12 items

Digital Legacy Planning

Most digital accounts vanish or stay locked forever when someone dies without a plan. This checklist walks you through every step — from password manager Emergency Access to cryptocurrency seed phrases and platform legacy contacts — so the people you leave behind are not left guessing. For more background and examples, see the guidance below; for built-in tools and options, use the quick tools guide.

Author

Checklistify Editorial Team

Last Updated

Checklist Items

0 done•12 left•4 of 5 sections collapsed

Choose a password manager with an Emergency Access feature as your central credential store.

A password manager is the correct infrastructure for digital legacy planning because it encrypts credentials at rest, keeps them searchable and organized, and stays current as passwords change — none of which is true of a Word document, spreadsheet, or handwritten list. For digital legacy purposes specifically, the Emergency Access feature is the deciding factor: Bitwarden includes this natively at no extra cost on a free account; 1Password provides an Emergency Kit approach. Avoid relying solely on browser-built-in password managers (Chrome's password manager, Safari's Keychain) because these require the deceased person's account login to access — a circular dependency that defeats the purpose. Bitwarden Premium costs $10 per year and enables full Emergency Access for your designated contact; this is the most cost-effective option for this specific use case.

Configure Emergency Access with your designated contact and a 7-day waiting period.

Bitwarden's Emergency Access works as follows: you grant a specific trusted contact Emergency Access and set a waiting period of 1 to 90 days. When that contact initiates an Emergency Access request, Bitwarden notifies you by email. If you do not respond within the waiting period, access is automatically granted and your contact can view all vault items. The waiting period protects against misuse: responding to the notification declines the request, so you retain control if a request is accidental or premature. Seven days is a sensible default — short enough to provide timely access in a genuine emergency, long enough to catch an erroneous trigger. To configure: Settings → Emergency Access → Invite. For 1Password's Emergency Kit approach, the kit document contains your account email, master password, and secret key; it must be printed or saved and physically secured, then provided to the executor in person — effective if properly stored, but it requires a physical handoff rather than a digital grant.

Choose a digital executor who is technically capable, absolutely trustworthy, and has agreed to the role.

The digital executor does not need to be the same person as the legal estate executor, and often should not be — the roles require different skills. Technical capability means: comfortable navigating a password manager, able to contact platform support teams under pressure, and capable of handling two-factor authentication on a device they are unfamiliar with. Availability matters more than most people anticipate — this role can require many hours spread across days or weeks during an already difficult period. Longevity is worth considering: a close friend of the same age may become unavailable; a tech-comfortable younger family member often makes a more durable choice. Confirming that they are willing to serve is essential — the worst outcome is someone who discovers their designation during a crisis and starts from zero. For digital estates involving significant cryptocurrency holdings, an ongoing business, or creative work with commercial value, consult a digital estate planning attorney before finalizing the structure, since technical access alone is insufficient for these cases.

Have a direct briefing conversation — do not rely on documentation alone.

Your digital executor needs to know: that they have been formally designated (this is frequently left as an assumption and creates genuine confusion during a crisis); where the password manager Emergency Access instructions are physically located; which accounts need priority attention in the first few days — specifically email, banking, and any business or recurring-revenue accounts; your specific wishes for each social media platform; and any unusual circumstances such as domain auto-renewals with upcoming dates, ongoing client relationships that need transition, or cryptocurrency requiring specific handling. Walk through the documentation structure with them at least once so they can navigate it independently under pressure. A person who has reviewed the plan once in a calm setting is far better prepared than one encountering it for the first time during grief.

Document your primary email account completely — it unlocks almost everything else.

Email is the master access mechanism: virtually every online account uses email for password resets. If your digital executor can access your primary email, they can initiate account recovery for banking, subscription services, social media, and cloud storage — even without individually documented credentials for each service. Complete email documentation includes: the email address, the current password stored in the password manager, the exact two-factor authentication method in use (SMS to which phone number, authenticator app on which specific device, or hardware security key), how to access those 2FA codes when the phone may be locked or unavailable, the device PIN or unlock instructions for the phone itself if SMS or authenticator codes are needed, and the backup codes for the email account stored in the password manager alongside the login credentials. If you use multiple email addresses, document all of them and specify which accounts are registered to which address — those cross-account relationships matter as much as the credentials themselves.

