Facebook, Google, and Apple each keep a setting that can outrank the will you signed. You have to set each one yourself.
The order behind them comes from a model law called the Revised Uniform Fiduciary Access to Digital Assets Act, or RUFADAA. The model law dates from 2015. As of July 28, 2026, 47 states plus the District of Columbia have enacted a version of it. That count leaves out Delaware and treats the district on its own, and other sources say 48 by counting another way.
Here’s the ranking: a direction you set in a platform’s own tool outranks a will, as long as that tool stays changeable. A will ranks second, terms of service third. Where none of those exist, the platform’s contract decides, and the act’s own defaults fill whatever that contract leaves silent.
This matters most when someone has already died. Anyone in that position should save the photos and files before touching anything else.
Google states it cannot provide passwords or other login details, and the sites checked for this page work the same way. What comes back is a copy, not a login. So your plan works by leaving usable things behind, because instructions alone give a survivor nothing to hand a custodian. Those items are the platform settings, a durable power of attorney, a password vault with emergency access, and a letter of instruction.
None of this replaces the will itself, which still moves property and names the person the court appoints. Draft that with an estate lawyer. How the two fit together in your state is the question that lawyer is paid to answer.
The act ranks three platform settings above a will
Facebook’s legacy contact, Google’s Inactive Account Manager, and Apple’s Legacy Contact are the three tools RUFADAA treats this way. Each one works differently from the others.
Facebook’s legacy contact can pin a post, change the profile photo, request removal, and download an archive if you enabled that. It grants no login and reads no messages. Meta’s own help pages describe those limits, and its terms bar sharing a password or handing an account to someone else. A peer-reviewed study from 2016, co-written by Facebook staff, found the site doesn’t tell the chosen contact.
Google’s Inactive Account Manager sends up to 10 people a data-download link after a stretch of silence you set. It asks for no death certificate. A survivor can’t speed that timer up, so the people you named wait as long as the setting says.
Apple’s tool works differently again. Its Legacy Contact pairs an access key made at setup with a death certificate, as the legacy contacts page explains.
Apple’s Platform Security guide says the contact holds the decryption key, while Apple keeps a sealed packet. So Apple can’t waive the key. The legacy account also leaves out purchased media and iCloud Keychain, so stored passwords and payment details stay locked. Apple’s iCloud terms make deletion the default once a death certificate arrives, unless you named a legacy contact.
Those terms also carry a clause headed No Right of Survivorship, and a one-year inactivity clock runs underneath all of it. Apple, Google, and Meta each publish steps. Whether a setting overrides your will in your state is a question for an estate lawyer.
A durable power of attorney covers the years before a death
A durable power of attorney names an agent whose authority survives the moment you lose capacity. That authority ends the moment you die.
RUFADAA splits what an agent can reach, and the split is where a standard form quietly fails. Section 10 of the act covers the catalogue. The catalogue lists the people you messaged, the times, and the addresses, and general authority is enough to reach it. Section 9 covers the contents of the messages, and it discloses those only when the document expressly grants that power.
A boilerplate form appears to work until the agent needs to read an email to trace a bill. Texas rewrote its statutory form. The new form adds an express digital-content power, which is the language section 9 of the act asks for.
Paper doesn’t settle the matter. Texas practitioner Gerry Beyer reports that custodians often demand a court order anyway, whatever the statute says.
The Consumer Financial Protection Bureau documents institutions refusing valid powers of attorney and insisting on their own forms. By then the principal can’t sign. The bureau’s guide for agents sets out the problem. Conservatorship is weaker still, because section 14 of the act wants a court order that spells out digital assets.
An agent acting while you’re alive has an easier time than an executor, because you can still consent. Ask an estate lawyer to draft it. Which powers your state’s form carries, and what wording it needs, is the lawyer’s question rather than yours.
Emergency access in a password manager opens the whole vault
Emergency access in a password manager typically hands over the whole vault, with no way to split it up. The Web Conference 2021 documented that.
The same paper gave the problem a name—the post-mortem privacy paradox, where people value planning and avoid doing it. Its sample was 14 security-aware people. The authors say it may not hold more widely, so read it as a note on the tools. It also noted that an inherited email account quietly holds the power to reset passwords on most accounts behind it.
Bitwarden documents its emergency access feature closely, and it’s the one to read before you pick a manager. A premium holder invites a trusted contact. Bitwarden publishes the emergency access steps and its waiting periods.
The shortest wait is one day. Your contact asks for access, and the grant lands on its own once the wait runs out without a veto.
Takeover sets a new master password and removes every two-step login method on the account, which clears the second-factor barrier. No death certificate does that. The limits are real, because the scope is the whole vault and the tool leans on a paid plan staying current. Nothing tells your contact when you die, so the setting can sit there unused for years.
Staff statements in October 2025 show 1Password had no digital-legacy feature, and a request for one closed in March 2026. Nothing had shipped by July 28, 2026. Proton offers account-level emergency access on paid plans, with up to five contacts and an automatic grant after a wait.
Credentials in a will end up in a public court file
Once your will is filed for probate, it becomes a court record that any member of the public can read. Many counties post the probate index online.
California and Texas statutes say the same thing, and consumer legal guides report the practice nationwide. So a password in a will is public. Estate papers are there to grant authority, and the access items belong somewhere else. A password manager can hold them, or a letter of instruction kept apart from the will itself.
A seed phrase makes the point sharpest, since the 12 to 24 words that rebuild a wallet’s private keys are the funds. No reset exists for that. Anyone holding the phrase holds the money, which is why a lawyer handling crypto keeps it out of the filed papers.
Second factors age badly too. Google issues backup codes in sets of 10 single-use codes, and generating a fresh set silently voids the old one.
A printed sheet in an estate binder can be dead paper, and nothing on the page shows it. Date the sheet and reprint it. When Google Authenticator syncs to the cloud, the second-factor seeds travel with the Google account instead of dying with the phone. Combined with Gmail password resets, that makes the Google account a root of trust for much of a digital estate.
Apple’s legacy tool leaves iCloud Keychain out, so the passwords stored there need a separate route to a survivor. Write down where the access key sits. Ask the estate lawyer which items belong in a separate letter.