Passwords, Photos, and Subscriptions: A Digital Estate Planning Guide for Families

The filing cabinet has the will. The deed. The long-term care policy. Everything the attorney asked for, in one drawer, labeled.

The phone on the nightstand has everything else.

Digital estate planning is the process of listing your online accounts, deciding who may access each one, and storing that list somewhere a family member can actually reach. It covers passwords, banking logins, email, cloud photo libraries, social profiles, and every subscription quietly renewing in the background. Traditional estate paperwork almost never mentions any of it. Families often notice the gap during a move into assisted living, when someone finally sits down to sort out the bills.

Quick answer: Digital estate planning means building an inventory of every online account you hold, naming who should handle each one, and keeping that inventory in a password manager or sealed document your executor can open. It sits alongside your will rather than inside it, because a will becomes public record during probate. Without it, families spend months locked out of email, photos, and financial accounts while subscriptions keep charging a closed estate. The fix is not complicated. Build the list, switch on the legacy tools the major platforms already offer, and tell one trusted person where the list lives.

What Digital Estate Planning Actually Covers

Most people underestimate the size of their own footprint. Six categories account for nearly all of it.

• Financial logins. Online banking, brokerage accounts, PayPal, Venmo, credit cards, and any account where paper statements were switched off years ago.
• Email. The master key. Password resets for almost everything else route through it.
• Photos and files. iCloud, Google Photos, Dropbox, decades of scanned negatives.
• Social profiles. Facebook, Instagram, LinkedIn.
• Subscriptions. Streaming, meal kits, software, magazines, gym memberships, auto-renewing every month.
• Devices. Phones, tablets, and laptops locked behind a PIN or fingerprint that stops working the moment it is needed.

The National Institute on Aging recommends gathering personal, financial, and health records into a single accessible place. Digital accounts belong in that same pile. They rarely make it there.

There is a reason this feels new. Researchers at Carnegie Mellon University's CyLab, including Lorrie Cranor and Lujo Bauer, interviewed 21 older adults about how they plan for account access after death. Their 2026 paper, presented at ACM CHI, found very few formalized practices. Most participants relied on pen and paper. Trust in existing habits, and discomfort with unfamiliar tools, kept newer methods off the table.

Pen and paper is not nothing. It is just fragile.

What Goes Wrong Without a Plan

Digital assets estate planning failures follow a predictable shape, and the damage is rarely dramatic. It is slow, expensive, and exhausting.

The lockout. Two-factor authentication sends a code to a phone nobody can unlock. The recovery email needs a password that was never written down. Each account becomes its own small siege.

The bleed. Subscriptions keep billing. A card tied to an estate account drains a little at a time, and the charges are too small to notice until someone reconciles a year of statements.

The exposure. Dormant accounts are a known target. The Federal Trade Commission tracks identity theft involving deceased individuals, and the risk window opens because credit bureaus, banks, and platforms often learn of a death months apart.

The loss. Photos are the one families grieve twice. A cloud library with no recovery path is simply gone.

Scale explains why this keeps happening. Carl Öhman and David Watson of the Oxford Internet Institute modeled the growth of deceased-user profiles on a single platform. Their study in Big Data & Society projected a minimum of 1.4 billion Facebook profiles belonging to people who have died by 2100. Nobody designed these systems with succession in mind.

If your parent has already granted you financial authority, you are further along than most. A power of attorney can extend to digital accounts, but only when the document says so explicitly.

One Family, Sixteen Months

A Henrico County family we know found this out the hard way.

Their mother had a will, a durable power of attorney, and a well-organized folder of statements. She also had a Gmail account holding eleven years of photos, a Facebook profile, an Amazon account with an active Prime membership, and three streaming services her grandchildren had set up on her tablet.

After she passed, her son opened probate without much trouble. The digital side took sixteen months.

Two banks required certified death certificates plus a court order. Facebook memorialized the profile, but nobody in the family had been named as a legacy contact, so no one could download the archive. The Gmail account had no inactive account manager configured. The photos stayed behind a login her son could not reset, because the recovery number belonged to a phone that had been deactivated the week after the funeral.

The subscriptions ran for nine of those sixteen months.

None of this required a lawyer. What digital estate planning would have prevented, in this case, came down to an afternoon, a written inventory, and three platform settings toggled on. Families who plan ahead tend to say the same thing afterward, and it shows up often in the notes our residents' families leave in their reviews. The relief comes from not having to guess.

The Three Layers of a Digital Will in Virginia

Virginia has answered the legal question behind digital estate planning directly. The state adopted the Uniform Fiduciary Access to Digital Assets Act, codified at Va. Code §§ 64.2-116 through 64.2-132, effective for fiduciaries appointed on or after July 1, 2017.

The law sets a clear order of authority. A digital will works only when all three layers agree.

