The Digital Asset Inventory Problem: Why Executors Don't Know What Exists
The average American maintains between 100 and 150 online accounts. Most are undocumented. An executor inheriting an estate will discover only the accounts they can physically locate: the bank statements in a desk drawer, the email forwarding to the deceased's inbox, the mortgage lender's portal. Everything else remains invisible.
This invisibility creates genuine loss. Cloud-stored photos from a grandchild's infancy, cryptocurrency held on an exchange platform, a decades-old email account containing correspondence with deceased family members, a WordPress blog with unpublished drafts. The data exists. The ownership is clear. Access remains blocked by passwords, platform policies, and federal law.
The legal framework governing digital asset access is fragmented and recent. Most states did not address the problem until 2014 when the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) began circulating through state legislatures. As of 2026, 40 states have adopted RUFADAA. The law attempts to bridge the gap between state probate authority and federal telecommunications law, specifically the Stored Communications Act (18 U.S.C. Section 2701). That federal statute prohibits third-party access to electronic communications without authorization from the account holder or a court order.
The conflict is direct: probate law says an executor, armed with Letters Testamentary, represents the estate and can access estate assets. Federal telecommunications law says a service provider cannot disclose the contents of electronic communications to anyone except the account holder, a person with written authorization from the account holder, or a court order. RUFADAA attempted to resolve this by allowing account access if the account holder created a digital asset power of attorney, designated a digital executor in a will, or if the executor presented both probate credentials and a court order.
In practice, service providers enforce their own terms of service, which often exceed federal and state law requirements. An executor might have RUFADAA authority under state law and a court order, and the service provider still refuses to release data based on contractual restrictions. Enforcement varies. Some platforms have dedicated processes for executors. Others deny all posthumous access unless a law enforcement agency or court clerk contacts them directly. Most sit in the gray zone, requiring substantial documentation and bureaucratic persistence.
Major Tech Platforms and Their Actual Death Policies
Google (Gmail, Drive, YouTube, Photos)
Google is the closest technology company to having a functional executor access protocol. The company operates two distinct posthumous management systems: Inactive Account Manager and Legacy Account status.
Inactive Account Manager is a proactive tool. The account holder sets a time threshold: 3, 6, 12, or 18 months of inactivity. After that period elapses, Google sends a warning email. If the account remains inactive for 30 days after the warning, Google permanently deletes the Gmail account, Drive files, photos, and YouTube history. This is not a memorial or a frozen state. It is deletion. Nothing of that account remains recoverable.
An executor cannot override or extend the Inactive Account Manager timer. If the deceased set a 6-month inactivity threshold and dies during month 8, the executor has approximately 4 months before the account self-destructs. The only path to preservation is account reactivation (login) within the window.
Legacy Account status is the functional posthumous access tool. A person designates a "legacy contact" during their lifetime through their Google account settings. Upon death, the legacy contact can:
- Download an archive of all account data (Gmail, Photos, Drive, YouTube, Contacts, Chrome bookmarks, Google Pay history, Search history, location data).
- Access the account to read messages and view files, but not send emails or modify content.
- Delete the account if desired.
- Delete specific content (photos, messages) without deleting the entire account.
The deceased does not need to create a formal legal document. The legacy contact is a simple dropdown selection in account settings. Google requires the legacy contact to submit a death certificate and proof of their relationship to the account holder. Processing typically takes 1 to 3 weeks.
If the deceased did not designate a legacy contact, an executor can request a data download by submitting Letters Testamentary, a death certificate, and a signed request form to Google's legal department. This process is slower: 4 to 8 weeks. Some submissions are denied if Google's legal team determines the request does not meet policy standards.
YouTube accounts are treated as part of the Google account ecosystem. Channel monetization, subscriber lists, and video metadata can be accessed or transferred by a legacy contact. However, YouTube does not allow channel transfer to a third party. An executor can download the channel data or delete the channel, but cannot create a living custodian with ongoing access.
Timeline for Google data access: Legacy contact with advance designation, 1 to 3 weeks. Executor without prior designation, 4 to 8 weeks, uncertain approval.