Document financial accounts with estate administration in mind, not just online login.

Financial account documentation serves two distinct purposes: online access and formal estate administration. For online access, document login credentials in the password manager. For estate administration, separately record account numbers, institution names, and customer service contact numbers — these are needed independently of any online login for probate proceedings, tax filings, and account transfers. Document beneficiary designations for each account: these instructions transfer assets directly to named beneficiaries outside of probate, overriding anything written in the will. An outdated beneficiary designation — a deceased parent, a former spouse — is one of the most consequential and most common estate planning errors. Cryptocurrency held in self-custody wallets (Ledger, Trezor, or any software wallet) is controlled by a seed phrase, the 12 or 24 words generated when the wallet was created. Without the documented seed phrase, that cryptocurrency is permanently and completely inaccessible with no recovery mechanism whatsoever — no company to call, no court order that helps. The seed phrase must be part of the legacy plan. Cryptocurrency on exchanges (Coinbase, Kraken, Gemini) can be accessed through standard email-based account recovery and should be documented like any other financial account.

Record where important digital files live — especially anything that exists only locally.

Cloud storage accounts (iCloud, Google Drive, Dropbox, OneDrive) frequently contain irreplaceable content: years of family photographs, personal documents, creative work, and business records. For each service, document what is stored there and your wishes for that content. Critically, identify any files that exist only locally — on external hard drives, a computer that is not synced to any cloud service, or old devices — since cloud-only assumptions often leave significant gaps. Apple's iCloud deserves specific attention: recovering a deceased person's Apple account without a Legacy Contact configured in advance requires submitting death certificates and documentation through Apple's process, which can take several weeks. If your photo library lives primarily in iCloud and contains irreplaceable photographs, consider whether a physical backup to an external hard drive — or printed albums for the most important years — is warranted now rather than leaving that burden to your executor later.

Surface and document all recurring subscriptions using three months of financial statements.

Recurring subscriptions continue charging after death unless explicitly cancelled, which depletes estate funds before the executor can identify them all. The most reliable way to surface every subscription is to review three months of bank statements and credit card statements line by line — this captures recurring charges that may not be top of mind, including obscure services subscribed to years ago and forgotten. Document for each: the service name, the email address used to log in, the payment method on file, and your instruction (cancel immediately, transfer to another person, or allow to lapse). Domain registrations require separate attention: domains set to auto-renew will continue renewing for years after death, accumulating charges. Document all domains you own, the registrar (GoDaddy, Namecheap, Cloudflare, etc.), whether auto-renewal is active, the annual renewal cost, and whether each domain should be renewed, transferred to someone, or allowed to expire.

Configure platform-native legacy settings for Facebook, Google, and Apple — they carry legal priority.

Platform legacy settings take legal precedence over will instructions under RUFADAA's three-tier hierarchy, making them the most effective mechanism to configure. Facebook and Instagram: go to Settings → Memorialization Settings → Legacy Contact to designate someone in advance. A legacy contact can write a pinned tribute post, respond to new friend requests, and download a copy of your account data — but cannot log in as you or read your private messages. You can alternatively request account deletion in the same settings section. Google: configure Inactive Account Manager at Google Account → Data and Privacy → More Options → Make a plan for your account. Specify what happens after 3 to 18 months of inactivity — delete everything, or share specific categories of data with designated trusted contacts. Apple: add a Legacy Contact at Settings → [your name] → Legacy Contact — up to five people who receive a digital access key to request your account data after death. Twitter and X: no legacy contact feature exists — account deletion requires a formal bereavement request submitted by a family member with documentation through Twitter's support process, which can be slow and inconsistent. For any other platforms you rely on, check their support documentation directly for bereavement policies; the landscape changes frequently.

Specify exactly what you want done with your digital photographs and creative work.