Layer one: the platform's own tool. If a service offers a setting for what happens to your account, that setting wins. It overrides your will. Facebook calls it a legacy contact. Google calls it Inactive Account Manager. Apple calls it Legacy Contact. Very few people use them.

Layer two: your legal documents. Absent a platform setting, your will, trust, or power of attorney governs, provided it explicitly authorizes access to electronic communications and digital assets. Generic language is not enough. Federal privacy law restricts the content of communications unless consent is on record.

Layer three: terms of service. If neither of the above exists, the company's user agreement decides, and it usually decides against your family.

The Consumer Financial Protection Bureau publishes fiduciary guides written for family members rather than attorneys, including a Virginia-specific edition. It is a useful companion when you are the one holding the authority. The same care applies to benefit paperwork, whether that is VA Aid and Attendance or anything else routed through an online portal.

Naming a Digital Executor and Building the List

A digital executor is the person who carries out your account instructions. They may be the same person as your estate executor, or someone different if a second family member is more comfortable with technology. Either way, name them, and tell them.

Here is the practical sequence.

1. Inventory the accounts. Work through a bank statement and a credit card statement line by line. Every recurring charge is an account. K-State Research and Extension publishes a digital estate checklist organized by category if you want a structure to follow.

2. Move everything into a password manager. The Cybersecurity and Infrastructure Security Agency recommends a password manager as a core protection, noting that one strong passphrase replaces the need to remember the rest. Most managers include an emergency access feature that releases the vault to a named contact after a waiting period. That single setting solves the majority of the problem.

3. Turn on the platform legacy tools. Facebook, Google, and Apple each take under five minutes. Do these before anything else, because under Virginia law they outrank every other instruction.

4. Write the wishes down separately. Delete, memorialize, download, transfer. One line per account. Purdue Global Law School notes that account credentials should stay out of the will itself, since probate makes the document public. Reference the plan in your will instead.

5. Review it once a year. Accounts change. Phones change. Recovery numbers change.

One note on timing. If a parent has become noticeably slower with familiar apps, is repeating password resets, or has started avoiding online tasks they used to handle easily, treat that as a reason to have the conversation sooner rather than a reason to conclude anything. Patterns like these have many possible causes, and a physician is the right person to evaluate them. What matters here is that legal documents require capacity at the time of signing. Waiting narrows the window. Families exploring memory care often wish they had gathered account access a year earlier than they did.

Cost planning tends to surface the same accounts. Anyone working through what Medicare does and does not cover will end up in half a dozen online portals anyway. Inventory them while you are already there.

Start With the Password List

Digital estate planning is the rare piece of estate work with no attorney fee, no notary, and no waiting period. It needs an hour, a statement to read down, and one honest conversation about who should hold the key.

Our team at The Berkeley has sat with a lot of families in the middle of a transition, and the ones who arrive with account access already sorted spend their energy on the parts that matter. Have that conversation this month. Then let us know what questions came up, and we will walk through the rest of what a move looks like, at whatever pace fits your family.

Frequently Asked Questions

What is digital estate planning?

Digital estate planning is the process of inventorying your online accounts, naming who may access each one, and recording those instructions where your executor can find them. It covers passwords, financial logins, photos, social profiles, and subscriptions.

What happens to online accounts when someone dies?

It depends on the platform. Some memorialize the account, some delete it after a period of inactivity, and some lock it permanently unless a legacy contact was named in advance.

Do I need a lawyer to make a digital will?

No, but your existing will or power of attorney should include explicit language authorizing access to digital assets and electronic communications, which usually means asking your attorney to add it.

Who should I choose as a digital executor?

Someone you trust who is comfortable with technology. It can be your estate executor or a different person, as long as both know the arrangement and can work together.

Can I put my passwords in my will?

No. A will becomes public record during probate. Keep credentials in a password manager with emergency access and reference the plan in your will instead.

Does Virginia law let my family access my accounts?

Yes, under Va. Code §§ 64.2-116 through 64.2-132, but platform legacy settings take priority over your will, so configure those first.

Sources:

• https://www.nia.nih.gov/health/advance-care-planning/getting-your-affairs-order-checklist-documents-prepare-future
• https://www.cylab.cmu.edu/news/2026/03/30-cylab-presents-at-acm-chi-2026.html
• https://consumer.ftc.gov/identity-theft-and-online-security/identity-theft
• https://journals.sagepub.com/doi/full/10.1177/2053951719842540
• https://law.lis.virginia.gov/vacodefull/title64.2/chapter1/article3.1/
• https://www.consumerfinance.gov/consumer-tools/managing-someone-elses-money/fiduciary-guides/
• https://www.johnson.k-state.edu/programs/home-family/agent-articles/digital-estate-planning.html
• https://www.cisa.gov/secure-our-world/use-strong-passwords
• https://www.purduegloballawschool.edu/blog/news/digital-estate-planning