, etc.)

• Set up Apple Legacy Contacts in Settings > [Your Name] > Sign-In & Security > Legacy Contact (iOS 15.2+)
  • Add up to 5 Legacy Contacts
  • Share the generated access key with each contact (print it, AirDrop it, or save it in Messages)
  • Legacy Contacts will need the access key AND a death certificate
  • Note: Legacy Contacts cannot access Keychain passwords, payment info, or licensed media
  • Note: Apple will permanently delete the account 3 years after Legacy Contact access is granted

Facebook / Meta

• Set up a Legacy Contact in Settings > Accounts Center > Personal Details > Account Ownership and Control > Memorialization
  • Choose whether the Legacy Contact can download a copy of your data
  • Alternatively, choose to have your account permanently deleted after death
  • Note: Legacy Contacts can pin a tribute post, change profile/cover photo, and accept friend requests -- but cannot read messages, remove content, or log in as you

Instagram

• Currently no legacy contact feature -- account can only be memorialized or deleted by a verified family member after death
• Consider downloading your data periodically (Settings > Your Activity > Download Your Information) and storing it locally

X (Twitter)

• Currently no legacy contact or memorialization feature
• A verified family member or estate representative can request deactivation with documentation
• Account may auto-delete after extended inactivity

LinkedIn

• Currently no legacy contact feature
• A verified family member can request a memorial page or account closure
• Consider exporting your connections and data periodically

Microsoft (Outlook, OneDrive, Xbox, etc.)

• Microsoft's "Next of Kin" process allows limited data access with a court order, death certificate, and proof of relationship
• Accounts auto-close after 2 years of inactivity
• Note: Microsoft's policies are among the more restrictive -- plan accordingly

Other Platforms

• Check each platform you use for legacy/inactive account settings
• For platforms with no legacy tools, ensure your executor knows the account exists and that credentials are accessible through your password manager

3.2 -- Email-Specific Considerations

Your primary email is often the skeleton key to your entire digital life -- it's the recovery address for almost every other account. Securing email access for your executor is arguably the single highest-priority digital planning task.

• Ensure your executor can access your primary email (via password manager emergency access or legacy contact settings)
• Consider setting up a forwarding rule or shared access with a trusted person on at least one email account
• Document which email address is the recovery/reset email for your major accounts

4.1 -- Choosing Your Digital Executor

Your digital executor may or may not be the same person as the executor of your will. Choose someone who is comfortable with technology, trustworthy with sensitive information, and ideally younger or at least tech-savvy enough to navigate online account recovery processes.

• Choose a digital executor (and a backup)
• Have a conversation with them about the role and what it involves
• Show them where your password manager emergency information is stored
• Let them know about this guide

4.2 -- Legal Authorization

• Include digital assets in your will or trust
• Specifically authorize your executor to access your digital accounts -- RUFADAA (Revised Uniform Fiduciary Access to Digital Assets Act), adopted in 48 U.S. states, provides a framework, but explicit consent in your estate documents is strongest
• Consider including language authorizing your executor to bypass two-factor authentication and use backup codes
• Ask your estate planning attorney about a separate digital estate plan document (keeps passwords out of the public will)
• If you hold cryptocurrency, include a specific crypto clause in your estate documents acknowledging these holdings

5.1 -- Cryptocurrency & Digital Financial Assets

Crypto is fundamentally different from bank accounts. There is no customer service number. No one can reset your password. If your private keys or seed phrases are lost, the assets are gone permanently.

• Document all cryptocurrency holdings (coins/tokens, amounts, wallets, exchanges)
• Store seed phrases / recovery phrases in a physical, secure location (fireproof safe, safe deposit box, or split across multiple locations)
• Never store seed phrases digitally in a way that could be hacked (not in email, not in cloud storage, not in a text file)
• Consider a hardware wallet (Ledger, Trezor) with the device and PIN stored securely
• Consider multi-signature wallets with a co-signer who is your executor
• Write plain-language instructions for a non-crypto-savvy person on how to access and liquidate
• Document which exchanges hold funds and how to access them

5.2 -- Businesses, Domains & Online Revenue

• Document all domains you own and their registrars (GoDaddy, Namecheap, Cloudflare, Google Domains, etc.)
• Ensure domain auto-renewal is on to prevent expiration during estate settlement
• Document any websites or blogs and their hosting providers
• Transfer admin access for business social media pages to at least one other person
• Document any online revenue streams (YouTube monetization, affiliate programs, ad revenue, Patreon, Substack, etc.)
• For online businesses, document the tech stack, hosting, and any critical vendor relationships
• If you admin Discord servers, Slack workspaces, or online communities, designate co-admins

5.3 -- Smart Home & Connected Devices

This is increasingly urgent and often overlooked. When someone dies, their smart home can become an obstacle course for survivors -- locks they can't open, thermostats they can't control, security cameras they can't access or disable.

• Document the primary account holder for each smart home system
• Ensure at least one other household member has admin/owner access (not just "member" access) to smart home platforms
• Document Wi-Fi network name and password
• Document router admin login
• List all connected devices and what account controls each one
• Smart locks: Ensure someone else has the master code or physical backup key
• Security systems: Ensure someone else can arm/disarm and knows the monitoring company's cancel/transfer process
• Connected vehicles: Document how to transfer ownership of connected car accounts (Tesla, etc.) and note that some features may require re-subscription
• Smart speakers/assistants: Note that these may contain voice purchasing settings, calendar information, and other personal data

5.4 -- Photos, Memories & Sentimental Digital Assets

These are often the most emotionally important digital assets -- and the most at risk of being lost.