Personal photo libraries and creative work require explicit instructions because the decisions are subjective, consequential, and will otherwise be made by whoever has access at the time — which may not reflect your wishes. For your photo library: specify who should receive access, who is responsible for ongoing storage costs, which collections matter most to preserve, and whether any photographs should be deleted rather than shared. For creative work — writing, music, photography, design files — specify who holds the copyright and what they may do with it: publish commercially, license to others, share freely, or archive privately. Copyright in creative works does not expire at death; it passes as a property right and can generate income for years or decades. If you have any creative practice with commercial potential, the distinction between technical access to files and legal authority over the intellectual property is significant enough to warrant professional advice. Documenting your intent clearly prevents these decisions being made by others according to their own judgment.

#10

Reference your digital legacy plan in your will — but never include passwords in the will itself.

The will should point to the digital plan, not contain it. A suitable reference: 'My digital assets and access instructions for my digital executor are accessible via the Emergency Access feature of my password manager, per the instructions provided to [name] and the sealed envelope kept with this will.' Do not include any passwords or credentials in the will itself — wills enter the public record when admitted to probate, meaning any credentials in the document become publicly accessible. The reference in the will directs executors to the secure location; the password manager and sealed document hold the actual credentials. Note that platform legacy settings (Facebook Legacy Contact, Google Inactive Account Manager, Apple Legacy Contact) take legal priority over will instructions under the Revised Uniform Fiduciary Access to Digital Assets Act, which approximately 47 US states have adopted — these platform configurations are acted on without requiring probate and take effect faster than any will provision. Configure them regardless of what you write in the will.

#11

Schedule an annual review and update the plan after any significant account change.

Digital accounts change faster than any other element of estate planning: passwords are updated, new accounts are created, old ones are abandoned, subscriptions are added and cancelled, and cryptocurrency holdings shift. Two triggers for updating: a scheduled annual review tied to a fixed date — your birthday, tax season, or January 1st — and any significant change in the interim, such as opening a new financial account, acquiring cryptocurrency, starting a business, changing your executor designation, or any major life event. The annual review should confirm: all major account passwords in the password manager are current; new accounts have been added and abandoned accounts removed; the digital executor's contact information and willingness to serve are unchanged; Emergency Access is still configured correctly; and beneficiary designations on all financial accounts are accurate. A digital legacy document that has not been updated in three or more years will contain enough outdated credentials that its practical value is substantially reduced — precisely at the moment it is actually needed.

#12

📖 What no plan actually costs

A family spent four months after a sudden death trying to recover access to accounts their father managed. His email was locked behind a phone no one could unlock. His cloud storage held twelve years of family photographs. Three financial accounts required probate letters before any institution would speak to them. One self-custody cryptocurrency wallet — representing a meaningful amount — was never recovered. None of this was exceptional. It is the predictable outcome when a digital life is not planned for, and it unfolds while people are already grieving and overwhelmed. The few hours this checklist requires are not for you — they are for the people who will be trying to manage your affairs during the worst period of their lives.

🕐 Realistic time to complete the initial setup

Password manager setup 20–30 min

Emergency Access configuration 10 min

Account audit and data entry 60–90 min

Platform legacy settings (all) 20–30 min

Briefing conversation with executor 30–60 min

Total first-time setup ~3 hours

Annual maintenance reviews take 30–45 minutes once the foundation is in place.

⚠️ What platforms do without any configuration

FacebookMemorializes the profile when death is reported by another user
GoogleMay delete account data after extended inactivity if no Inactive Account Manager plan is set
AppleLocks the account; without a Legacy Contact configured, recovery requires formal documentation and can take several weeks
MicrosoftOffers a Next of Kin request process; account closes after two years of inactivity
LinkedInAllows family to request memorialization or removal through a support web form
TikTokNo legacy features; family can only request account removal through support

🚨 The 2FA phone problem — and three ways to plan around it

Two-factor authentication is a sound security practice — and a predictable executor obstacle. When someone dies, their phone is typically locked with face or fingerprint ID that no longer works, or it may be damaged, discharged, or simply inaccessible. SMS codes and authenticator apps on that device become dead ends. Three approaches reduce this risk before it becomes someone else's emergency:

Backup codes

Most major platforms generate one-time backup codes when 2FA is enabled. These bypass 2FA entirely when the primary method is unavailable. Store them in your password manager alongside each account's login — not in a separate document or note.

