Digital Assets in Estate Planning: Access, Authority, and Platform Rules

A family that can produce a death certificate and letters testamentary can usually close a bank account in an afternoon. Getting into the deceased person's email is often harder — and the reason is that digital accounts sit at the intersection of three separate bodies of law: state fiduciary access statutes, the contract each platform imposes through its terms of service, and federal privacy and computer-misuse statutes that make guessing a password a poor idea.

The practical answer is not a list of passwords in a drawer. It is granting authority in the places the law and the platforms actually recognise, in the order they apply.

What counts as a digital asset

The category is broader than most people assume, and only some of it has monetary value:

• Communications. Email, messaging, and social media accounts — often the key to resetting everything else.
• Stored files. Cloud photo libraries, documents, and backups, usually valued for sentiment rather than money.
• Financial accounts. Online banking and brokerage, payment apps, rewards and loyalty balances, and stored-value accounts.
• Cryptocurrency and tokens, whether held at an exchange or in a self-custodied wallet.
• Income-producing property. Domain names, monetised channels, e-commerce storefronts, app store accounts, advertising accounts, and intellectual property distributed digitally.
• Business infrastructure. Registrars, hosting, customer databases, and administrative accounts a company cannot operate without.

Two distinctions matter legally. First, many "assets" are only licences — purchased films, music, and ebooks are typically non-transferable rights that end at death. Second, the account and its contents are different things: a bank account's money is estate property even where the login is merely a means of access.

How RUFADAA structures access

RUFADAA is a uniform act promulgated by the Uniform Law Commission and enacted, with local variations, in the large majority of states. It was written to solve a stand-off in which platforms refused disclosure for fear of violating federal privacy law and fiduciaries had no clear statutory right to demand it.

The act establishes a three-tier priority:

1. The online tool. If the provider offers a setting that lets the user name someone to receive or manage the account, and the user completes it, that direction controls — even over a contrary will.
2. The estate planning document. If no online tool was used, or the tool does not allow the user to modify the direction, then the user's will, trust, power of attorney, or other record governs.
3. The terms of service. If neither of the above applies, the provider's contract governs, and the default under the act is that the fiduciary may obtain the catalogue of electronic communications but not their content.

The catalogue/content split is central. A catalogue shows that a message was exchanged with a particular address at a particular time — enough to identify accounts, subscriptions, and creditors. Content is the message itself, and disclosing it generally requires the user's lawful consent, expressed through an online tool or a document. Providers may also require a court order, may charge for the work, and are not obliged to hand over deleted material or to violate other law.

Use the platform's own tool first

Because online tools sit at the top of the priority ladder, they are the highest-value thirty minutes in any digital estate plan. Major providers offer some version:

• Settings that let a user nominate a contact who can access or manage the account after death.
• Inactivity settings that release designated data to named recipients after a defined period of no activity.
• Memorialisation options that freeze a social profile rather than deleting it.
• Beneficiary or transfer-on-death designations at brokerages and some financial apps.

Two cautions. A tool that names one person while the will names another creates conflict, and the tool usually wins — so the two must be reconciled. And these settings are not documented anywhere central, so the plan should record which platforms have been configured, without recording the credentials themselves.

Granting authority in the documents

Where no online tool exists, the documents carry the weight. Effective drafting usually includes:

• Express consent to content disclosure. Generic authority to administer "all property" is not enough; the document should specifically authorise the fiduciary to access the content of electronic communications and consent to disclosure by providers.
• Coverage across every role. Executors handle probate assets, trustees handle trust assets, and agents under a power of attorney handle matters during incapacity. Each needs its own grant, which is why digital provisions belong alongside the documents described in our guide to powers of attorney and health care directives.
• A named digital fiduciary. Some states allow a separate person to handle digital assets. Even where they do not, naming a technically capable co-fiduciary or adviser helps.
• Instructions on disposition. Which accounts to close, which to preserve, what to do with photo archives, and whether any communications should be deleted unread.
• Trust titling. Income-producing digital property — a domain portfolio, a monetised channel — can be assigned to a revocable trust so the successor trustee's authority is immediate, using the mechanics described in our comparison of revocable and irrevocable trusts.