• Identify where your photos and videos are stored (phone, cloud services, external drives, old computers)
• Create at least one consolidated backup of irreplaceable photos and videos on a physical drive
• Store that drive in a known, safe location and tell someone where it is
• Consider printing or creating a physical photo book of the most important photos -- physical copies survive platform changes and account lockouts
• Document any personal writing, journals, or creative work stored digitally and your wishes for them
• Note any voicemails, voice messages, or audio recordings you'd want preserved

5.5 -- Email and Message Archives

• Consider using Google Takeout, Apple data export, or similar tools to periodically download email archives
• Document your wishes: should your executor read your emails? Delete them? Preserve them?
• Note any important ongoing email threads (legal, financial, personal) that your executor may need

An estimated 2.5 million deceased individuals are victims of identity fraud annually. The period immediately after death is especially vulnerable because there's a gap between the death and when government agencies and financial institutions are notified.

6.1 -- Pre-Planning to Reduce Risk

• Minimize the personal information in any future obituary (avoid full birthdate, mother's maiden name, home address, specific employment history)
• Set up credit monitoring or freeze your credit proactively -- this also makes it easier for survivors to lock things down
• Shred physical documents with sensitive information rather than discarding them
• Be aware that genealogy sites, voter registration databases, and social media profiles all provide information that thieves use to assemble identities
• Consider opting out of data broker sites while you're alive (services like DeleteMe can help)

6.2 -- Instructions for Your Executor (Pre-Plan These Steps)

Leave a note for your executor with these steps so they know what to do quickly:

• Notify the Social Security Administration (1-800-772-1213) as soon as possible
• Send death certificate copies to all three credit bureaus (Equifax, Experian, TransUnion) and request a "deceased" alert and credit freeze
• Notify the IRS (to prevent fraudulent tax returns)
• Cancel the deceased's driver's license with the DMV
• Notify banks and financial institutions immediately
• Monitor credit reports for at least 12 months for new activity
• Forward or stop physical mail (thieves monitor mailboxes of the deceased)
• Be cautious of "bereavement scams" -- fraudsters who use obituary details to impersonate acquaintances of the deceased

7.1 -- Secure the Devices

• Locate all devices: phones, tablets, laptops, desktops, smart watches
• Do not wipe, reset, or update any device. Keep them charged and powered on if possible -- some have auto-lock or auto-erase features after too many failed attempts
• If you know the passcode, unlock the device and disable auto-lock temporarily
• If you don't know the passcode, set the device aside safely -- you may need it later for account recovery
• Check if the phone has biometric login (Face ID / fingerprint) -- this will stop working, but the backup PIN is what you need
• Plug in and charge all devices to prevent data loss from dead batteries
• Locate any physical security keys (YubiKey, Titan) and keep them safe

7.2 -- Secure the Email

• Access the deceased's primary email as soon as possible -- this is the gateway to every other account
• Check for any urgent messages (financial alerts, bills due, pending transactions)
• Watch for password reset emails that might indicate someone else is trying to access accounts
• Do NOT delete any emails -- you may need them for estate settlement

7.3 -- Stop the Financial Bleeding

• Identify recurring subscriptions and charges by reviewing email (search for "receipt," "subscription," "renewal," "payment," "invoice")
• Review bank and credit card statements for recurring charges
• Cancel or pause subscriptions that are actively draining funds
• Contact banks and credit card companies to flag the account and prevent new charges
• If the deceased had autopay set up for bills, determine which ones are critical to keep running (mortgage, utilities, insurance) vs. which to cancel

7.4 -- Smart Home Immediate Actions

If you live in the home and can't control smart devices:

• If locked out of smart locks, use physical backup keys
• If unable to control the thermostat, look for manual override on the device itself
• If security cameras are recording and you can't access them, unplug them for now and address access later
• If Alexa/Google Home are responding to the deceased's commands or purchasing settings, unplug them until you can reconfigure
• Contact the security monitoring company to transfer or cancel service

8.1 -- Protect Against Identity Theft

• Notify the Social Security Administration of the death (call 1-800-772-1213)
• Send certified copies of the death certificate to all three credit bureaus:
  • Equifax: P.O. Box 105139, Atlanta, GA 30348
  • Experian: P.O. Box 4500, Allen, TX 75013
  • TransUnion: P.O. Box 2000, Chester, PA 19016
• Request that each bureau flag the file as "deceased" and freeze credit
• Send a copy of the death certificate to the IRS to flag the SSN
• Cancel the driver's license with the DMV
• Monitor the deceased's credit reports monthly for at least the next year
• Notify USPS to forward or hold mail
• Be wary of phishing emails, scam calls, or strangers reaching out claiming to know the deceased -- "bereavement scams" are common
• If the obituary is published online, be cautious about how much personal detail it contains

8.2 -- Begin Account-by-Account Review

Using the deceased's email, password manager, and any documentation they left:

• Create a master spreadsheet of discovered accounts (account name, status, action needed, date completed)
• Prioritize: financial accounts > email > cloud storage > social media > everything else
• For each account, determine whether to: transfer ownership, memorialize, close/delete, or leave alone for now
• Keep records of every call, email, and ticket number -- you will need them
• Request a deceased person's credit report to discover financial accounts you might not know about

8.3 -- Social Media Decisions

There is no rush on these. Take your time.

• Decide whether to memorialize, delete, or leave each social media account as-is
• If memorializing on Facebook: use the Memorialization Request form or contact the Legacy Contact
• If deleting: gather any content you want to preserve FIRST (download photos, save posts, screenshot meaningful exchanges)
• Consider downloading a full data archive from each platform before making changes
• If the deceased's accounts are public, be aware that bots and scammers may target the profile -- consider restricting access or memorializing sooner rather than later
• Notify admin/moderator roles: if the deceased administered Facebook Groups, Pages, Discord servers, or other communities, work with co-admins or platform support to transfer admin rights

8.4 -- Ongoing Subscription & Service Cancellation

• Use the email account to search for all subscription-related emails
• Check app stores (iOS App Store, Google Play) for active subscriptions
• Check the password manager for accounts that may have payment methods attached
• Cancel streaming services, SaaS subscriptions, and memberships
• Contact domain registrars if the deceased owned domains -- don't let them lapse if they're needed for business continuity
• Cancel or transfer utility accounts tied to online portals
• Address any "Buy Now Pay Later" balances