Facebook, Instagram, and WhatsApp
Meta operates a "memorialization" system: a process that converts an account to a memorial page without deleting the account or transferring ownership.
When someone dies, a family member can request that Facebook convert the account to a "memorial account." Meta requires proof of death (death certificate) and confirmation that the requester is a family member or authorized representative. Processing typically takes 2 to 5 business days.
A memorial account:
- Stops appearing in birthday reminders and friend recommendations.
- Prevents further logins.
- Restricts who can post to the wall (family members only, if they're designated as such).
- Keeps past posts, photos, and comments visible to friends who had permission to view them.
- Does not grant access to private messages or internal account data.
Private messages remain inaccessible to executors, even with a court order, unless Meta receives a law enforcement subpoena. Meta's legal team will not voluntarily disclose the contents of private messages to anyone, including executors, because the Stored Communications Act prohibits this disclosure unless mandated by law.
Family members or executors can request account deletion instead of memorialization. This is permanent and irreversible. All posts, photos, comments, and messages are deleted. No archive or backup is available to the estate.
Instagram follows identical protocols. WhatsApp, which Meta owns, deletes the account upon notification of death. There is no memorial version. WhatsApp stores end-to-end encrypted messages only on the user's device. No backup exists on company servers. The account and its message history are permanently deleted.
Timeline for Facebook/Instagram memorialization: 2 to 5 business days. For deletion: permanent and irreversible.
Apple (iCloud, iCloud Mail, Photos, iCloud Drive)
Apple launched its "Digital Legacy" program in 2023, positioning it as a direct response to the digital estate planning gap. The program is more restrictive than Google's but more comprehensive than Meta's.
A user designates up to 5 "legacy contacts" during their lifetime. These can be family members or trusted representatives. The legacy contact does not need to be an executor or have legal authority.
Upon proof of death (death certificate, Apple ID, and the legacy contact's identity), a legacy contact can:
- Download an archive of all account data in a single file (photos, videos, documents, calendar, contacts, notes, browser history, app data).
- Access specific content (view photos, read notes, view documents) within the Apple ID Management website.
- Delete the account and all associated data.
- Download and transfer specific data to a personal Apple account (available for select content types).
Legacy contact access does not include:
- Changing account settings or passwords.
- Accessing anything protected by Face ID or Touch ID (which are biometric and device-specific).
- Transferring an Apple Music subscription, Apple TV+ subscription, or other service subscriptions.
- Accessing two-factor authentication codes or recovery keys.
For accounts without a designated legacy contact, executors can submit a request to Apple's legal department with Letters Testamentary, a death certificate, and a formal request. Processing typically takes 3 to 6 weeks. Apple's legal team evaluates each request and may deny access if the requested data is considered private or if Apple determines the request does not meet policy standards.
Apple requires proof of death be provided in the form of an officially issued death certificate. Obituaries or newspaper clippings are insufficient.
Timeline for Apple Digital Legacy: Legacy contact with advance designation, 1 to 2 weeks. Executor without prior designation, 3 to 6 weeks, conditional approval.
Microsoft (Outlook, OneDrive, Xbox)
Microsoft permits an executor or authorized family member to request account access through its account recovery process, separate from the standard Outlook.com account recovery flow.
An executor submits:
- A copy of the death certificate.
- A copy of Letters Testamentary or proof of executor authority.
- A signed affidavit stating the executor's relationship to the deceased.
- Identification.
Microsoft then:
- Verifies the documentation.
- Grants the executor access to download account data (emails, calendar, contacts, OneDrive files).
- Permits account deletion.
- Does not permit account transfer or credential change. The account cannot be "reactivated" for ongoing use by the executor.
If the deceased created a "Family Organizer" account, the Family Organizer can access OneDrive files and some shared content, but not email.
Xbox accounts linked to a Microsoft account are not transferable. Executors can request deletion of the Xbox profile and associated digital content licenses, but the licenses themselves cannot be transferred to another user.
