Digital assets and passwords: the estate planning problem nobody's solving
Your will covers your house. Your beneficiary designations cover your retirement accounts. Your trust, if you have one, covers your investment portfolio.
But who has access to your email when you die? What happens to your cryptocurrency wallet? Who gets into your iCloud to retrieve the only digital copies of your family photos? What about the domain name you have been paying to renew for the last decade, or the Shopify store that generates income every month?
And quite candidly, most estate plans do not touch any of this. Not because attorneys do not know it matters, but because most clients have not thought through their digital life the same way they have thought through their physical one.
That is a problem. And it is one you can fix today.
What counts as a digital asset
The definition is broader than most people expect. A digital asset is any electronic record in which you have a right or interest. That includes:
• Email accounts, both personal and business, containing years of correspondence, contacts, and documents
• Social media profiles on Facebook, Instagram, LinkedIn, and other platforms
• Photos stored in iCloud, Google Photos, Dropbox, and similar cloud services
• Cryptocurrency holdings in wallets or on exchanges
• Online businesses, e-commerce stores, domain names, and digital products
• Streaming service accounts, software licenses, and subscription services
• Loyalty program points and airline miles with real dollar value
• Online banking and investment accounts
• Gaming accounts, virtual assets, and in-game currencies that may have significant market value
Some of these have direct financial value. Others have irreplaceable sentimental value. All of them present the same core problem: without a plan, your executor likely cannot access them legally, and in some cases cannot access them at all.
Why your executor gets locked out
Here's what most people don't understand: the terms of service agreements you click through when you sign up for Gmail, Facebook, Apple, or any other platform are legally binding contracts. And almost all of them prohibit sharing account credentials with third parties or transferring account access to another person.
That means even if you leave your passwords in a note with your will, your executor may be technically violating a platform's terms of service by logging in. Some platforms will terminate an account entirely if they discover that someone other than the account holder has been accessing it.
Beyond terms of service, federal law adds another layer. The Computer Fraud and Abuse Act and the Stored Communications Act both restrict unauthorized access to electronic communications and stored data. Without proper legal authority, an executor accessing a deceased person's accounts faces real legal risk, even when they have the best of intentions.
So the question is not just whether your executor knows your passwords. It is whether they have the legal authority to use them.
How North Carolina law addresses this
North Carolina has adopted the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), codified as NC General Statute Chapter 36F. This law gives fiduciaries, including executors, trustees, and agents under a power of attorney, a legal framework for accessing a deceased or incapacitated person's digital assets.
Here's what RUFADAA actually does and does not do. It establishes a hierarchy of authority that determines who can access what.
First priority: online tools. If a platform offers an online tool that lets you designate who can access your account after death, that designation controls. Google's Inactive Account Manager and Facebook's Legacy Contact are examples. These designations override everything else, including your will.
Second priority: your estate planning documents. If you have authorized fiduciary access to digital assets in your will, trust, or power of attorney, that authorization gives your executor or agent legal standing to request access from the platform.
Third priority: the platform's terms of service. If you have done nothing, the platform's own policies govern what happens, and most of them default to restricting or deleting access.
Let me be very clear with you: RUFADAA gives your executor a legal right to request access. It does not guarantee that the platform will comply quickly or without a fight. Many of the largest platforms have their own processes, and getting access can still take weeks or months even with the law on your side. But having the proper authorizations in place is the difference between a difficult process and an impossible one.
What you need to do
There are three things that need to happen to protect your digital assets. They work together, and none of them alone is sufficient.
1. Update your estate planning documents
Your will, trust, and power of attorney should all include explicit language authorizing your fiduciary to access, manage, modify, and close your digital accounts. This language is what gives your executor legal standing under NC GS Chapter 36F. Without it, your executor is operating without authority even if RUFADAA is on the books.
Your documents should also name a digital executor, either the same person as your general executor or someone different if your digital life is complex enough to warrant it. A digital executor needs to be someone who is comfortable with technology and understands what they are being asked to manage.