9.1 -- Digital Asset Settlement

• Work with the estate attorney on any accounts that require legal documentation to access
• Gather and file any paperwork required by platforms (death certificates, letters testamentary, court orders)
• Transfer ownership of any domains, websites, or online businesses
• Address cryptocurrency holdings -- if seed phrases or keys are accessible, consult with a crypto-knowledgeable financial advisor or attorney before moving funds
• Determine the value of any digital assets that may be part of the estate (revenue-generating accounts, crypto, domain names, digital businesses)
• File final tax returns and note any digital income sources

9.2 -- Data Preservation

• Download and archive photos, videos, and documents from all cloud services
• Export email archives if desired
• Save any voicemails, voice messages, or audio recordings
• Back up phone data (photos, texts, voicemails) before the phone plan is cancelled or the device is wiped
• Create a consolidated memorial archive on a physical drive and/or shared cloud folder for family
• Consider creating a printed photo book or other physical memorial artifact from digital photos

9.3 -- Online Presence Cleanup

• Review and update/remove online profiles that might still appear in search results
• Remove the deceased from data broker sites (or use a service like DeleteMe)
• Cancel any USPS Informed Delivery account
• Close or remove listings on professional directories
• If the deceased had a personal website or blog, decide whether to maintain it as a memorial, archive it, or take it down
• Google the deceased's name periodically to catch any unauthorized use of their identity

• Continue monitoring credit reports for at least 2 years -- identity thieves are patient and may wait months or years before exploiting a deceased person's identity
• Watch for annual subscription renewals that may not appear until months later
• Keep a record of all accounts that were closed, transferred, or memorialized
• Maintain the physical backup of preserved digital memories in a safe location
• Be aware that some platforms (Apple) will automatically delete accounts after a set period once legacy access is granted -- retrieve everything you want before that deadline

This section is for people who have lost someone and are starting from scratch. There was no password list, no digital executor, no legacy contacts configured, no instructions left behind. You are figuring it all out while grieving, and that is an incredibly difficult position to be in. This section walks through realistic, legitimate approaches for each major platform and scenario, including what to expect, what you will and will not get, and how long it typically takes.

One critical principle before you begin: get into email first. Email is the skeleton key to nearly every other account. Password resets, account verification, subscription receipts, financial alerts; they all flow through email. If you can access one email account, you can systematically discover and potentially recover dozens of other accounts. Prioritize email above everything else.

11.1 -- The Starting Point: Discovery Methods

Before you can access accounts, you need to find out what accounts existed. Here are the most effective discovery methods when no inventory was left behind.

Check the Devices First

• Look at the home screen of their phone and tablet; every app icon is a potential account
• Open the browser on their computer and check bookmarks and browser history
• Check the browser's auto-fill suggestions; start typing common site names (amazon, facebook, bank) in the address bar and see what auto-completes
• Look for browser saved passwords (see Section 11.10 for details on accessing these)
• Check for authenticator apps (Google Authenticator, Authy, Microsoft Authenticator); these reveal which services had two-factor authentication enabled
• Look at notification center and lock screen notifications for app alerts
• Check the "recently used apps" view on their phone

Follow the Money

• Review 3 to 6 months of bank statements and credit card statements for recurring charges; every charge is a discovered account
• Look for charges from Apple, Google, PayPal, Venmo, and other payment processors
• Check for small verification charges (often $0.01 to $1.00) that indicate recently linked accounts
• Request a deceased person's credit report from all three bureaus (Equifax, Experian, TransUnion); this reveals financial accounts, credit cards, and loans you may not know about
• Check physical mail for statements, bills, and subscription renewal notices

Search the Email

Once you have email access (see Section 11.2 and 11.3):

• Search for "welcome to" or "verify your email" or "confirm your account" to find account creation messages
• Search for "subscription," "receipt," "invoice," "payment," "renewal," and "billing"
• Search for "password reset" or "forgot password" to find accounts they recovered in the past
• Search for "two-factor" or "verification code" to find accounts with 2FA enabled
• Search for the name of every major platform (Amazon, Netflix, Spotify, etc.)
• Look at the spam/junk folder; marketing emails reveal accounts
• Check email folders and labels the person created; these often reveal organizational habits around specific services

Physical Clues

• Look for written notes, sticky notes near the computer, notebooks, or index cards with passwords or account names
• Check for a physical safe, lockbox, or designated "important papers" location
• Look for hardware security keys (YubiKey or similar small USB devices) on their keychain or near their computer
• Check their wallet for loyalty cards, membership cards, and store credit cards
• Look for printed password manager emergency kits or recovery sheets

11.2 -- Email as the Skeleton Key

Why email comes first: Almost every online account uses an email address for sign-up, password recovery, and notifications. If you can access the deceased's primary email, you can:

• Discover accounts by searching for registration and receipt emails
• Reset passwords on other accounts by triggering "forgot password" flows
• Intercept two-factor authentication codes sent via email
• Find financial account notifications that reveal holdings
• Cancel subscriptions by following unsubscribe or account management links

If you already have access to their email (because the computer is unlocked, you know the password, or a browser session is still active), secure it immediately. Change the recovery phone number and backup email to yours if you are the legal executor. Do not delete anything.

If you do not have access to their email, the platform-specific processes in Sections 11.3 through 11.5 describe how to request access from Google, Apple, and Microsoft. Getting into email should be your very first priority, even before financial accounts.

11.3 -- Google (Gmail, Drive, Photos, YouTube)

Google accounts are the most commonly used email platform and often hold Gmail, Google Drive documents, Google Photos, YouTube history, Google Pay records, and more.

