Estate of Accounts: The Password Vault Nobody Inherited

When an Ohio man's father passed away in 2022, the family spent eleven months trying to recover a decade of photographs trapped inside a cloud account. The password died with him. So did the recovery email, the two-factor authentication device, and, apparently, any hope of a straightforward answer from the platform's support team.

Stories like this are no longer rare. They are becoming a defining feature of American grief in the digital age.

The Account Afterlife Nobody Planned For

The average American now maintains well over a hundred online accounts, spanning banking, insurance, utilities, medical portals, social media, and subscription services. Each one represents a thread in a digital estate that most people never think to include in a will.

The consequences fall on survivors. Utility accounts keep auto-billing a deceased person's credit card. Streaming subscriptions renew for months. More troubling still, orphaned accounts become prime targets for fraudsters, who monitor obituaries — a tactic we have covered before in the context of identity theft — and move quickly to hijack the profiles of the recently deceased before families can secure them.

Cryptocurrency raises the stakes to another level entirely. A hardware wallet or a seed phrase written on a napkin is the only key to assets that cannot be recovered through any customer service line. Industry estimates suggest billions of dollars in digital currency are effectively stranded because their owners never documented access for anyone else.

A Legal Gray Zone Written in Terms of Service

The legal landscape is a patchwork. The Revised Uniform Fiduciary Access to Digital Assets Act, adopted in some form by nearly every state, gives executors limited authority to request access to a decedent's accounts — but platforms retain wide discretion to interpret it differently. Some cooperate promptly. Others demand court orders.

Federal law complicates matters further. The Stored Communications Act, written in 1986, was never designed with digital estates in mind, and its privacy protections can leave even a lawful executor without recourse. The result: families navigate grief while also navigating boilerplate written by lawyers who never met their loved one.

Legacy Contacts and Other First Steps

The good news is that the industry has begun to respond. Apple's Legacy Contact feature, Google's Inactive Account Manager, and similar tools from Meta and Microsoft allow users to designate who may access — or simply memorialize — their accounts after death. Enrollment takes minutes. Most Americans have never heard of them.

A sensible starting checklist:

• Inventory your accounts. A password manager with an emergency access feature can serve double duty, granting a trusted person access only after a set period of inactivity.
• Designate legacy contacts on every major platform that offers the option.
• Document, don't disclose. You need not share passwords today — only a secure, explainable path to them.
• Treat cryptocurrency like jewelry. Store access information with the same care and legal formality as a safe deposit box key.
• Name digital authority explicitly in estate documents, so your executor's powers are unambiguous.

None of this requires technical sophistication. It requires the same foresight Americans already apply to life insurance and beneficiary forms — applied to a life that increasingly exists behind login screens.

The Security Angle Families Miss

There is a cybersecurity dimension, too. Deceased individuals' accounts are attractive not just for sentimental data but as launch points for fraud: a hijacked email of a deceased person carries no one to report the compromise. Unattended accounts are also vulnerable to credential-stuffing attacks using passwords exposed in old breaches.

Cutting off one head of this problem — planning ahead — prevents the rest. A digital estate plan is, at its core, an act of account security performed on behalf of the people you leave behind. It deserves a place next to the will, not in the fine print of a terms-of-service agreement nobody read.