Planning
Digital Assets in Your Will: Accounts, Photos, Crypto and Passwords
How to plan for online accounts, photos, crypto and domains: what your executor can access under RUFADAA, platform legacy tools, and where passwords belong.
Short answer
Your will can say who inherits your digital property and whether your executor may read your messages, but it shouldn't hold passwords, because a probated will usually becomes a public record. In 47 states, D.C. and the U.S. Virgin Islands, a law called RUFADAA gives a platform's own legacy tool first say, then your will, then the site's terms of service. Keep logins and crypto keys somewhere secure that your executor can find.
What counts as a digital asset?
The model law most states use defines a digital asset as "an electronic record in which an individual has a right or interest" (RUFADAA §2). That covers email and messages, photos and files in the cloud, social media, cryptocurrency, domain names, websites and online businesses.
Digital purchases are trickier. Apple, for example, says movies, music, books and subscriptions bought with your account aren't available to a Legacy Contact (Apple).
What is RUFADAA, and does your state have it?
The Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) is a model law the Uniform Law Commission approved in 2015. It governs what your executor, trustee or agent under a power of attorney can get from online companies. As of October 2026, the commission lists it as enacted in 47 states, the District of Columbia and the U.S. Virgin Islands (Uniform Law Commission).
The exceptions are Delaware, which has its own digital-assets law (12 Del. C. ch. 50), Louisiana and Massachusetts, where a bill has been introduced. If you live in one of those states, ask a local attorney how your instructions will be treated.
RUFADAA sets a clear order of priority:
| Priority | Where your instructions live | What it covers |
|---|---|---|
| 1st | The platform's own online tool, such as Apple Legacy Contact | Overrides a conflicting will, as long as you can change the setting at any time |
| 2nd | Your will, trust, power of attorney or other record | Applies if you didn't use the platform's tool, or it has none |
| 3rd | The site's terms of service | Applies if you left no instructions |
By default, your executor can get a list of who you communicated with and when, plus your other digital assets, but not the content of your messages. The content is released only if you consented or a court orders it (RUFADAA §§4, 7, 8). Even then, the company can choose to give full access, partial access or copies, and it doesn't have to hand over anything you deleted.
How do Apple, Google and Facebook handle death?
All three let you plan ahead. These settings are the kind of "online tool" RUFADAA puts first, so make sure they match your will.
| Platform | Tool | What your contact can get | Limits |
|---|---|---|---|
| Apple | Legacy Contact | Data such as photos, messages, notes, files and device backups | Needs your access key and death certificate. No iCloud Keychain passwords, passkeys or payment info, and no purchased media. Access lasts three years from Apple's first approval. |
| Inactive Account Manager | Up to 10 people can download the data types you choose | Starts only after the inactivity period you set. Without a plan, Google may delete an account inactive for two years. | |
| Legacy contact | Can write a pinned post, change the profile and cover photos, request removal, and download what you shared if you allow it | Can't log in, read messages, remove friends or send friend requests. You must be 18 or older to choose one. |
Sources: Apple, adding a Legacy Contact; Apple, requesting access; Google Account Help; Facebook Help Center. On Facebook you can instead choose to have your account permanently deleted.
Why shouldn't passwords go in your will?
- A probated will is usually public. Once it's filed with the court, anyone may be able to read it. One California court puts it plainly: "Probate records are public records subject to public view and copying" unless sealed or made confidential by law (Sacramento Superior Court).
- Passwords change; wills don't. Updating a will means signing a new will or codicil with witnesses. A list in the will goes stale fast.
- Logging in as you isn't the same as authority. Under RUFADAA, your executor's authority is still subject to each site's terms of service and "may not be used to impersonate the user" (§15).
Instead, use your will to grant authority, and keep the keys elsewhere. Write an inventory of your accounts, without passwords, and store it with your other estate papers. A letter of wishes can explain what you want done with each account.
How do password managers' emergency access features work?
Some password managers let you name someone in advance. With Bitwarden's emergency access, a premium feature, your trusted contact requests access, a waiting period you set must pass, and you can reject the request in the meantime. You choose whether they can only view your vault or take it over (Bitwarden).