Discovery

• Check if their phone is an Android device; it almost certainly has a Google account
• Look for Gmail notifications or the Gmail app on any device
• Check browser bookmarks and history for Google services
• Search bank/credit card statements for "Google" charges (Google One storage, YouTube Premium, Google Play purchases)

Access Without Credentials (No Inactive Account Manager Set Up)

Google's process for deceased user accounts is a formal request that goes through multiple steps.

Step 1: Submit the Deceased User Request Form

• Go to Google's deceased user support page: support.google.com/accounts/troubleshooter/6357590
• You will be asked what you want to do: obtain data from the account, request account closure, or report funds in Google Pay

Step 2: Gather Required Documentation

• Your government-issued photo ID
• The deceased person's death certificate
• Proof of your legal authority to act on behalf of the deceased (executor letters, letters testamentary, or power of attorney)
• If requesting data (not just closure): a U.S. court order specifically naming Google and the data requested. Google will provide template language for this court order after your initial request is reviewed.

Step 3: Submit and Wait

• Google reviews each request individually. Initial review can take several weeks.
• If approved for data access, Google will instruct you on how to obtain the required court order
• After the court order is submitted, allow an additional 2 to 4 weeks for processing
• Total timeline from initial request to data delivery: typically 1 to 4 months, sometimes longer

What You Will Get

• Copies of data from specified Google services (Gmail messages, Drive files, Photos, etc.)
• Data is typically delivered as a downloadable export, similar to Google Takeout
• Account closure if requested

What You Will NOT Get

• The account password (Google will never provide this)
• Login access to the account (you cannot sign in and use it)
• Any data from services you did not specifically request in the court order
• Instant access; this is a slow, formal process

Practical Workarounds

• If their computer has an active Chrome session signed into Google, you may be able to access Gmail, Drive, and Photos directly through the browser without needing the password
• Check Chrome's saved passwords (chrome://settings/passwords) which may reveal the Google account password itself
• If their Android phone is unlocked, Gmail and other Google apps are likely already signed in
• If they used Google Chrome and synced passwords, accessing Chrome on any device where they were signed in gives you access to all their saved passwords for other sites

Timeline Expectations

11.4 -- Apple (iCloud, Device Access, Photos, Messages)

Apple accounts control iCloud storage (photos, documents, backups), Messages, FaceTime, App Store purchases, Apple Pay, and all Apple device activation locks.

Discovery

• Check if they owned any Apple device (iPhone, iPad, Mac, Apple Watch)
• Look for the Apple ID email in device settings (Settings > [Name] at the top on iOS)
• Check bank statements for "Apple" or "apple.com/bill" charges
• Look for iCloud storage notification emails

Access Without Credentials: With Legacy Contact

If you were designated as a Legacy Contact before they died:

• Go to digital-legacy.apple.com
• You will need: your Legacy Contact access key (shared with you when you were designated) AND a certified copy of the death certificate
• Apple verifies the documentation and creates a special "legacy contact Apple Account" for you to access the data
• Processing time: typically 1 to 2 weeks after submission
• You will have access for up to 3 years before the account is permanently deleted

Access Without Credentials: Without Legacy Contact

If no Legacy Contact was set up, the process is significantly more difficult.

• Apple requires a court order naming you as the rightful inheritor of the deceased person's personal information stored in their Apple account
• In the U.S., you will need: a death certificate, a court order (from a state or federal court with jurisdiction), and your government-issued ID
• Submit the request through Apple Support or at an Apple Store
• Apple reviews each request individually; processing can take several weeks to months
• In some international jurisdictions (France, Germany, Japan, Australia, New Zealand), alternative documentation may be accepted instead of a court order

What You Will Get (Legacy Contact or Court Order)

• Photos and videos stored in iCloud
• Messages (if backed up to iCloud)
• Notes, files in iCloud Drive
• Device backups stored in iCloud
• Contacts, calendar, reminders
• Health data, Safari bookmarks

What You Will NOT Get

• Passwords stored in iCloud Keychain (this is explicitly excluded)
• Payment information (Apple Pay, stored credit cards)
• Licensed media (purchased music, movies, books, apps)
• Subscriptions or the ability to transfer them
• The account password itself

Device Access (Locked iPhone, iPad, or Mac)

This is one of the most painful scenarios. Apple's security architecture means:

• Apple cannot remove a device passcode without erasing the device
• If the device is locked and you do not know the passcode, Apple cannot help you bypass it while preserving data
• If the device is locked with Activation Lock (tied to Apple ID), Apple can remove the Activation Lock with proof of ownership and a death certificate, but this erases the device
• If the device has Face ID or Touch ID, biometric authentication will not work after death (Face ID requires attention detection; fingerprint sensors degrade)

Practical workaround: If the device is still unlocked or has a short auto-lock timer, access it immediately and disable auto-lock (Settings > Display & Brightness > Auto-Lock > Never). Every minute counts.

• Check if they used a simple 4-digit or 6-digit passcode; try common personal numbers (birthdays, anniversaries, addresses)
• If you can get into the device, check Settings > Passwords for all saved website and app passwords
• If you can get into the device, check Settings > [Name] to see the Apple ID email, which may help with other account recovery
• If the device is locked but you have iCloud access (through Legacy Contact or court order), you can retrieve iCloud backups which contain much of the device data

Timeline Expectations

11.5 -- Microsoft (Outlook, OneDrive, Xbox)

Microsoft accounts cover Outlook.com email (including @hotmail.com, @live.com, @msn.com), OneDrive file storage, Xbox gaming profiles, and Microsoft 365 subscriptions.

Discovery

• Check if they used a Windows PC (likely has a Microsoft account for sign-in)
• Look for Outlook, Hotmail, or Live email addresses in their contacts or other account registrations
• Check bank statements for Microsoft/Xbox charges
• Look for Office 365 or Microsoft 365 subscription emails

Access Without Credentials: Next of Kin Process

Microsoft has a formal "Next of Kin" process for deceased account holders.