Timeline for Microsoft data access: 2 to 4 weeks, conditional on documentation verification.
Amazon (Prime, AWS, Kindle, Photos)
Amazon's posthumous access policy is fragmented between retail Amazon (Prime, Kindle, Photos) and Amazon Web Services (AWS).
For a retail Amazon account, an executor can contact Amazon Customer Service with:
- A copy of the death certificate.
- Proof of executor authority.
Amazon will:
- Provide access to order history and purchase information.
- Transfer Prime membership to a surviving spouse (if married) or family member for the remainder of the subscription period, depending on membership status.
- Delete or transfer Kindle library contents, depending on the licensing terms of the e-books.
Amazon Photos (the cloud photo storage service) can be downloaded by an executor. The data is retrieved as a backup file and provided to the executor.
AWS accounts are treated as business assets. AWS does not transfer account ownership or management authority to a new party. If the account holds business data, applications, or infrastructure, the executor must contact AWS Enterprise Support with documentation. AWS conducts a review and, if approved, grants the executor download access to data and documentation. The executor cannot assume ongoing management of AWS resources, databases, or running services. The account must be deactivated or transferred to a new owner (another person or company) through a separate ownership change process, which AWS facilitates but does not automate.
Kindle e-books are subject to Amazon's licensing terms. Most e-books cannot be transferred to another user. The executor can request deletion of the Kindle library or, in some cases, download the e-books as files, depending on the publisher's licensing agreement and Amazon's discretion.
Timeline for Amazon retail access: 1 to 2 weeks. AWS: 2 to 4 weeks.
Twitter/X and Other Social Platforms
Twitter/X does not offer a memorial account or legacy access option. An executor or family member can request account deletion through Twitter's support process by submitting:
- A copy of the death certificate.
- Proof of relationship to the account holder.
The account is deleted. All tweets, direct messages, followers, and account history are removed. No archive is available.
TikTok offers account deletion upon notification of death. Content deletion is permanent.
LinkedIn permits account memorialization similar to Facebook. A family member requests memorialization with proof of death. The account becomes a memorial, frozen in its current state. No data download is available to the executor.
Cryptocurrency Exchanges (Coinbase, Kraken, Gemini)
Cryptocurrency exchange accounts are subject to Know Your Customer (KYC) regulations, which restrict account transfers and access to account-verified users only.
Coinbase allows an executor to request account access and asset transfer by submitting:
- A death certificate.
- Letters Testamentary.
- A signed affidavit or court order.
Coinbase can liquidate cryptocurrency holdings and transfer the proceeds to the estate's bank account, or transfer the crypto itself to a new wallet address provided by the executor. Processing takes 2 to 8 weeks depending on documentation clarity and the number of assets in the account.
Kraken follows a similar process with identical documentation requirements.
Gemini processes executor requests but requires more extensive documentation, including a court-issued order stating that the executor has authority to manage the deceased's assets.
Critical limitation: These policies apply only to custodial wallets (cryptocurrency held on the exchange platform itself). Cryptocurrency stored in a private wallet (a wallet where the deceased controlled the private key) is permanently inaccessible if the password or seed phrase is unknown. The cryptocurrency exists on the blockchain but cannot be moved or accessed without the private key. No exchange, court order, or technical process can recover it.
This is the highest-risk scenario in digital estate planning. A single forgotten password can result in millions of dollars of cryptocurrency becoming permanently illiquid.
Timeline for exchange access: 2 to 8 weeks, subject to documentation.
Financial Accounts and Subscription Services
Online Banking and Brokerage Accounts
Online banks (Charles Schwab, Fidelity, TD Ameritrade, Mercury, Wise) require Letters Testamentary to grant executor access to accounts. The executor submits the letters along with the death certificate and account information.
Processing typically takes 1 to 2 weeks. The account is then frozen (no new transactions by the executor without further court authorization) until probate is resolved or the executor demonstrates that the funds are needed for estate expenses.
Brokerage accounts follow identical protocols. Stock transfers require probate approval and a 2- to 4-week processing window depending on the number of securities and the brokerage firm's internal procedures.