1Password instead suggests giving someone you trust a copy of your Emergency Kit, which holds your sign-in details and Secret Key (1Password). Keep it with your important papers, not inside the will. Features change, so check your password manager's current help pages.
How do you pass on cryptocurrency?
The IRS treats digital assets such as crypto as property, not currency (IRS), so it belongs to your estate like any other investment. Your will can name who inherits it.
The hard part is access. The SEC warns that "if you lose your private key, you permanently lose access to the crypto assets in your wallet." A seed phrase can restore a wallet, so the SEC also advises storing it securely and never sharing it (SEC investor bulletin, December 2025).
- Crypto on an exchange: list the exchange in your inventory, so your executor knows to contact it.
- Crypto you hold yourself: record where the hardware wallet and seed phrase are kept, such as a safe or safe-deposit box your executor can open. Never write the seed phrase in your will.
- Large holdings: an attorney can help you set up access that doesn't depend on one person.
What about domain names, websites and online businesses?
Domain names are registered for a set term and must be renewed. Registrars must send at least two renewal reminders, about a month and a week before expiration, to the email on file (ICANN). If no one is reading your email after you die, a valuable domain can lapse. Turn on auto-renew, list your registrar in your inventory, and say in your will who gets the domain.
For an online business, list every platform it depends on, such as your store, payment processor and ad accounts, and note who already has administrator access. Where a platform allows it, add a trusted backup administrator now. If the business is a company, its operating agreement or bylaws may also control who takes over.
How do you add digital assets to your estate plan?
- Make an inventory of accounts, devices and crypto, without passwords.
- Turn on platform tools at Apple, Google, Facebook and any other service that offers one.
- Set up emergency access in your password manager, or store your master password securely.
- Give consent in writing. If you want your executor to read your messages, your will, trust or power of attorney must say so. A power of attorney covers message content only if it expressly grants that authority (RUFADAA §9).
- Name who inherits digital property with real value, such as crypto or a domain.
- Review it yearly.
Our free will builder needs no account and keeps your answers in your browser. It doesn't add a digital-assets consent clause, so for message access, use the platforms' own tools, which take priority anyway, or ask an attorney to add consent language. See what to include in a will for the rest of your plan.
Frequently asked questions
Can my executor read my email after I die?
In states that follow RUFADAA, only if you consented, through the provider's own tool or in your will, trust or power of attorney, or if a court orders it. Otherwise the provider may give your executor a list of who you wrote to and when, but not the messages.
Should I put my passwords in my will?
No. A probated will usually becomes a public court record, and passwords change often. Keep them in a password manager or sealed list, and tell your executor where it is.
What happens to cryptocurrency if no one has the private key?
It's lost. The SEC says losing your private key means permanently losing access to the crypto in that wallet, so your executor needs to know where your keys or seed phrase are kept.
Do I need a separate will for digital assets?
No. RUFADAA lets you give instructions in a will, trust, power of attorney or other record. Your regular will, a private account inventory and the platforms' own legacy tools can work together.
Sources
- Uniform Law Commission, "Fiduciary Access to Digital Assets Act, Revised" (act text and enactment map, data as of October 2026)
- Delaware Code, Title 12, Chapter 50, "Fiduciary Access to Digital Assets and Digital Accounts"
- Apple Support, "How to add a Legacy Contact for your Apple Account"
- Apple Support, "Request access to an Apple Account as a Legacy Contact"
- Google Account Help, "About Inactive Account Manager"
- Facebook Help Center, "About legacy contacts on Facebook"
- Superior Court of California, County of Sacramento, "Probate Records"
- Bitwarden Help Center, "Emergency Access"
- 1Password Support, "Get to know your Emergency Kit"
- IRS, "Digital assets"
- SEC Office of Investor Education and Assistance, "Crypto Asset Custody Basics for Retail Investors" (December 12, 2025)
- ICANN, "5 Things every Domain Name Registrant should know about ICANN's Expired Registration Recovery Policy" (2018)
This article is general information, not legal, tax or financial advice. Laws vary by state and change over time. Talk with a licensed professional about your situation. First published October 25, 2026.