• Contact Microsoft Support and request the Next of Kin process
• Required documentation: a certified copy of the death certificate AND a document proving your legal relationship to the deceased as a "close relative" (spouse, parent, child, sibling, grandparent, or grandchild)
• Microsoft may also require a court order or subpoena depending on the nature of the request and what data you are seeking

What You Will Get

• Outlook.com email contents (all emails and attachments)
• Address book and contact list
• Data is delivered on a physical DVD shipped to your address (not as an online download)

What You Will NOT Get

• The account password or the ability to sign into the account
• Account ownership transfer
• OneDrive files may require a separate court order
• Xbox digital purchases are non-transferable
• Access to any Microsoft 365 subscription content

Important Timing Warning

• Outlook.com and OneDrive data may be deleted after 1 year of inactivity
• Microsoft accounts expire entirely after 2 years of inactivity
• Submit your request promptly to avoid automatic data deletion

Practical Workarounds

• If the Windows PC is logged in and not locked, you have immediate access to Outlook (desktop app), OneDrive files synced locally, and browser-saved passwords
• On Windows, check for saved passwords in Edge (edge://settings/passwords) or Chrome
• BitLocker recovery keys may be stored in the deceased's Microsoft account at aka.ms/myrecoverykey (if you can access the account through other means)
• If the PC is locked with a Microsoft account password, and you have access to the associated email (through another method), you can attempt a password reset through account.live.com

Timeline Expectations

11.6 -- Facebook / Meta (With and Without Legacy Contact)

Discovery

• Search Facebook for their name; if they had a profile, it will appear in search results
• Check their phone for the Facebook, Messenger, or Instagram apps
• Search their email for Facebook notifications
• Ask friends and family if they were connected on Facebook

With a Legacy Contact Designated

If the deceased set up a Legacy Contact before they died:

• The Legacy Contact can request memorialization of the account by submitting proof of death
• Once memorialized, the Legacy Contact can: pin a tribute post, update the profile photo and cover photo, respond to new friend requests, and (if the deceased opted in) download a copy of the account data
• The Legacy Contact does NOT need the deceased's password

Without a Legacy Contact

• Any verified immediate family member can request memorialization by submitting a memorialization request at facebook.com/help/contact/305593649477238
• You will need to provide proof of death (obituary link, death certificate, or other documentation)
• Alternatively, a verified immediate family member or legal representative can request permanent account deletion through a separate form
• To request a copy of account data without a Legacy Contact, you may need a court order or a valid legal request

What You Will Get

• Memorialization of the profile (adds "Remembering" before the name)
• Download of account data (if Legacy Contact was granted this permission, or via legal process)
• The downloaded data includes posts, photos, videos, and profile information

What You Will NOT Get

• Login access to the account; no one can sign into a memorialized account
• Access to private messages (Messenger content); this is explicitly excluded even for Legacy Contacts
• The ability to remove existing content, posts, or photos from the memorialized profile
• The ability to remove existing friends

Practical Workarounds

• If their phone is unlocked and the Facebook/Messenger app is still logged in, you can access messages, photos, and content directly before memorialization
• Download any content you want to preserve BEFORE requesting memorialization, because once memorialized, the account cannot be logged into
• If their email is accessible, check for Facebook notification emails that may contain message previews
• If their browser has an active Facebook session, you can access the account through the browser

Important Note on Timing

Do not rush to memorialize a Facebook account if you still need to access content through an active session on a device. Once memorialized, all active sessions are terminated and no one can sign in again.

11.7 -- Financial Institutions (Banks, Credit Cards, Investments)

CRITICAL WARNING: Check Account Ownership Type BEFORE Notifying the Bank

Read this before you do anything. When a bank learns that an account holder has died, they will typically freeze the sole-owned accounts. This means no withdrawals, no bill payments, no autopay. If the surviving family depends on funds in those accounts for mortgage payments, utilities, or daily expenses, a freeze can cause immediate financial hardship.

Before notifying any financial institution:

• Determine whether each account is jointly owned, solely owned, or has a payable-on-death (POD) / transfer-on-death (TOD) beneficiary designation
• For joint accounts: the surviving owner retains full access. Notify the bank to remove the deceased's name, but funds remain available.
• For sole accounts: notification will trigger a freeze. Ensure you have alternative funds available for immediate expenses before notifying.
• For accounts with POD/TOD beneficiaries: these transfer directly to the named beneficiary outside of probate, but the bank still needs the death certificate to process the transfer.
• If you are unsure of the account type, consult with an estate attorney before notifying the bank.

Discovery of Financial Accounts

• Review all bank and credit card statements available (paper and electronic)
• Search email for bank names, "statement available," "account alert," and "direct deposit"
• Request a deceased person's credit report from all three bureaus; this is the most comprehensive way to find unknown accounts, credit cards, and loans
• Check physical mail over the next 2 to 3 months for statements and tax documents
• Look for tax returns (prior year Form 1040 and supporting schedules) which list interest income, dividend income, and capital gains; each of these points to a financial account
• Check for safe deposit boxes at local banks (these may require a court order to access)
• Review the deceased's insurance policies, which may reference financial institutions

Access Process for Sole Accounts

• Contact the bank's dedicated estate or bereavement department (most large banks have one)
• Required documentation typically includes: certified death certificate, letters testamentary or letters of administration from probate court, your government-issued ID, and possibly an EIN (Employer Identification Number) for the estate
• The bank will guide you through their specific process for transferring or distributing funds
• Investment and brokerage accounts (Fidelity, Schwab, Vanguard, etc.) have similar processes but may also require a completed transfer form specific to each firm

What You Will Get

• Access to account statements and transaction history
• Distribution of funds according to the will, probate court, or beneficiary designations
• Closure of the account after distribution

What You Will NOT Get

• Instant access; probate-dependent accounts may take months to release funds
• Online login access to the deceased's banking portal (banks create new estate accounts)
• Access to safe deposit box contents without a court order (in most states)

Timeline Expectations

11.8 -- Phone Carriers (Getting the Phone Number for 2FA)

Maintaining control of the deceased's phone number is critically important. Many accounts use SMS-based two-factor authentication, and if the phone number is disconnected or reassigned, you lose the ability to receive verification codes needed to access those accounts.

