When someone dies, their family discovers a second estate nobody planned: the digital one. The photo library behind a passcode nobody knows. The email account where the utility bills arrive. The subscriptions quietly billing a dead person's card. And, grimly, the identity itself, because criminals actively harvest obituaries, and the deceased are ideal victims for the same reason children are: nobody is watching the file. An hour of setup now converts months of your family's grief-admin into a folder and two settings.
The two settings that exist for exactly this
The major platforms built official mechanisms, and almost nobody turns them on. Apple's Legacy Contact lets a person you choose access your Apple account and photos after death, with a death certificate and the access key you generated for them in advance; without it, families face a court order and, for anything end-to-end encrypted, often permanent loss. Google's Inactive Account Manager goes further: after a period of inactivity you choose, it automatically shares selected data with people you name, or deletes the account. Facebook and other platforms offer legacy or memorialization settings of their own. Set the two big ones today; they take ten minutes combined, and they are the difference between "she left us the photos" and "the photos are gone."
The third mechanism is the one you may already have: password managers offer emergency access, a designated person who can request your vault and receive it after a waiting period you control. If you followed the manager guide, your entire digital estate already has a master key; this setting decides who inherits it.
The folder
Alongside the settings, one physical or well-secured document, updated yearly, telling your executor what exists: the email accounts and their recovery paths, the password manager and how emergency access works, the financial accounts and subscriptions, the domains or crypto if you hold them, and what you want done: closed, memorialized, handed over. Crypto deserves its own sentence, because it is the edge case with no customer service: whoever does not have the keys does not have the coins, full stop, and exchanges without beneficiary processes have kept fortunes. Store the document like the key it is: with the will, in a safe, or in the manager's secure notes with emergency access configured, never as a loose file called "passwords" on the desktop.
- Send death certificates to all three credit bureaus and ask them to flag the file "deceased, do not issue credit." This is the anti-ghosting step, and it is urgent because obituary harvesting is fast.
- Notify the Social Security Administration and the banks; the funeral home often handles SSA, but verify.
- Keep the phone and email alive for a few months if you can: they are the recovery keys to everything else.
- Limit obituary detail: date of birth, mother's maiden name, and home address are identity-kit components, as covered in the data you give away.
None of this is morbid to set up. It is the same logic as every guide here, aimed one horizon further: decide calmly today what should not have to be improvised on the worst day. Which is, in the end, this whole library's actual subject.