What Actually Happens When Someone You Knew Passes Away Online
I got pulled into this kind of thing about eighteen months ago when a former colleague of mine, Roller Mcnutt Conway, died and his family had no idea how to handle the digital side of things. It turned out to be way more complicated than anyone expected. There was no single centralized system, no easy checklist, just a trail of accounts, passwords, subscriptions, and memories scattered across platforms that each have their own contradictory rules. What followed was a few months of phone calls to customer support, some legal wrangling, and eventually a system that worked well enough. That experience shaped how I look at this entire subject now. The core problem is simple and it has gotten worse, not better, over the last decade. When someone dies, their digital assets don't automatically transfer to anyone. Your bank account, your cloud storage, your social media profiles, your domain names, your crypto wallets, your substack subscriptions, your photo libraries, your email accounts — none of it moves unless you planned for it. And most people haven't. Creating a digital legacy means putting in place a structured plan for what happens to all of that after death. It involves documenting account locations, establishing access methods, setting clear instructions for each asset, and making sure the right people can actually execute on those instructions when the time comes. It is not glamorous work. It takes time. But it is also one of the most important things a person can do for their surviving family.
Here is how I would approach it if I were doing it from scratch today, based on the mistakes I saw made and the solutions that actually worked.
Step One: Inventory Everything You Own Digitally
This sounds obvious but people skip it or do it poorly. Start by listing every digital asset you have. Financial accounts, investment portfolios, retirement accounts. Cloud storage with photos and documents. Social media profiles on every platform you use. Email accounts, including old ones you barely use anymore. Domain names and website hosting. Online subscriptions, both paid and free. Digital music and media libraries. Email newsletters you manage or contribute to. Forum accounts and communities you are active in. Crypto wallets and NFTs. Photo sharing accounts. Bookmark sites and password manager accounts. Even things like Amazon accounts, Netflix subscriptions, and recurring donation platforms. List it all. Write it down. If you can, put it in a single document or spreadsheet. The catch is that this inventory has to be regularly updated. I learned this the hard way. My first attempt at an inventory was three years outdated by the time I needed it. People change passwords, close accounts, start new services. An old list is worse than no list because it gives false confidence. Set a reminder to review it every six months or whenever something significant changes in your life.
Get the Full Details
Step Two: Secure Access Without Handing Over Your Passwords Directly
This is where most guides get it wrong. They tell you to write passwords down and give them to family members. That is dangerous and it does not scale well. What you actually need is a system that delivers access to the right people at the right time without exposing everything in the meantime. A password manager with a designated emergency contact or trusted contact feature is the foundation. Most major password managers now allow you to designate a legacy contact who can request access after a period of inactivity. Some require proof of death. Some require a waiting period. Read the fine print on each one. Set this up correctly and you solve maybe sixty percent of the access problem in one shot. For accounts that do not have a built-in legacy contact feature, you need a separate, secure backup method. I use an encrypted file stored in my password manager that contains account recovery information, important login credentials, and step-by-step instructions for the most critical accounts. The file itself is protected by a master password that I share with my executor through a separate channel — a physical letter in a sealed envelope kept with my important papers, or through my estate attorney. It is not perfect but it is practical.
Step Three: Understand Platform-Specific Death Policies
This is the part nobody tells you about until they are in a crisis. Every major platform handles death differently and some of these policies change without warning. Facebook allows you to set up a legacy contact who can manage the account after death. Google has an Inactive Account Manager that can share data with chosen contacts after a period of inactivity. Apple offers a Legacy Contact feature within iCloud. Twitter now allows verified next-of-kin to request account memorialization or closure. LinkedIn lets you memorialize profiles. Instagram follows Meta's policies. TikTok allows memorialization upon request. YouTube can be memorialized or deleted. Even smaller platforms and forums have their own procedures, and some have none at all. The counter-intuitive part is that memorialization is often not what families want. A memorialized profile stays visible, which can be meaningful, but it can also become a source of ongoing pain or unintended public exposure. Some families prefer deletion. Some prefer archival access where the account is frozen but not publicly visible. Know what your preferences are and document them. Your family will not want to make these decisions in the middle of grief while also dealing with funeral arrangements and legal paperwork.
Step Four: Handle the Financial and Legal Side Properly
Digital assets are subject to the same legal processes as physical assets. Your executor needs legal authority to access them. In the United States, the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) has been adopted by most states and gives executors the legal right to access digital accounts, with some exceptions around communications privacy. But having the law on your side is different from actually getting access. Platforms still require death certificates, court orders, and specific documentation. The process can take weeks or months depending on the platform and your jurisdiction. Your will or trust should explicitly reference digital assets. I say this because I have seen wills that mention property and bank accounts but completely omit digital accounts, which creates confusion and delays. Include a clause that grants your executor authority over digital assets. Reference your digital asset inventory. Name your legacy contacts on key platforms. This is not optional legal boilerplate, it is a practical necessity.