Subscription Services (Netflix, Spotify, Apple Music, etc.)
Netflix, Spotify, and similar streaming services can be canceled with proof of death (death certificate). The executor contacts customer service, provides the death certificate, and requests cancellation. Refunds for prepaid subscriptions (e.g., annual plans) are issued in some cases, depending on the company's refund policy and the time remaining on the subscription.
Netflix does not offer account transfer or family member takeover in the event of death. The account simply cancels.
Spotify permits family plans to be transferred to a surviving account holder if the family plan organizer dies. The executor notifies Spotify, and the most senior remaining family member assumes control of the plan.
PayPal and Venmo
PayPal freezes an account upon notification of death. An executor can request access to download transaction history and funds by submitting:
- A death certificate.
- Letters Testamentary.
- Identification.
PayPal typically processes these requests within 2 weeks and transfers remaining account funds to the estate's designated bank account. Venmo (owned by PayPal) follows similar procedures, though the process is slower (2 to 3 weeks).
Creating a Digital Asset Inventory and Access Plan During Lifetime
The most effective way to ensure executor access to digital assets is not to rely on court orders or platform policies after death. Instead, the account holder should document their digital assets and create access pathways during their lifetime.
Digital Asset Power of Attorney
A digital asset power of attorney is a legal document that authorizes a specified person (a family member, executor, or trusted advisor) to manage the account holder's digital assets if they become incapacitated or die. The document is executed during the account holder's lifetime and typically becomes effective immediately or upon a triggering event (incapacity or death, depending on how it's drafted).
A digital asset power of attorney is more durable and comprehensive than relying on platform-specific legacy contact designations because it:
- Applies across all platforms and services, not just those with formal legacy programs.
- Can be enforced in court if a platform refuses to recognize the document.
- Includes detailed instructions about which assets to preserve, which to delete, and which to transfer.
- Permits the designated agent to take action immediately, rather than waiting for probate or death confirmation.
A digital asset power of attorney should specify:
- The agent's name and authority.
- A list of known accounts and access methods.
- Instructions for handling each category of assets (email, social media, cryptocurrency, cloud storage, photos).
- Whether the agent is authorized to delete accounts, transfer ownership, or download data.
- Guidance on which accounts are high-priority (cryptocurrency, irreplaceable photos) and which are low-priority (Netflix, streaming services).
The document should be signed, notarized, and stored with the person's other estate planning documents. A copy should be provided to the designated agent.
Password Management and Encrypted Backup
No account access strategy is functional if the passwords are lost. The account holder should use a password manager (1Password, LastPass, Bitwarden, Dashlane) to store all account credentials in an encrypted vault.
The password manager itself should be secured with a strong master password. The master password should be stored separately from the vault (e.g., in a sealed envelope, in a safe, or with an attorney) so that the designated agent can access the vault after the account holder's death or incapacity.
A secondary approach is to maintain an encrypted spreadsheet or document containing all account names and passwords, encrypted with a strong passphrase. The passphrase is then communicated separately to the agent through a sealed letter or direct conversation.
Digital Asset Inventory Checklist
The account holder should create a comprehensive list of all digital assets, organized by category:
Email and Cloud Storage:
- Primary email address(es)
- Google Account (Gmail, Drive, Photos, YouTube)
- Apple ID and iCloud
- Microsoft account and OneDrive
- Dropbox, Box, or other cloud storage accounts
- Any business email accounts
Social Media and Digital Community:
- Facebook, Instagram, Twitter/X, TikTok, LinkedIn
- Reddit, Medium, Substack
- YouTube or other video accounts
- Websites, blogs, or domains owned
Financial Accounts:
- Online banks and brokerage accounts
- PayPal, Venmo, Square Cash
- Credit card accounts with online access
- Cryptocurrency exchange accounts
- Investment accounts (401k, IRA rollovers held in digital brokerages)
Subscription Services:
- Streaming services (Netflix, Spotify, Apple Music, Disney+)
- Software subscriptions (Microsoft Office, Adobe, Slack)
- Membership services
Business and Professional:
- AWS, Google Cloud, Azure, or other cloud infrastructure accounts
- SaaS tools (Salesforce, HubSpot, etc.)
