A Facebook profile freezes once somebody reports the death, and the freeze locks out even family members who hold the password. Meta calls the frozen state memorialisation.
The finding comes from a study presented at CHI 2016 and co-authored by Facebook staff. Anyone’s report can trigger it. So one friend of a friend filing a form can close a route the household had been using every day. Download whatever you can reach first, in the order saving the photos and files sets out.
Facebook offers three mechanisms in total, and the useful one has to be set up in advance. Instagram offers nothing of the kind. A legacy contact is a person the account holder names on Facebook before death, and the powers are narrow ones.
Meta frames the freeze as protection against attempted logins and fraudulent activity on the account. The design is doing what Meta built it to do, and no support agent can undo it.
Reporting a death and acting for an estate are two separate things, with separate paperwork behind each. Anyone can do the first. Facebook takes an obituary or a death certificate to freeze an account, which is a low bar on purpose. Removing an account asks for much more, and the same split runs across every platform here.
Nothing here produces a password. Meta’s terms bar sharing a password, and they bar handing an account to somebody else. Whether an estate can compel more than Meta offers is a question for the lawyer handling it.
What a Facebook legacy contact can do
The powers are worth knowing before you build any plans around the role. A legacy contact can pin a post.
A pinned post sits at the top of the frozen profile. They can change the profile photo, and they can ask Facebook to remove the account. Where the account holder switched it on in advance, they can download an archive of posts and photos. The list of powers ends there, and Facebook sets them out on a help page.
The limits are what surprise people who thought the role came with something like ownership of the account. A legacy contact never receives a login. The account is never reopened, and a legacy contact can’t read the messages that families ask about most.
The limit on messages isn’t an oversight. Message content sits behind federal privacy law as well as Meta’s own terms, and no Facebook setting will open it.
Three mechanisms exist in total, and it helps to hold them apart from each other. Freezing a profile leaves it visible to friends. A legacy contact works inside that frozen state and changes very little about it. The third mechanism is a choice the account holder makes in advance, telling Facebook to delete the account at death.
Such a choice comes from the account holder, and the model state law puts a direction like it ahead of a will. Nobody has to be told. What that means for one estate or another is a question for the lawyer handling it.
The chosen contact isn’t told automatically
The CHI 2016 study found something else, and it changes how you should search for a way in. A chosen legacy contact isn’t notified automatically.
So a setting can sit on an account that no living person knows anything about. The gap runs both ways. You can spend weeks on court paperwork while the person already named sits one click away from the archive. Ask around among friends and relatives before you decide that nobody was ever chosen.
The other finding from the study is sharper, and it governs the order of everything else. A freeze removes access even from family who hold the password. Anyone’s report can start it, so the freeze can land before you’ve copied a single thing.
The order of the work follows directly from that pair of findings. Download whatever you can reach while the account is still an ordinary one, and report the death only afterwards.
Meta’s terms bar sharing a password, so the window is not one that anybody should stretch. The tension here is real. This site is not going to pretend that the tidy answer and the practical answer are the same thing. Logging in with their password sets out what is known and what is not.
Planning removes the problem, because a named legacy contact who has been told about the role will act. The archive option has to be switched on. The three settings that outrank your will covers what to switch on and who to tell.
Instagram has no setting to arrange in advance
Instagram offers the same freeze or a removal, and it offers nothing at all that an account holder can set up in advance. There’s no legacy contact to name on Instagram.
A frozen Instagram account can’t be changed by anyone at all, including the family itself. No designee holds powers over it, because no designee exists at all. The profile stays visible and frozen. Everything you want out of that account has to come out before any report goes in.
The paperwork splits into two piles, according to what you’re asking Instagram to do with the account. Proof of death freezes an account. Deletion asks for a birth certificate, a death certificate, and proof of authority to act for the estate.
The birth certificate is the item that surprises executors, since it appears on the deletion list alone. It doesn’t appear at all on the shorter list that Instagram uses to freeze an account instead.
One caution belongs on this page more than it does on the others in this section. Instagram’s published list was confirmed through search-indexed copies rather than a page that answers directly. So treat the list as unconfirmed. Check Instagram’s own help center before gathering any documents, because the list can move without notice.
The default here works in your favor. An unreported Instagram account stays up with no end date, unlike a Google or Apple account on a clock. Use that time to copy what’s there, rather than to put off the decision about the account.
Why the password is the wrong first move
Meta’s terms bar sharing a password, and they bar handing an account to another person. Signing in with the account holder’s password breaks those terms before it does anything else.
Whether it does more than that is unsettled, and the leading case involves Facebook itself. The Ninth Circuit decided the Power Ventures case in 2016. Breaking a site’s terms of service, on its own, can’t establish liability under the federal computer-crime law. Once a platform clearly takes permission back, though, the account holder’s own consent stops being enough.
The court then reserved one question. It didn’t decide whether boilerplate terms on their own take that permission back. So the honest answer for a survivor sits inside a gap that the judges left open on purpose.
The research behind this site found no reported prosecution of a survivor or a fiduciary for logging in with a decedent’s credentials. Nobody should read that as encouragement, because the exposure sits in legal theory rather than in cases.
The route through the front door avoids the question altogether. A documented request through Meta, or a court order where message content is genuinely needed, leaves no argument about permission. It’s slower. Whether the delay is worth it in one estate or another is a call for the lawyer handling it.
One practical step closes this page. Before you report either account, check Facebook’s settings on a device the household still uses for a named legacy contact. The answer changes which of these routes you’ll need at all.