2. Create a digital asset inventory
You need a written record of your digital assets, organized in a way that your executor can actually use. This does not mean writing your passwords in your will. Your will becomes a public document when it goes through probate. Passwords in a public document are a security problem.
The math is pretty simple on what this document needs to contain:
• A list of every platform and account you have, with the account username or email address associated with each
• The location of credentials, without including the credentials themselves in the inventory document
• Instructions for what you want done with each account: memorialized, deleted, transferred, or maintained
• The location of any recovery codes, backup authentication methods, or hardware security keys
• Contact information for any online businesses, domain registrars, or cryptocurrency exchanges, along with account numbers or identifiers
This inventory should be stored securely and separately from your will, but your executor needs to know it exists and how to find it. A sealed envelope with your other estate documents, a safe deposit box, or a secure digital vault are all reasonable options.
3. Use a password manager and document its access
A password manager like 1Password, Bitwarden, or a similar service solves two problems at once. It keeps your credentials organized and accessible to you, and it creates a single point of access that you can plan around for your estate.
The key is what happens to the master password and recovery keys for that password manager. Those need to be documented and accessible to your executor through a secure, legally authorized channel. Some people leave the master password in a sealed envelope with their attorney. Some use a trusted family member. The method matters less than the fact that it exists and is documented.
And honestly, even if you are not ready to address your full estate plan, getting a password manager set up today is a practical step you can take right now that will make this entire problem more manageable.
Cryptocurrency deserves special attention
Cryptocurrency is different from every other digital asset because there is no central institution to call. If your executor does not have your private keys or seed phrase for a cryptocurrency wallet, that crypto is gone. Permanently. There is no account recovery process, no customer service line, no court order that can retrieve it.
Let's say you have $40,000 in Bitcoin in a hardware wallet in your desk drawer. If your executor does not know it exists, does not know what it is, and does not have the seed phrase to access it, that $40,000 effectively does not exist for estate purposes. It will never be distributed to your heirs.
I want to strongly encourage you to treat your cryptocurrency seed phrases and private keys with the same seriousness as a deed to real property. Document them. Secure them. Make sure at least one trusted person knows where they are and has the legal authority to access them.
Social media and the question of memorialization
Your family will have opinions about what happens to your Facebook profile, your Instagram account, your LinkedIn. Some families want accounts memorialized, turned into a permanent tribute. Some want them deleted. Some want them downloaded first so the photos and content are preserved.
Here's what I consistently tell clients: this is a decision that is much better made by you now than by your family later, in grief, when they may not agree and may not have access to the accounts anyway.
Facebook allows you to designate a Legacy Contact who can manage a memorialized account. Google's Inactive Account Manager lets you choose what happens to your data after a period of inactivity. Apple's Digital Legacy program allows you to designate people to access your iCloud data after death. These tools exist. Most people have never used them.
Setting these up takes thirty minutes. Not doing so can leave your family locked out of photos and memories that exist nowhere else.
Your email account probably has a plan problem too
Think about what is in your email inbox right now. Account statements. Insurance documents. Medical records. Business correspondence. Tax documents. Years of communication with people you care about.
Your executor will need access to that inbox to do their job. Bank notifications, subscription renewals, outstanding invoices, and pending legal matters all arrive by email. Without access, your executor is managing your estate partially blind.
This is not a distant problem. It is a problem that exists today, in the estate plan you have right now, if you have not addressed it.
We work with clients throughout Wake County and across North Carolina on estate planning that actually reflects how people live today, including their digital lives. If we can be of assistance to you, please contact us or reach out directly at 919-647-9599.
Disclaimer
This article is for educational purposes only and does not constitute legal advice. The information provided is general in nature and may not apply to your specific situation. Digital asset planning, estate planning, and fiduciary access to digital assets involve complex legal and technical considerations that vary based on individual circumstances. For specific legal advice tailored to your circumstances, please schedule a consultation with The Walls Law Group.