- Domain registrar and web hosting accounts
- GitHub, GitLab, or other code repositories
Personal and Family:
- Photo sharing services (SmugMug, Flickr)
- Family tree sites (Ancestry, FamilySearch)
- Genealogy or DNA testing accounts
- Legacy or memorial websites
For each account, the inventory should include:
- Username or email address associated with the account.
- Password (encrypted).
- Recovery email or phone number.
- Two-factor authentication method (if enabled).
- Whether the account has designated a legacy contact or digital executor.
- Priority level (critical, important, or low).
"Digital Executor" Designation
Some people formalize the designation by explicitly naming a "digital executor" in their will or trust. This person is responsible for the entire digital asset settlement process: accessing accounts, downloading data, deleting accounts, transferring ownership where possible, and preserving meaningful content.
The digital executor role is distinct from the primary executor role and can be assigned to a different person. For example, a primary executor might be a family member with probate experience, while a digital executor might be a tech-savvy adult child who understands cryptocurrency and cloud infrastructure.
The digital executor should be given clear instructions in the will about authority, priorities, and the types of accounts included in their purview.
Common Digital Asset Mistakes and Lessons
Cryptocurrency and Lost Passwords
The most catastrophic digital asset loss involves cryptocurrency held in private wallets with lost seed phrases or passwords. When a password is lost and the wallet uses a secure encryption standard, it is permanently inaccessible. No recovery service, cloud backup, or technical workaround exists.
This has resulted in billions of dollars of cryptocurrency becoming permanently illiquid. Families have discovered after a death that a parent held significant cryptocurrency on a hardware wallet (like a Ledger or Trezor) but never documented the password or seed phrase. The wallet is secure. The funds are locked forever.
The prevention strategy is straightforward: for cryptocurrency that will be passed to heirs, use a custodial exchange (Coinbase, Kraken) rather than a private wallet, and ensure the exchange account is documented with the executor. For private wallets, ensure the seed phrase and password are stored in a secure location that the executor can access.
Family Photos in Private Cloud Accounts
Many people store the majority of their irreplaceable family photos in a private Google Photos, Amazon Photos, or iCloud account. If the account is not recovered by the executor, those photos are permanently lost when the account is deleted (which Google does after 2 years of inactivity, per the Inactive Account Manager policy).
The prevention strategy is to designate a legacy contact on the account during the account holder's lifetime. This costs nothing and takes 30 seconds.
Business Accounts and Continuity
A business owner who dies without having transferred the ownership, credentials, or administrative access to their AWS account, Shopify store, or Stripe account risks business shutdown. Customers cannot access the service. Revenue stops. The business cannot be sold because no buyer can assume control of the backend infrastructure.
Prevention requires documenting all business accounts and authorizing at least one backup person (a business partner, trusted employee, or attorney-in-fact) to take over account management. This authorization should be formalized in a digital asset power of attorney or business continuity plan.
Memorial Page Controversy
Facebook's memorialization process has created family conflict in several cases. A family member requests memorialization based on a death certificate, and Facebook grants the request. Later, another family member objects to the memorial status, prefers deletion, or wants the account converted to something else.
Facebook requires proof of relationship and the death certificate, but does not verify which family member has "authority" to make the decision. If multiple heirs disagree, Facebook's process has no tiebreaker. The account might be in a state (memorial) that no one wants, and reversing the decision requires contacting Facebook's legal team, which is slow.
Prevention requires the account holder to explicitly specify in their will or a separate document whether they want their social media accounts memorialized or deleted. This instruction is not legally binding on the platform, but it provides clear guidance to the executor and reduces family conflict.
FAQ
Q: Can an executor access the decedent's email and cloud files after death?