Step Five: Address the Things People Forget
There are digital assets that do not occur to most people until it is too late. Let me walk through a few. Domain names and websites. If you own a domain, it expires. If it is tied to a personal credit card and no one knows about it, it gets lost. Digital domain ownership is worth hundreds or thousands of dollars and can be completely lost with no forwarding available. Check your domains regularly and ensure they are registered under an account your executor can access. Subscription services with recurring charges. These do not stop automatically. Cancel them proactively or ensure your executor has a process for doing so. I once helped a family cancel forty-two separate subscriptions after a death. It took an entire weekend. The total annual cost was over three thousand dollars. None of it was necessary and none of it was documented.
Online marketplaces and selling accounts. eBay stores, Etsy shops, Amazon seller accounts — these generate real income and have real value. They also require ongoing management. If someone dies with an active shop, the account needs to be handled, inventory addressed, and orders fulfilled or canceled. This is a legal and financial issue, not just an emotional one. Photo and video archives. These are the most emotionally charged assets. Hard drives, cloud accounts, physical media digitized and stored online — all of it needs a plan. Some people want everything preserved. Some want specific content shared and the rest deleted. Some want everything destroyed. Make your wishes clear in writing. Your family will not thank you for leaving this as an open question.
What Actually Goes Wrong in Practice
I have walked through enough of these situations to recognize the patterns. Here are the failures I see most often. The most common failure is assuming that being named on a birth certificate or marriage certificate is enough to get access. It is not. Platforms have their own verification requirements and they are strict. A death certificate and a letter of testamentary authority from the court are usually the baseline. Even then, some platforms push back. I dealt with one major platform that required a certified copy of the death certificate submitted through a specific portal that was only accessible to US residents, even though the deceased and the family were Canadian. It took four months and a lawyer to resolve. The second most common failure is incomplete documentation. People create an inventory but do not store it where their executor can actually find it. A file on a personal desktop computer that gets locked after death is not an inventory. It is a puzzle your family cannot solve. Store it in a password manager, give your executor access instructions, and keep a physical copy with your important papers.
The third failure is the two-factor authentication trap. Even with the right legal documents, if an account has 2FA enabled and the executor does not have access to the secondary device or backup codes, the account is effectively locked. Before you die, ensure your 2FA backup codes are documented and accessible through your established system. Export them, store them, and test that your designated contact can actually use them.
The Hard Truths About Digital Afterlife
I want to be blunt about what this process does not do. It cannot guarantee that everything will be recovered. Some platforms do not cooperate. Some accounts are lost to forgotten passwords and expired email addresses. Some digital assets have no inheritance mechanism at all — certain gift cards, loyalty points, prepaid balances on gaming platforms, and similar non-transferable accounts disappear on death. This is by design, not an oversight. Read the terms of service carefully and accept that some losses are unavoidable. It also cannot replace the emotional labor of dealing with a deceased person's digital footprint. A memorialized social media profile with posts going back twenty years is not a neutral object. It is a record of a life that other people will read, interpret, and sometimes dispute. Your family may not want that exposure. Plan for it. Consider whether full access is appropriate for every platform or whether memorialization or deletion is the better choice. Finally, this process requires ongoing maintenance. It is not a one-time task. Review your inventory twice a year. Update passwords and access methods. Check that your legacy contacts are still valid. Verify that your important documents are current. The five minutes it takes to update an inventory every six months will save your family dozens of hours of frustration.
A Practical Starting Point
If you want to begin today, here is the minimum viable version of this process. Create a single document listing your ten most critical digital accounts — email, financial accounts, primary cloud storage, social media, and any business or income-generating accounts. Note the platform, the purpose of the account, and what action you want taken after death. Store it in your password manager with legacy contact features enabled. Share the location of the document with your executor. Do that and you will already be ahead of most people. The rest — the full inventory, the legal documentation, the platform-specific configurations — that comes later. But starting with the critical accounts gets your family off the ground. Everything else is detail work. I wish I had known some of what I learned the hard way before I went through it. The biggest lesson is that the system will not save you from poor planning. The smaller lessons — about 2FA, about platform policies, about subscription cleanup — are the ones that turn a manageable situation into a nightmare. Document everything. Test your access methods. Update regularly. Your future self will not be able to thank you, but the people who inherit your digital life will.
