What Happens to Your Passwords When You Die (and How to Share Them Safely)

Passwords are the quietest inheritance problem most families face. When someone dies, the people left behind discover that nearly every part of a modern life is locked behind a screen — email, banking, photos, subscriptions, cloud storage, the phone itself. There is no master key a probate court can hand over, and no "forgot password" that works when the recovery email is the one that is locked. Surveys of digital estate planning routinely find that the majority of adults have not shared access to any of their online accounts with the people who would need it.

This guide explains plainly what happens to your passwords and accounts when you die, why "share passwords with family" is advice that fails in practice, and the structure that actually works — a private, organized record your family is guided to, on your rules, only when it is needed.

The short version

When you die, your online accounts do not automatically unlock for your family. Each platform has its own deceased-account policy, and most require a death certificate plus proof of authority before they will release anything — if they release it at all. The practical answer is to leave a private, organized record of every account, its username, and how access is recovered (password, recovery codes, 2FA backup), stored where your trusted people can find it. Never leave passwords inside a will (wills become public), and never rely on a single password manager your family cannot open.

What happens to your accounts when you die

Every account you own is governed by the platform's terms of service, not by your will. When you die:

• Email (Gmail, Outlook) — a surviving spouse or executor can request access through the provider's deceased-user process, but it requires legal documents and can take weeks. Google's Inactive Account Manager and Apple's Legacy Contact let you pre-designate someone, but you must set them up while alive.
• Banking — accounts freeze on notification of death; funds release to an executor with probate. Online banking credentials stop working.
• Social media — most platforms offer memorialization or deletion, but not full account access, for a deceased person.
• Cloud storage (iCloud, Google Drive, Dropbox) — your photos, documents and backups are here. Without pre-arranged access, families often lose a lifetime of photos.
• The phone itself — a locked smartphone with an unknown passcode is a brick. Apple and Google will not unlock it without a court order, and sometimes not even then.

The common thread: access is decided by each company's policy, and most default to silence. The only reliable way through is to leave your own map.

Why "just share your passwords" is bad advice

Telling someone to "share your passwords with family" sounds simple and fails for three reasons:

• Passwords change. A password shared today is wrong in 60 days. Nobody updates the shared note.
• One password is never enough. Two-factor authentication, recovery codes, hardware keys, and the email that receives reset links all matter. Sharing a password without the recovery path leaves your family stuck at the 2FA screen.
• Sharing spreads risk. A text message, a shared note, a screenshot that auto-uploads to cloud storage — each is a copy a thief can find. The more places a password exists, the more places it can leak.

What actually works is not sharing passwords casually — it is leaving one organized, private record that your family reaches only when they need it.

The record that actually works

Build a single inventory your trusted people can find after you are gone. For each account, record:

1. The service — the name (Gmail, Chase, iCloud, Netflix) and the URL.
2. The username or email used to log in.
3. The password — current, and updated when you change it.
4. The 2FA method — authenticator app, SMS, or hardware key — and the backup codes that let someone bypass a lost device.
5. The recovery email or phone — because a password reset goes here, and if this is locked too, nothing else opens.
6. What your family should do with it — keep, close, memorialize, or download-and-delete.

Group them by category: money (banks, investments, crypto), identity (email, government, phone), memories (photos, cloud storage, social), and housekeeping (subscriptions, utilities). A family facing grief should not have to hunt across fifty logins.

Where to store it (and where not to)

• Never in a will. Wills go through probate and become public records. Anything in them — passwords, seed phrases, PINs — is exposed to anyone who reads the file.
• Not only in a password manager your family cannot open. A self-hosted or app-based manager is useless if nobody knows the master password. If you use one, the master password and the recovery kit must be in the record itself.
• In a private, survivable place — a fireproof safe, a safety deposit box your executor knows about, or a zero-knowledge family vault that releases the record to the people you named, on the rules you set, only when it is needed.

The goal is the same as for any other important document: it survives you, it stays private, and the right people are guided to it at the right moment. If you also hold cryptocurrency, the access problem is even harder — see what happens to your crypto when you die for why a seed phrase needs its own separate, private record.

The phone is the master key

One device usually unlocks everything else, because it receives the SMS codes and the email password-reset links. Write down:

• The phone passcode.
• The Apple ID or Google account that locks the device, and its password.
• Whether Legacy Contact (Apple) or Inactive Account Manager (Google) is set up — and who you named.

If your family can open the phone, they can usually reach the email, and from the email reset almost everything else. If they cannot open the phone, every other account gets harder.

A simple 30-minute start

You do not need to be technical to do this. You need a list and a place to put it.

• Open a private document and write down your five most important accounts: email, phone, primary bank, cloud photos, and password manager.
• For each, add the username, password, and 2FA backup codes.
• Tell one trusted person the list exists and where to find it.
• Store it somewhere private and durable — and if you use a family vault, put it there so it releases on your rules, not by accident.

That is the difference between a family that spends six weeks locked out of your accounts and one that finds what they need on the first day. For the broader picture of getting your whole estate in order — documents, debts, and instructions together — read how to organize important documents for your family.