A: It depends on the platform and whether the account holder designated a legacy contact during their lifetime. Google, Apple, and Microsoft all permit executor access to email and cloud files if a legacy contact was designated in advance or if the executor submits Letters Testamentary and a death certificate to the company's legal department. The timeline for court-ordered access (without prior designation) is typically 4 to 8 weeks. If the account holder designated a legacy contact, access usually takes 1 to 3 weeks. Email and cloud files are not accessible without this formality; merely having the password is insufficient because the executor needs legal authority to override the platform's terms of service.
Q: What happens to social media accounts after death?
A: Social media platforms offer three options: memorialization (converting the account to a memorial page while keeping past posts visible), deletion (permanently removing all posts, messages, and account history), or no action (the account remains active but access is blocked after a period of inactivity). Facebook and Instagram can be memorialized if a family member or executor requests this with a death certificate. Twitter/X and TikTok offer only deletion. Private messages on most platforms are not accessible to executors or family members, even with a court order, unless the platform receives a law enforcement subpoena. The account holder should specify their preference in their will to reduce family conflict.
Q: How can I ensure my executor can access my digital assets after death?
A: The most effective strategy is to take action during your lifetime. First, designate a legacy contact on platforms that offer this feature (Google, Apple, Facebook, Instagram). This costs nothing and takes a few minutes. Second, create a digital asset power of attorney that authorizes a specific person to manage your accounts if you die or become incapacitated. Third, maintain a comprehensive list of all your digital assets (email, cloud storage, cryptocurrency, subscriptions, financial accounts) and store it with your estate planning documents. Fourth, use a password manager to securely store all passwords, and give the master password to your executor or store it in a safe location that your executor can access. Fifth, consider whether you want certain accounts deleted or memorialized after your death, and document this preference in your will.
Q: What happens to cryptocurrency if I die?
A: Cryptocurrency stored on a centralized exchange (Coinbase, Kraken, Gemini) can be accessed by an executor who submits a death certificate and Letters Testamentary. The exchange will liquidate the holdings and transfer the proceeds to the estate's bank account, or transfer the cryptocurrency itself to a new wallet. Processing typically takes 2 to 8 weeks. Cryptocurrency held in a private wallet (where you control the private key or seed phrase) is permanently inaccessible if the password or seed phrase is unknown. No recovery service or court order can unlock it. If you own significant cryptocurrency, ensure that either the seed phrase and password are stored securely and documented for your executor, or maintain the cryptocurrency in a custodial account with access instructions.
How Afterpath Helps
Managing and documenting digital assets is often overlooked in estate planning, yet it represents one of the highest-risk areas for loss of wealth and irreplaceable personal data. Afterpath's digital asset registry captures all of your accounts, documents the access methods, and flags assets that are at risk due to inaccessible passwords or missing legacy contact designations.
With Afterpath, you can:
- Create a comprehensive inventory of all digital assets in one location.
- Document the password or access method for each account (encrypted and secured).
- Designate a digital executor and specify which assets they should access, preserve, or delete.
- Track which platforms have legacy contact designations and which require executor documentation.
- Identify cryptocurrency wallets and ensure the seed phrases are documented and securely stored.
- Alert your executor to high-risk assets (lost passwords, private wallets) that require immediate attention.
Afterpath ensures that no cryptocurrency holdings, cloud files, or family photos are lost to forgotten passwords or platform inaccessibility. Your executor receives clear, actionable guidance about how to access your digital life after you die.
Get started with Afterpath Pro or join the waitlist to be notified when new features are available.
Related Reading
- Digital Asset Power of Attorney: Granting Executor Access to Your Online Accounts
- Cryptocurrency Estate Planning: Ensuring Your Digital Wallet Passes to Your Heirs
- RUFADAA and State Digital Asset Laws: What Your Executor Can Actually Access
- Executor First 30 Days: Operations and Attorney Guidance
- Tech Founder Estate Settlement: Stock Options, SAFEs, and Illiquid Equity
For Professionals
Streamline Your Estate Practice
Join professionals using Afterpath to manage estate settlements more efficiently. Early access is open.
Save My Spot