What Really Happens to Your Online Accounts When You Die — New 2026 Findings

Two reports published in August 2026 answer one of the least-asked questions in personal finance: when you die, your family can be legally entitled to close your online accounts while still being barred from what is inside them. WIRED's investigation "The Complicated Case of Passing On Your Digital Estate" and the American Bar Association's guidance "The Keys to the Kingdom" both reach the same conclusion — the problem is no longer a missing password. It is a missing plan.

What did the new reports find?

In the United States, digital inheritance is governed state by state under a model law called the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), now enacted in 48 states, Washington DC and the US Virgin Islands. It gives an executor the right to deal with an account — but a federal privacy law, the Stored Communications Act, still stops companies releasing the *contents* of emails, messages, photos and files unless the account holder explicitly granted that authority in advance.

So a named fiduciary can close an email account, yet receive only a "catalogue" of who was contacted and when — never the messages themselves. "A password may open the door," the ABA's guidance notes, "but it does not tell anyone which rooms to enter, what to take, or what to leave untouched."

Why do the tech giants' own legacy tools fall short?

Apple's Legacy Contact, Google's Inactive Account Manager and Meta's memorialization settings all exist, and they all help. But each comes with real gaps, documented in the August reporting:

• They sit above your will. Under RUFADAA, a platform's own online tool takes priority — so an old legacy-contact setting can override newer written instructions.
• Someone still has to tell them you died. None of these systems is notified automatically; a family member must find the right page and prove the death.
• Apple's access key excludes iCloud Keychain. The saved passwords on your devices are deliberately not handed over — exactly the thing a family often needs most.
• Instagram requires your heir to have an Instagram account just to download your content.

Then there is the trap nobody plans for: two-factor authentication. The WIRED reporter, testing her own estate, found that even with every password stored in a manager, her authenticator app was locked behind her own fingerprint. Without the phone's PIN, every known password ends at the second step.

Why are lawyers calling for "instructions, not just access"?

The ABA's guidance is blunt: handing someone the keys to your accounts is only the first step. A fiduciary who gets in still has to decide what to preserve, transfer, memorialize or close — account by account, under grief, legal deadlines and a different rulebook at every provider.

Its recommended order of operations is worth noting:

1. Secure accounts with money or identity-theft risk first — crypto wallets, payment apps, banking and investment portals, domain names, business systems.
2. Preserve before you close. Download statements, photos, contracts and records *before* cancelling anything; deleted account data is often unrecoverable.
3. Use email and cloud storage to map the rest — searching for words like "statement", "renewal", "policy" and "wallet" surfaces accounts nobody listed.

And one rule both reports stress: never write passwords into your will. A will becomes a public document in probate. Credentials belong in a password manager's emergency-access arrangement or a secure vault; the will should only grant the *authority* and point to where the access lives.

What should your family actually have?

The practical answer both reports converge on is short: a current inventory of what you have, account-by-account instructions for what should happen to each item, named people with the legal authority to act, and a private way for them to reach the access itself — kept separate from anything public, and updated as your life changes.

The consistent finding across the August reporting: families are rarely defeated by encryption. They are defeated by not knowing what exists, which rules apply to it, and where the way in was kept.

That is the gap a family vault is built to close: one private, maintained map of accounts, documents and instructions — with a Legacy Heartbeat that releases it to the people you choose only when it is needed. No will to amend every time a password changes, and no credentials sitting in a public court file.

Sources: WIRED — The Complicated Case of Passing On Your Digital Estate, American Bar Association — The Keys to the Kingdom Don't Put Humpty Dumpty Together Again, Moneycontrol — Digital legacy planning.