Your Passwords Don't Die With You: Sorting Out Your Digital Legacy in 2026

There's a moment that plays out in kitchens across the country, usually about three weeks after a funeral. Someone opens a laptop, types in an email address, and hits 'forgotten password'. The recovery email goes to a phone that's in a drawer, behind a lock screen nobody knows the code for. And the family realises that a lifetime of photographs, a decade of emails and quite possibly a not-insignificant amount of money have quietly become inaccessible.

This isn't a rare glitch. It's the default outcome. And it's fixable in an afternoon — mostly because the problem isn't legal, it's administrative.

Why 'everything to my daughter' doesn't unlock an iPhone

The core confusion is between owning something and being allowed to use it. A bank account is property. Your Facebook profile isn't — it's a licence to use a service, granted to you personally, on terms that almost universally say the account isn't transferable and dies with you.

So when your will says 'I leave my entire estate to my daughter', it does what it's supposed to do for property: the money, the house, the car. But when she emails Meta or Apple or WhatsApp, she isn't asking for an asset. She's asking for access to somebody else's account. And the answer is usually no.

There's a second wrinkle. Since the UK left the EU, our data protection law (UK GDPR) doesn't extend to the personal data of people who have died. That sounds helpful — surely the barriers fall away? In practice, providers still refuse, leaning on confidentiality, their own terms of service, and the simple fact that no law compels them to hand over a login. The result is a legal grey area that nobody's relatives can argue their way out of from a standing start.

The one thing you must not do is simply log in as the deceased and carry on. That can breach the platform's terms, and in the worst case it drifts towards unauthorised access offences under the Computer Misuse Act 1990. Not worth it for a photo album.

Where the real losses hide

Photos and cloud storage. The most emotionally loaded and least legally protected. Years of images sit in Google Photos or iCloud with no one able to reach them.

Email. Effectively the master key to everything else — password resets, receipts, contacts, statements. If the email goes, the rest of the trail goes with it.

Money. Bank accounts are handled properly by the bank once you notify them of a death; joint accounts pass automatically to the survivor. But PayPal balances, brokerage apps, premium bonds held online and cryptocurrency exchange accounts don't always surface in a paper trail. If nobody knows they exist, nobody claims them.

Crypto. The harshest category. Exchange holdings can usually be accessed through probate, but coins in a self-custody wallet need the seed phrase or private key. Without it, the asset isn't frozen — it's gone, permanently, and no court order on earth can retrieve it.

The small stuff that matters. Domain names, Etsy or eBay shops, Substack subscriptions, loyalty points, air miles, cloud backups of a novel nobody finished.

The one thing not to do

Do not write passwords into your will. A will becomes a public document once probate is granted — anyone can buy a copy. Publishing your login details in it is roughly equivalent to taping them to the front door.

Instead, keep a separate, sealed inventory. Options that work: a password manager with an emergency access feature, a sealed letter held by your solicitor, or a printed list in a fireproof box with the combination known to two people. Whatever you choose, more than one trusted person needs to know it exists.

Appointing a 'digital executor'

The phrase isn't a formal legal title in England and Wales — you can't put it in a will and expect it to have special powers. What you can do is name someone in a letter of wishes as the person responsible for your digital affairs, and give them the inventory. Some solicitors now draft a specific digital assets clause alongside the will; it doesn't grant access, but it clarifies your intentions and stops the family arguing about what you'd have wanted.

Pick someone comfortable with technology, organised, and ideally not the same person handling the house sale and the tax return.

The platform tools that actually help

This is the field that changes fastest, so check current help pages rather than trusting any guide, including this one. As of now:

• Apple lets you nominate a Digital Legacy Contact. That person can request access to your iCloud data with an access key and a death certificate.
• Google has Inactive Account Manager: you set a period of inactivity, nominate up to ten people, and choose whether they get access to specified data or whether the account is simply deleted.
• Meta offers memorialised accounts with a legacy contact for Facebook, and a similar process for Instagram through the accounts centre. You can also choose deletion instead.
• Microsoft runs a next-of-kin request process, which is more manual and slower than Apple's.
• X has no legacy tool; families can request deactivation.
• WhatsApp is the awkward one. End-to-end encrypted, no account transfer, no recovery. If you want the chats preserved, export them while you're alive. Afterwards, the realistic move is closing the account and releasing the phone number.

The 30-minute version

1. List what you have. Four columns: money, memories, admin, sentimental. Include the boring ones — broadband, streaming, the gym app.
2. Decide for each one. Keep, memorialise, or delete. Write it down.
3. Name a digital contact and tell them, out loud, that they've been named.
4. Set up legacy tools on Apple and Google at minimum. Ten minutes each.
5. Store the inventory somewhere secure and reachable, and make sure two people know how to reach it.
6. Diary a review once a year, next to the boiler service.

None of this requires a lawyer, though a solicitor can help you tie it into the will properly. What it requires is fifteen minutes of imagining the worst week of your family's life — and deciding, in advance, that they won't spend it on hold to a helpdesk.