The average American household now maintains more than 168 online accounts — email, banking, social media, streaming, healthcare portals, photo storage, and a long tail of subscriptions. When someone dies, families do not face a single safe to crack open. They face 168 small locks, each with its own provider, its own process, and its own definition of who is allowed inside.
The gap between the physical estate and the digital one is the central problem of modern inheritance planning. A will is a 700-year-old legal instrument designed for land, livestock, and household goods. It was not designed for the iCloud account of a 64-year-old who never wrote down the password, or the Google Workspace of a small-business owner whose customers depended on access to email the day after the funeral. As a result, even families with a well-drafted will routinely find themselves locked out of the accounts that mattered most — and locked inside a multi-month legal and administrative process to get back in.
Who Has Legal Standing to Request Access
Platform rights of access and inheritance do not flow from the same source. Some legal authority comes from probate court. Some comes from a state-uniform law called the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA). Some comes from a platform's own terms of service, which usually grant the platform broad discretion and your family very little. Understanding who has standing — and the kind of standing the platform will actually respect — is the difference between a 30-day resolution and a one-year fight.
The executor named in the will. Once a probate court formally appoints an executor (sometimes called a personal representative), that executor has the broadest legal authority to act on behalf of the deceased with respect to estate assets. Letters testamentary — the court-issued document that confirms the appointment — are the document most platforms ask for. Executors have standing under RUFADAA to access "catalogues of electronic communications" (like email metadata and sender lists), and under common law to control any account that holds property of the estate.
The administrator of an intestate estate. If there is no will, the probate court appoints an administrator — typically the closest next-of-kin — and issues letters of administration. The administrator's authority is the same as an executor's for purposes of platform access; the difference is procedural, not substantive. Most platform estate teams treat the two documents interchangeably.
A named beneficiary. Beneficiaries named in a will, in a transfer-on-death designation, or in a RUFADAA-compliant "fiduciary designation" form held by the platform have standing limited to what the designation covers. A RUFADAA designation is a separate written instrument that instructs the platform which categories of content may be disclosed to a designated recipient after death. Platforms are not legally required to honor RUFADAA designations in every jurisdiction, but the major ones (Google, Apple, Meta) do — and they treat the designation as overriding even a will that says otherwise.
A court-appointed guardian of a minor child. Where a deceased parent's digital accounts hold assets or communications that affect a minor child's welfare (medical history, school records, family photos), a court-appointed guardian may petition a platform directly. Platforms vary widely in how they handle these requests, but a specific court order usually bypasses any RUFADAA discretion.
For the legal categories of accounts that typically fall outside the will entirely, see our breakdown of digital assets your will does not cover.
The practical reality: legal standing lets you request access; it does not give you the credentials themselves. A platform may approve your request but still cannot help you log in to an account whose password no one ever recorded. A vault that stores credentials with a designated beneficiary is the only reliable way to bridge that gap →
The Practical Access Workflow
Once a family understands who has standing, the practical workflow to actually unlock accounts follows a fairly consistent sequence. Some steps happen in parallel; others depend on the platform's review window. This is the path most families who successfully recover accounts within a reasonable timeframe take.
- Inventory every account you can identify. Email records, billing statements, browser autofill, the deceased's phone, password managers they shared with you, and any printed records.
- Determine which accounts hold property of the estate versus those holding only personal content. Accounts with financial value or outstanding balances get first priority.
- Secure access to the primary email first. Every password reset, every two-factor challenge, every platform estate request flows from the deceased's primary email. If you cannot get into email, almost nothing else works.
- Activate any platform-native legacy tools that the deceased set up in advance — Google's Inactive Account Manager, Apple's Digital Legacy, Meta's Legacy Contact, etc. These run in parallel to the formal legal process and often settle within days.
- Open probate and obtain letters testamentary if not already in hand. This is the document most platforms require for any request not covered by a legacy tool.
- File a verified request with each platform's estate team. Submit the death certificate, court appointment, and a sworn statement of your relationship to the account holder.
- For accounts passing outside probate — beneficiary-designated financial accounts, jointly held accounts, RUFADAA designations — request access through the platform's beneficiary portal, not the estate team.
- Document every action. Save confirmations, case numbers, and the legal basis for each access. You will need this for the IRS, for the estate's accounting, and for any later disputes.
The order matters: most families get stuck for months because they submit a stack of legal documents to platforms before they have seen whether a legacy tool — set up by the deceased months or years earlier — would have settled everything in a week. For the full step-by-step, see our digital estate planning checklist.
