Digital Estate Planning: How to Organize Passwords and Online Accounts

Estate planning conversations still mostly revolve around physical things: the house, the bank accounts, the will. But a growing share of most people’s lives exists somewhere with a login screen and no paper trail at all. Email, photo libraries, cloud storage, streaming subscriptions, social media, and for a growing number of people, cryptocurrency. It is one of the most commonly missed items on any estate planning checklist. None of it shows up if someone opens a filing cabinet after you’re gone.

This is the part of estate planning that gets skipped most often, not because it isn’t important, but because it doesn’t feel like “real” estate planning. It is.

What Actually Counts as a Digital Asset

Digital assets fall into a few categories worth thinking through separately:

• Financial accounts with online-only access: Online banks, investment platforms, PayPal, Venmo, cryptocurrency wallets and exchanges.
• Communication and storage: Email accounts, cloud storage (Google Drive, iCloud, Dropbox), which often hold the only copies of important documents or photos.
• Subscriptions and recurring charges: Streaming services, software subscriptions, memberships that keep billing a card until someone cancels them.
• Social media and personal accounts: Facebook, Instagram, LinkedIn, and similar accounts that may need to be memorialized, transferred, or deleted.
• Digital business assets: Domain names, websites, online stores, and monetized accounts like a YouTube channel, which can have real financial value.

Why This Gets Left Behind

Passwords aren’t written down anywhere on purpose. That’s good security practice while you’re alive and a real problem for whoever’s trying to close out your affairs afterward. Two-factor authentication, which is good for security, becomes a genuine obstacle for a family member trying to get into an account they legitimately need access to. And many platforms have specific, sometimes rigid, legal processes for next-of-kin account access that can take weeks even with a death certificate in hand.

The result is families spending hours trying to get into an email account just to find other accounts that need closing, or losing access entirely to years of photos stored in one place. This is exactly the kind of gap a death binder is meant to close.

What to Actually Document

You don’t need to hand over every password today. What you need is a plan your executor or family can follow:

1. A list of key accounts, not necessarily passwords for all of them, but at minimum which accounts exist: primary email, banking, investment platforms, any crypto holdings, and major subscriptions.
2. Where the master credentials live. If you use a password manager (recommended over a written list of passwords, for security reasons), document which one, and make sure someone knows how to access it, whether that’s an emergency access feature many password managers offer, or a securely stored master password.
3. Instructions for each account type. Do you want an account closed, memorialized, or transferred? Facebook, for example, offers a memorialization setting and a legacy contact feature. Google has an Inactive Account Manager. Not everyone knows these tools exist until they need them.
4. Any digital assets with financial value. Cryptocurrency in particular is a real risk area, since a lost private key or seed phrase can mean the asset is permanently unrecoverable, with no bank or customer service line to call.

Password Managers vs. a Written Record

A password manager is the safer option while you’re alive: one master password, everything encrypted, and most reputable managers offer some form of emergency access or legacy contact feature specifically for this situation. The tradeoff is that whoever inherits access needs to know the master password or emergency process exists in the first place.

A written record, kept somewhere physically secure alongside your other estate documents, is the simpler fallback, especially for people who aren’t using a password manager already. The security tradeoff is real, so if you go this route, keep it with your other sensitive documents, not in an unlocked drawer. Every Orderly Affairs kit includes an encryptable USB backup drive for exactly this purpose.

Who Should Have Access, and When

This is worth being deliberate about. You likely don’t want a family member logging into your accounts while you’re alive and well. What you want is a plan that activates only when it’s needed: after death, or after a documented incapacity. A letter of instruction is a natural place to note where the digital access plan lives, without putting sensitive passwords directly into a document that might be read earlier than intended. See What Is a Letter of Instruction for how that document works alongside this one.

Frequently Asked Questions

Can my executor legally access my email or social media after I die?
It depends on the platform and your state. Many platforms have specific next-of-kin or estate processes, and some states have adopted laws (based on the Revised Uniform Fiduciary Access to Digital Assets Act) that give executors defined rights to digital accounts. Documenting your wishes in advance makes this dramatically faster regardless of the legal specifics.

Should I put my passwords in my will?
No. A will becomes a public record during probate in most cases, so it’s the wrong place for sensitive credentials. Keep passwords in a password manager or a secure written record referenced by, but not included in, your will or letter of instruction.

What happens to cryptocurrency if no one knows it exists?
It’s effectively lost. There’s no customer service line or account recovery process for most crypto holdings if the private keys or seed phrase aren’t documented somewhere accessible to your heirs.

Do I need to update this regularly?
Yes. Accounts and passwords change often enough that a digital estate plan needs a periodic check, ideally whenever you do a broader review of your estate documents.