Why This Matters

• SMS verification codes are used by banks, email providers, social media, and many other services
• If the phone number is canceled, a new person may eventually be assigned that number, creating both a privacy risk and a loss of account recovery capability
• Some carriers will cancel the line after a period of non-payment, so act promptly

Priority Action

Keep the phone active and the phone number assigned to a device you control. Do this within the first week if possible.

Carrier-Specific Processes

Verizon (800-922-0204)

• An estate executor can transfer the line to a new or different Verizon account
• Complete the Executor transfer or disconnect service form (available on verizon.com/support)
• Documentation: death certificate, executor documentation
• Typical processing time: approximately 3 business days

AT&T (800-331-0500)

• Complete a Transfer of Billing Responsibility form to move the line to your account
• Any past-due balance must be paid before the line can be transferred
• Device installment plans transfer with the line
• Documentation: death certificate, proof of relationship or executor status

T-Mobile (877-746-0909)

• Call customer service to transfer or cancel the line
• Documentation: death certificate, and the deceased's Social Security number if available
• T-Mobile's requirements are generally less strict than Verizon or AT&T

Other Carriers / MVNOs

• Contact customer service directly; most prepaid and smaller carriers have informal processes
• Have the death certificate, your ID, and any account information you can find (account number, PIN, last four of SSN)

Practical Workarounds

• If the phone is unlocked and the SIM is active, you can receive 2FA codes directly on the device
• If the phone is locked, move the SIM card to another compatible phone to keep receiving SMS codes while you work through account recovery
• Some phones allow you to see incoming SMS on the lock screen even without unlocking; check notification settings
• If the phone uses eSIM (newer iPhones and Android devices), contact the carrier about transferring the eSIM to a new device

11.9 -- Password Managers (When You Do Not Have the Master Password)

If the deceased used a password manager but you do not have the master password, your options are limited by design. Password managers are built specifically so that no one, including the company that makes them, can access the vault without the master password.

Determine Which Password Manager Was Used

• Look for password manager apps on their phone or computer (1Password, Bitwarden, Dashlane, LastPass, Keeper, etc.)
• Check browser extensions; password managers typically install browser extensions that are visible in the browser toolbar
• Search email for "welcome to 1Password" or "Bitwarden" or similar account creation confirmations

Recovery Options by Password Manager

1Password

• If they used a 1Password Family or Teams plan, the family organizer or team admin can perform account recovery for members
• Look for a printed "Emergency Kit" (a PDF that 1Password generates containing the Secret Key and space to write the master password). Check the physical safe, filing cabinets, and anywhere they kept important papers.
• Without the Emergency Kit or family/team admin access, the vault is unrecoverable

Bitwarden

• If they used Bitwarden's Emergency Access feature and designated you as a trusted contact, you can request access. After the designated waiting period (set by the account holder, typically 1 to 30 days), access is granted automatically.
• If they used a Bitwarden Organization account, an admin can reset the master password for organization members
• Without Emergency Access or org admin, the vault is unrecoverable. Bitwarden explicitly states they cannot retrieve or reset a lost master password.

LastPass

• If they set up Emergency Access and designated you, you can request access through LastPass
• LastPass also supports account recovery via SMS or email for the account holder, but this requires access to their phone or email
• Without Emergency Access, the vault is unrecoverable

Dashlane

• If they designated an Emergency Contact, you can request access
• Dashlane supports biometric recovery on trusted devices; if you can access their phone with their biometric profile still active, you may be able to unlock Dashlane via fingerprint or face on that device (though biometric data degrades rapidly after death)
• Without Emergency Contact designation, the vault is unrecoverable

Keeper

• Keeper offers an Emergency Access (Digital Legacy) feature
• Without it being configured, the vault is unrecoverable

The Hard Truth

If no emergency access was configured and you do not have the master password or recovery kit, the vault contents are permanently inaccessible. This is by design. The password manager company cannot help you. There is no backdoor, no court order process, no override. You will need to recover each account individually using other methods (email-based password resets, platform-specific deceased user processes, etc.).

Practical Workarounds

• Check if the password manager app is still signed in on any device (phone, computer); password managers often stay unlocked for a configurable period
• Check if their browser has separately saved passwords outside the password manager (browsers save passwords independently)
• Look for the master password written down somewhere physical; many people write it on a sticky note, in a notebook, or on the emergency kit printout
• If they used a simple or personally meaningful master password, and you knew them well, it may be worth trying common personal patterns (this is legitimate when you are the legal executor)

11.10 -- Devices (Locked Phones, Laptops, Encrypted Drives)

Unlocked Devices: Act Fast

If any device is currently unlocked or you know the passcode, take these steps immediately:

• Disable auto-lock on the device (prevent it from locking itself)
  • On iPhone/iPad: Settings > Display & Brightness > Auto-Lock > Never
  • On Android: Settings > Display > Screen timeout > maximum value or "Never"
  • On Mac: System Settings > Lock Screen > set to Never (or maximum)
  • On Windows: Settings > System > Power > Screen and Sleep > Never
• Check browser saved passwords (your single most valuable resource):
  • Chrome: Settings > Passwords (or chrome://settings/passwords)
  • Safari: Settings > Passwords (Mac) or Settings > Passwords (iOS)
  • Firefox: Settings > Privacy & Security > Saved Logins
  • Edge: Settings > Passwords (or edge://settings/passwords)
• Check the device's native password/keychain system:
  • iPhone/iPad: Settings > Passwords (shows all saved passwords for websites and apps)
  • Mac: System Settings > Passwords, or open the Keychain Access application
  • Windows: Control Panel > Credential Manager
• Export or photograph the saved passwords before the device locks or runs out of battery
• Check for authenticator apps and photograph the current TOTP codes and account names