Platform-by-Platform Variation
Each major platform reserves the right to define its own estate process, and there is no federal or industry-wide standard. The result is that a family may have a clean experience with one provider and a months-long back-and-forth with another — for the same underlying facts. The differences are not arbitrary; they reflect each platform's legal posture, its product team priorities, and how recently it has updated its policies.
| Platform | Native access mechanism | Required documentation | Typical resolution time |
|---|---|---|---|
| Inactive Account Manager (advance opt-in) or estate request form | Death certificate, court appointment, ID of claimant, signed request | 30–60 days (4+ months without IAM) | |
| Apple | Digital Legacy Program (legacy contact added by user) | Death certificate + access key Apple issued to the legacy contact | Days, if the legacy contact already has the access key |
| Microsoft | No public legacy tool; case-by-case estate team review | Death certificate, court appointment, account details | 60–120 days, often longer |
| Facebook / Meta | Legacy Contact (set up by user) or Memorialization Request | Death certificate or obituary, ID of requester | 14–30 days for legacy contact; 30–60 days for full account data request |
| Amazon | Account closure process; no full-data release to heirs | Death certificate, ID, account identification | Closure: 7–14 days. Account data release: not available — Amazon holds order history but does not transfer account access |
Google's Inactive Account Manager and Apple's Digital Legacy Program are the strongest examples of native legacy tooling — but only if the deceased opted in. Roughly 3% of Google users and a smaller fraction of Apple users set these up. The rest of the family depends entirely on the legal-document path, which is slower and less certain. Microsoft remains one of the more difficult estate teams to work with, and Amazon does not transfer account contents at all — only close the account and release the order history to the executor.
This variation is one of the reasons that relying on legacy tools alone is risky. The reliable path is to set up these tools where they exist, and to also maintain an external credential store that an executor can reach independently.
Legal Documentation Requirements
If the deceased did not set up a native legacy tool, the family proceeds entirely through legal documentation. The five documents below cover most of what platforms request. Knowing the role and source of each one in advance prevents families from making the avoidable mistake of petitioning a platform with the wrong paperwork.
| Document | Who requests it | Where it comes from | What it covers |
|---|---|---|---|
| Death certificate | Spouse, family, executor, attorney | Vital records office of the state or county where the death occurred | Establishes death; required by every platform |
| Letters testamentary / Letters of administration | Court-appointed executor (testamentary) or administrator (intestate) | Probate court in the deceased's jurisdiction | Confirms legal authority to act on behalf of the estate |
| Small estate affidavit | Heir where estate value falls below state's threshold | State statute template, signed and notarized | Allows collection of small-value accounts without full probate |
| RUFADAA fiduciary designation | The account holder, during life | A separate written instrument stored by the user, sometimes through the platform | Instructs the platform to disclose specific content to a named fiduciary on death |
| Court order | Guardian, conservator, or petitioner with specific standing | Probate or family court | Compels a platform to grant access where standard documentation is insufficient |
Three practical notes on these documents. First, many platforms demand a "certified" death certificate — not a photocopy. Order several certified copies early; you will use them repeatedly. Second, letters testamentary can take 4–8 weeks to issue in a typical probate proceeding, which is why families who pre-position a small estate affidavit save months on low-value accounts. Third, a RUFADAA designation only works if the platform knows it exists. Storing the designation in the same vault where the platform is named — rather than at the bottom of a drawer — matters.
For accounts that are not passing through probate at all — things like crypto, password manager vaults, or platform-specific data stores — a different planning conversation applies, which we cover in granular beneficiary access and through our incident-tested checklist.
FAQ: Accessing a Deceased Person's Digital Accounts
Who is legally allowed to access a deceased person's online accounts?
A probate-appointed executor or administrator has the broadest authority. Next-of-kin can petition for limited access in probate. A named beneficiary under a RUFADAA designation has standing limited to what the designation covers. A family member with no formal role has no legal standing — and most platforms will refuse their requests.
Does a will automatically grant access to digital accounts?
No. A will names an executor and directs distribution of assets, but it does not, on its own, meet the documentation requirements of any major platform. The executor still needs letters testamentary and a death certificate. RUFADAA explicitly requires a separate written instrument to authorize disclosure of digital content.
How long does it take to access a deceased person's Google or Apple account?
With Inactive Account Manager (Google) or Digital Legacy (Apple) set up in advance: often days, sometimes the same day. Without those tools in place, Google estate requests typically take 30–60 days, and Apple accounts without a legacy contact often cannot be released at all. Microsoft and Amazon cases run longer — typically 60–120 days, and Amazon does not transfer account contents in any form.
Can a family member access the deceased's iPhone without a password?
If Apple has the deceased's iCloud data on its servers, and a Digital Legacy contact was designated, Apple can release that data to the legacy contact after verifying the death. The phone itself, however, is encrypted with the deceased's passcode and Apple cannot bypass that. Recovery of the phone's local content depends entirely on having the passcode, the device's backup, or a court order compelling Apple to unlock it.
What happens to subscriptions and ongoing monthly charges?
Most streaming and subscription platforms do not transfer accounts to heirs. The standard outcome is account closure with the executor authorizing final billing. The practical problem most families hit is that they don't even know which subscriptions exist — which is why a comprehensive digital inventory is one of the single most valuable estate documents you can produce.
Expert Perspectives
Estate-planning practitioners weighed in on how families should think about account access after a death. Their observations, drawn from client work and probate practice, are below.
A will provides the legal right to ask. The credentials provide the practical ability to log in. Families who close the gap between the two — by storing logins in an AES-256 encrypted vault with a designated beneficiary who can actually reach them — recover accounts in days, not months. Everyone else ends up with a long email thread and a stack of sworn statements waiting on a platform's estate team to reply. Set up a vault for your family before they need it →