Authenticator app backup

Authy and 1Password Authenticator offer encrypted cloud backup restorable on a different device. If you use Google Authenticator, export your codes now using its account transfer feature — codes cannot be retrieved from a locked or unavailable phone.

Hardware security key

A physical key (YubiKey) can be registered as a second 2FA method alongside your phone. The key can be stored with legacy documents and used by your executor with no phone required at all.

🔐 Protecting a seed phrase physically — specific products and costs

Paper is vulnerable to fire and water — exactly the events most likely to accompany sudden deaths. Metal backup products exist specifically for seed phrase storage:

Cryptosteel Capsule

Stainless steel tile system. Fire-resistant to 1,400°C and waterproof. No special tools required. Cost: ~$80–$100.

Bilodeau Steel Plate

Stamped metal plate, simpler to use and lower cost. A solid entry-level option. Cost: ~$30–$50.

Fireproof safe + paper

A UL-rated fireproof safe (SentrySafe, Honeywell) adequately protects paper at lower cost. Bolt it to the floor or wall. Cost: ~$50–$150.

⚠️ Never photograph a seed phrase or type it into any notes app, cloud document, or messaging service — the entire security model of self-custody depends on the phrase having no digital footprint. Keep one copy at home and one offsite at a bank safety deposit box or a trusted family member's secure location.

💼 Three situations that genuinely need professional help

Significant self-custody cryptocurrency

A digital asset trust provides both legal authority and technical access. The seed phrase is the technical key; the trust is the legal structure governing how that access is exercised and what happens to the proceeds. An attorney specializing in digital asset estate planning can construct this properly — the seed phrase alone leaves all questions of legal authority unanswered.

A business with digital infrastructure

Business domain names, client databases, SaaS subscriptions holding business data, payment processor accounts, and business email require a digital succession plan separate from personal accounts — often with greater urgency since ongoing client obligations may exist. A personal digital legacy plan does not adequately cover this.

Creative work with commercial potential

Copyright passes as part of the estate and can generate income for decades after death. Access credentials grant technical access to files — they do not convey legal authority over the intellectual property itself. A writer, musician, or photographer whose work may have ongoing commercial value needs copyright management provisions drafted by an IP attorney in the estate plan, not just file access documented in a password manager.

Services like Everplans and Cake offer structured digital estate planning tools. An estate attorney with digital asset experience typically charges $300–$600/hour — appropriate for complex estates where any of these three situations apply.

Master This Checklist Quickly

Every important button and option for this pre-made checklist, shown in a glance-friendly format.

Start Here

1
Click any item row to mark it complete.
2
Use the note row under each item for quick notes.
3
Use the tool row for undo, redo, reset, and check all.
4
Use Save Progress when you want to continue later.

Checklist Row Tools

UndoRedoResetCheck allCollapse/Expand sectionsShow/Hide detailsInline notes

Top Action Buttons

Open all sharing and export options in one menu.

Email DraftContinue on another devicePrint or Save as PDFPlain Text (.txt)Word (.docx)Excel (.xlsx)

Add & Ask

Open one menu for apps and AI guidance.

NotionTodoist CSVChatGPTClaude

Copy and customize

Create a new editable checklist pre-filled with your chosen content.

Save Progress

Adds this checklist to My Checklists and keeps your progress in this browser.

Most Natural Usage

Track over time

Check items -> Add notes where needed -> Save Progress

Send or export

Open Share -> Choose format -> Continue

Make your own version

Copy and customize -> Open create page -> Edit freely

Digital Legacy Planning

Checklist Items

Step 1 — Build Your Infrastructure

Step 2 — Designate and Brief Your Digital Executor

Step 3 — Document Critical Accounts

Step 4 — State Your Wishes for Each Platform

Step 5 — Legal Integration and Annual Maintenance