Locked Phones

iPhone (locked, passcode unknown)

• Apple cannot bypass the passcode without erasing the device
• If you can obtain iCloud access (through Legacy Contact or court order), iCloud backups contain most of the phone's data except the passcode itself
• If the phone shows notifications on the lock screen, you may be able to see incoming 2FA codes without unlocking
• Try common personal PINs: birthdate (MMDDYY or YYYYMMDD), anniversary, street address numbers, last four of SSN
• After 10 failed attempts, the phone may erase itself if that setting was enabled. Proceed with extreme caution; do not guess randomly.
• Third-party forensic data recovery companies exist but are expensive ($1,000 to $10,000+), and success is not guaranteed on modern iPhones with the Secure Enclave chip

Android Phone (locked, passcode unknown)

• If the phone is linked to a Google account and you have the Google account password, you may be able to unlock via "Forgot PIN" after several failed attempts (varies by manufacturer and Android version)
• Samsung devices with a Samsung account may allow remote unlock through findmymobile.samsung.com if you can access the Samsung account
• Android devices generally have fewer bypass restrictions than iPhones, but modern devices with full-disk encryption are still very difficult to access without the passcode
• Some older Android devices can be unlocked with ADB (Android Debug Bridge) if USB debugging was enabled, but this is uncommon

Locked Computers

Mac (locked, FileVault enabled)

• If FileVault is enabled and you do not have the password, the drive is encrypted and inaccessible without either the user password or the FileVault recovery key
• The FileVault recovery key may have been escrowed to the Apple ID; if you can access the Apple account (through Legacy Contact or court order), you may be able to retrieve the recovery key
• If FileVault was NOT enabled, you can reset the Mac's user password by booting into Recovery Mode (Command+R on Intel Macs, hold power button on Apple Silicon) and using the Reset Password utility. This does NOT decrypt a FileVault-protected drive.

Windows PC (locked, BitLocker enabled)

• If BitLocker is enabled and tied to a Microsoft account, the recovery key may be stored at aka.ms/myrecoverykey; you need Microsoft account access to retrieve it
• If BitLocker is enabled through a work or school account, contact their employer's IT department
• If BitLocker is not enabled, you may be able to reset the Windows password using a Windows installation USB or a password reset tool
• Check for a printed BitLocker recovery key in their physical files

Encrypted External Drives

• Drives encrypted with BitLocker, FileVault, VeraCrypt, or similar tools require the encryption password or recovery key
• Without the password or key, the data is effectively unrecoverable with current technology
• A professional data recovery service cannot bypass encryption; they can only recover data from physically damaged but unencrypted drives

11.11 -- Cryptocurrency (The Hard Truth)

Cryptocurrency is fundamentally different from every other type of digital asset covered in this guide. There is no company behind Bitcoin, Ethereum, or most other cryptocurrencies. There is no customer service number. There is no court order process. There is no reset password button. The design of cryptocurrency means that whoever holds the private keys controls the funds, and if nobody holds the private keys, the funds are gone permanently.

Two Very Different Scenarios

Scenario A: Cryptocurrency on an Exchange (Coinbase, Kraken, Gemini, etc.)

If the deceased held cryptocurrency on a centralized exchange, this is similar to a financial institution. The exchange is a custodian and has a formal process.

• Determine which exchange(s) were used by checking email for account confirmations, checking bank statements for transfers to exchanges, and looking for exchange apps on their phone
• Contact the exchange's estate or bereavement department
• Required documentation typically includes: death certificate, probate court documentation naming the executor or administrator, government-issued ID, and proof that the deceased held an account
• Coinbase, Kraken, and Gemini each have estate claim processes; none currently offer in-platform beneficiary designations
• After the claim is processed, assets are typically transferred to the beneficiary's own account on the same exchange
• Timeline: 4 to 12 weeks depending on the exchange and complexity

Scenario B: Cryptocurrency in a Self-Custody Wallet (No Exchange)

If the deceased held cryptocurrency in a hardware wallet (Ledger, Trezor), software wallet (MetaMask, Electrum), or paper wallet, and you do not have the seed phrase (also called recovery phrase, typically 12 or 24 words), the situation is extremely difficult.

• Search thoroughly for the seed phrase. Check: physical safes, safety deposit boxes, filing cabinets, notebooks, envelopes with attorneys, anywhere they kept important documents. Some people engrave seed phrases on metal plates.
• Search for the hardware wallet device itself (Ledger and Trezor are small USB-like devices). If you find the device AND know the PIN, you can access the funds.
• If you find the device but do not know the PIN, some hardware wallets allow a limited number of PIN attempts before wiping. Proceed with extreme caution.
• Search digital files for seed phrases (despite security advice against it, some people do store them in text files, notes apps, or photos of handwritten phrases)
• Check password managers and browser-saved passwords for exchange accounts or wallet passwords

Professional Recovery Services

• Specialized firms like Wallet Recovery Services, Brute Brothers, or KeychainX may be able to recover wallets if you have partial information (partial seed phrase, possible password variants, known wallet file)
• These firms typically charge 15% to 30% of recovered funds
• Success rates vary enormously depending on what information you have
• Be extremely cautious of scams; the crypto recovery space is full of fraudsters targeting desperate people. Never share seed phrases or private keys with anyone who contacts you unsolicited.

What is Honestly Unrecoverable

If the deceased held cryptocurrency in a self-custody wallet and:

• There is no seed phrase written down anywhere
• There is no hardware wallet device, or the device PIN is unknown and it has wiped after failed attempts
• There is no backup file on any device
• No one else was given any access information

Then the cryptocurrency is, in practical terms, gone. No technology exists to reverse-engineer a seed phrase from a wallet address. No court order can compel a blockchain to release funds. An estimated 20% of all Bitcoin in existence is considered permanently lost due to exactly this scenario. This is a difficult reality, and it underscores why proactive crypto estate planning is so important.

