Hacked Accounts and Recovery

Planning for Digital Legacy and Online Accounts After Death

Why it helps to leave guidance about your online accounts, what legacy tools some platforms offer, and a simple way to start without sharing your passwords insecurely.

On this page
  1. Why it helps to plan
  2. What can go wrong without a plan
  3. Step 1: Make an inventory
  4. Step 2: Decide what you want to happen
  5. Step 3: Use the tools platforms provide
  6. Step 4: Plan secure access, not shared secrets
  7. Step 5: Put it with your other important papers
  8. Step 6: Keep it current
  9. Start small

Why it helps to plan

Most people now hold years of memories, money and correspondence online. Photos live in cloud storage, conversations in messaging apps, bills in email, and money in apps and banks. If you died or became unable to manage them, your family would face a pile of accounts they cannot see, cannot open, and may not even know exist.

Leaving guidance is not morbid. It is a considerate act that spares relatives guesswork at a painful time, and it can protect your privacy by letting you decide what is kept, shared or deleted. This is general information rather than legal advice; for wills and property, a qualified professional can tell you what applies in your location.

What can go wrong without a plan

  • Relatives cannot find all your accounts or know which email you used for what.
  • Providers decline to release content without formal documentation, and the process can be slow, as covered in the article on helping a relative with the accounts of someone who has died.
  • Valuable photos or documents are lost when an account is closed for inactivity.
  • Accounts remain open and become targets for impersonation or identity theft.
  • Recurring subscriptions continue to be charged.

A little preparation can reduce all of these.

Step 1: Make an inventory

Start by listing the accounts that matter. You do not need every login ever created. Focus on:

  • Email accounts, since they can reset other services
  • Phone number and carrier
  • Cloud storage and photo libraries
  • Banking, investment, pension and payment services
  • Social media and messaging accounts
  • Subscriptions and recurring payments
  • Domain names, websites, or online businesses
  • Digital purchases such as books, music or games, where licensing rules vary
  • Devices, including how to unlock them

Write down the service name and the account address or username, not the password. Someone who knows an account exists can contact the provider, which is often the hardest step.

Step 2: Decide what you want to happen

For each category, think about your wishes: keep, memorialize, transfer, or delete. Photos may be important to share, while private messages might be better left alone. Thinking this through now means your family does not have to guess.

Step 3: Use the tools platforms provide

Some major platforms let you name a trusted person or set a rule for what happens after a period of inactivity. Others allow you to ask in advance that your profile be memorialized or removed. Names and menus differ and change, so search the account settings for words like “legacy,” “inactive account,” “memorialize” or “trusted contact,” and read the provider’s own description before relying on it.

These tools typically have limits. A legacy contact may get access to only some data, may be unable to read messages, and may need to provide a death certificate. Check what yours actually grants.

Step 4: Plan secure access, not shared secrets

It is tempting to write all your passwords on a note or send them to a relative. That creates risk if the paper is lost or the message is intercepted. A better approach is usually:

  1. Use one of the available password managers and keep it organized.
  2. Learn whether the manager has an emergency access feature, which lets a trusted person request access after a waiting period.
  3. Store the master password and any recovery codes in a secure place that your executor can reach, such as a sealed envelope with a lawyer or in a safe, rather than in a casual note.
  4. Include instructions for unlocking your phone or computer where you are comfortable doing so.

Also think about two-step sign-in. If a code goes to your phone, then your family may need the phone and its unlock method, or backup codes stored with your documents. Otherwise, a protected account might be impossible for anyone else to open.

Step 5: Put it with your other important papers

Keep the inventory with your will or other key records. Good emergency document storage means your executor knows where it is. Tell at least one trusted person that it exists. Consider whether the document should state your wishes directly, and speak to a legal professional about whether it should be formally included in your will, because laws about digital assets vary.

Step 6: Keep it current

An outdated list can be as unhelpful as none. Review it once a year or when something major changes, such as a new email address, a new phone, or an account closure. A short review pairs well with a data backup basics check, since irreplaceable photos should also exist outside a single account.

Start small

You do not need a perfect plan. In ten minutes you could write the list of your five most important accounts and tell one person where to find it. You can add detail later, and some preparation is much better than none.

The complete guide to hacked accounts and recovery

What to Do First When an Account Is Hacked
Read the guide

Keep exploring

Guides from other topics

All topics →