Cryptocurrency needs a different plan

Self-custodied digital currency inverts the usual estate problem. There is no institution to petition and no reset process; whoever holds the private key or recovery phrase controls the asset, and no one else ever will. Legal authority without the key is worthless, and the key without legal authority invites disputes.

Workable approaches keep the two separate. The documents grant authority and identify that holdings exist and roughly where; the keys are secured through a bank safe deposit box, a sealed instruction held by a lawyer, a multi-signature arrangement, or a shard-splitting scheme requiring several parties. Assets held at a regulated exchange are simpler, since the exchange has an estate process, though verification can take months.

Valuation is its own task. Volatile holdings must be valued for the estate under the rules referenced on the IRS estate tax pages, and a fiduciary who lets a position swing wildly while deciding what to do may face questions from beneficiaries.

Building an inventory that stays useful

The inventory is the piece people skip, and it is what fiduciaries actually need. Keep it as a list of what exists and where authority lives — not a password file in a document that will be stale within months.

• List providers, account purposes, and whether an online tool has been configured.
• Use a reputable password manager and record how emergency access to that manager is granted, rather than duplicating credentials.
• Note recurring subscriptions and auto-payments, which are a common source of losses during administration.
• Flag two-factor authentication tied to a phone number, and plan for the phone account itself.
• Review annually and after any device or provider change.

Families supporting an older relative should also be careful that convenience arrangements do not become exposure. The Consumer Financial Protection Bureau's resources for older adults address safer ways to give trusted help with accounts.

Frequently asked questions

Can I just leave my passwords for my executor?

It is not a substitute for authority. Terms of service typically prohibit account sharing, and logging in as another person can conflict with federal computer-access and privacy statutes even when the family's intent is entirely legitimate. Passwords may be practically necessary, but they should sit alongside express written authority and, where available, a configured online tool.

What happens to a social media account when someone dies?

It depends on the platform and on what the user configured. Most major services allow either memorialisation, which preserves the profile in a restricted state, or deletion on request by an authorised person with a death certificate. Very few allow the account itself to be transferred, so an heir generally inherits content, not the account.

Does a will's digital assets clause override a platform setting?

Usually not. Under RUFADAA the online tool takes priority when the provider offers one and the user completed it, and the document controls only in the absence of a valid tool direction. That ordering makes it essential to check the settings on major accounts whenever the estate plan is signed or updated.

Are digital assets subject to probate?

Those with transferable value and no beneficiary designation generally are, and they follow the same administration path as other property in the probate process. Accounts held in a funded trust avoid it, as do assets with a valid beneficiary or transfer-on-death designation. Purely licensed content usually is not property at all.

Should a business owner plan differently?

Yes, and more urgently. A company that loses access to its domain registrar, payment processor, or cloud administrator can stop operating within days. Business continuity planning should identify who holds administrative credentials, keep at least two authorised administrators on critical services, and align those arrangements with the owner's personal estate documents.

Practical next steps

Do three things in order. Configure the online tools on your major email, cloud, and social accounts, because those settings outrank everything else. Then add express digital asset authority — including consent to content disclosure — to your will, trust, and power of attorney. Finally, build the inventory, secure any private keys separately from the documents, and put a yearly review in the calendar.

Because RUFADAA's enacted text differs by state and providers change their tools frequently, confirm the current rules where you live and see our other core estate planning documents to check that the digital provisions match the rest of the plan.

Sources & further reading

• Uniform Law Commission — Revised Uniform Fiduciary Access to Digital Assets Act
• Legal Information Institute — Trust (Wex)
• CFPB — resources for older adults and their caregivers
• IRS — Estate Tax