11.12 -- Platform-by-Platform Quick Reference for Path B

This table summarizes the process when NO legacy or pre-planning tools were set up.

11.13 -- Recommended Order of Operations for Path B

When you are starting from zero with no plan, no passwords, and no list of accounts, work through these steps in roughly this order. Some can be done in parallel; the numbering reflects priority, not strict sequence.

Phase 1: Secure and Preserve (Day 1 to 3)

• Charge and secure all devices. Do not reset, wipe, or update anything.
• If any device is unlocked, disable auto-lock immediately and check for saved passwords in browsers and the device keychain.
• If the phone is locked, move the SIM to a phone you control or keep the phone charged and accessible for incoming 2FA codes.
• Photograph or write down everything you find: saved passwords, authenticator app entries, auto-complete suggestions, app icons on the phone.

Phase 2: Get Into Email (Day 1 to 7)

• Check if email is already accessible through an open browser session on any device.
• If the computer is unlocked, check browser saved passwords for their email provider.
• If you cannot access email through a device, begin the formal request process with the email provider (Google, Apple, Microsoft; see Sections 11.3 through 11.5).
• If they had multiple email addresses, getting into any one of them may lead you to the others through account recovery emails.

Phase 3: Stabilize Finances and Phone (Week 1 to 2)

• Determine account ownership types (joint vs. sole) for all financial accounts BEFORE notifying banks.
• Contact the phone carrier to transfer the phone number to your account.
• Cancel non-essential subscriptions that are draining funds.
• Identify which autopay items are critical to maintain (mortgage, utilities, insurance).

Phase 4: Discover Accounts (Week 2 to 4)

• Search email for account registration messages, receipts, and password reset emails.
• Review 3 to 6 months of bank and credit card statements for all recurring charges.
• Request a deceased person's credit report from all three bureaus.
• Build a master spreadsheet of every discovered account with: service name, email used, status (accessible/locked/unknown), and action needed.

Phase 5: Systematic Account Recovery (Month 1 to 6)

• For each discovered account, attempt password reset via email first (this is why email access is priority one).
• For accounts requiring formal processes, begin those requests in parallel; they take weeks to months.
• Download and preserve data from any account you can access before closing or memorializing it.
• Keep a log of every call made, ticket number received, document submitted, and date. You will need this for estate settlement and in case requests are lost or denied.

Phase 6: Protect and Close (Ongoing)

• File identity theft protections with credit bureaus, SSA, IRS, and DMV (see Section 8.1).
• Close or memorialize social media accounts after preserving desired content.
• Close unnecessary accounts to reduce ongoing identity theft risk.
• Continue monitoring credit reports for at least 2 years.

11.14 -- What to Expect Emotionally

This section would not be complete without acknowledging the emotional toll of this work. Searching through a loved one's digital life is intimate, exhausting, and often triggering. You may encounter:

• Private conversations, photos, or content that surprises you
• Automated emails addressed to the deceased that arrive for months after death
• AI-generated "memories" or "on this day" notifications from platforms that do not know the person has died
• Frustrating, bureaucratic processes that feel dehumanizing when you are grieving
• The urge to rush through everything, or the opposite, the inability to face any of it

There is no wrong way to handle this. Some people work through it methodically and find it grounding. Others need to step away for weeks at a time. Consider asking a trusted, tech-savvy friend or family member to help with the mechanical parts (calling carriers, filling out forms, searching email) while you focus on the decisions that only you can make.

If you need support, the resources in the main Resources section of this guide include grief support organizations. Use them. This work can wait. You cannot pour from an empty cup.

The Foundation

• GYST (Get Your Shit Together): getyourshittogether.org -- Chanel Reynolds' original checklist and expanded guides for legal, financial, and personal planning. Start here if you haven't yet.

Legal & Estate Planning

• RUFADAA Information: The Revised Uniform Fiduciary Access to Digital Assets Act has been adopted in 48 states and provides the legal framework for digital asset access after death. Ask your estate planning attorney about your state's version.
• Nolo: nolo.com -- Accessible legal guides including digital estate planning
• FreeWill: freewill.com -- Free online will creation tool

Identity Protection

• Identity Theft Resource Center (ITRC): idtheftcenter.org -- Resources for preventing and responding to identity theft of deceased persons
• Annual Credit Report: annualcreditreport.com -- Free credit reports from all three bureaus
• FTC Identity Theft: identitytheft.gov -- Federal Trade Commission identity theft reporting and recovery

Digital Estate Tools

• Password Managers with Emergency Access: 1Password, Bitwarden, Dashlane, LastPass, Keeper
• Google Inactive Account Manager: myaccount.google.com/inactive
• Apple Legacy Contact: Settings > [Your Name] > Sign-In & Security > Legacy Contact

Grief & Emotional Support

• The Dougy Center: dougy.org -- Grief support for children and families
• GriefShare: griefshare.org -- Support groups
• National Alliance for Grieving Children: childrengrieve.org

The GYST checklist reminds us that "hoping for the best is not a plan." In the digital age, that's more true than ever. Our online lives are deeply intertwined with our financial, social, and emotional lives. When someone dies without a digital plan, the people left behind face an overwhelming tangle of locked accounts, draining subscriptions, vulnerable identities, and potentially lost memories.

Getting this stuff done -- even a little bit at a time -- is one of the most caring things you can do for the people who love you. And if you're in the "after" and reading this while grieving, know that you don't have to do it all at once, and you don't have to do it alone.

This guide is shared freely in Daniel Records-Galbraith's honor. If it helps even one person, that's enough.

This guide is provided for informational purposes and does not constitute legal, financial, or professional advice. Consult with qualified professionals for your specific situation. Laws regarding digital assets vary by state and country and are evolving rapidly.

Version 1.1 -- May 2026
A Circle 6 Systems Resource