ItsGeekToMe.co

Q: Here’s a HUGE question every family will face sooner or later. When someone dies, the survivors/estate executor now have to deal with getting access to dozens (hundreds?) of on-line accounts and businesses which that person had created in life. Accessing these is potentially a major problem when the account owner is deceased. Assuming the owner had enough foresight to physically write down the user IDs and passwords for various accounts, many (if not most) now require two-factor (and even three-factor!) authentication, and/or face ID and/or, a finger print scan and/or, retina scan, etc. How do the survivors/estate executor get around this when the owner is deceased?

– Ed R.
Fort Walton Beach, Florida

A:  You’re absolutely right, Ed.  This is a huge question, and one that gives family members, estate planners, and lawyers, not to mention tech Geeks like me absolute nightmares.

Back in the early days of the Internet, if Grandma had the foresight to write her AOL password on a sticky note and hide it under her keyboard, you were golden. You sat down, typed in the password, and you were inside her digital kingdom.

Fast forward to today, and that sticky note is only about 20% of the solution. Even if you have the world’s most comprehensive list of usernames and passwords, you are almost immediately going to crash headfirst into a brick wall known as Multi-Factor Authentication (MFA) or biometric locks. You type in the password, and the screen instantly says, “We’ve sent a 6-digit code to your phone,” or worse, the physical device demands a thumbprint or facial scan from someone who is no longer here to provide it.

So, how do executors and grieving families navigate this high-tech labyrinth? Let’s break it down into the practical steps you can take today, and how tech companies are handling this reality.

First, let’s talk about biometrics like Face ID or fingerprint scans. A common misconception is that if a phone is locked with a face or finger scan, it is permanently inaccessible. Fortunately, that is not how smartphone security actually works. Biometrics are merely a convenience layer built on top of a classic alphanumeric passcode or PIN.

If a phone reboots, or if a biometric scan fails a few times, the device will always fall back and demand the master PIN or passcode. Therefore, the absolute most critical piece of data anyone can leave their survivors is the PIN code to unlock their smartphone and main computer.

But what if you don’t have the phone PIN, or if a biometric lock is truly keeping you out? This is where the tech giants stepped up with official “digital estate” features. Apple, for example, has a feature called Legacy Contacts. A person can go into their iPhone settings ahead of time and designate someone as their Digital Legacy Contact. Apple generates a special access key. If the owner passes away, the legacy contact provides that key along with a death certificate to Apple. Apple then removes the activation lock and gives the contact access to the iCloud data and photos.

Google has a similar feature called the Inactive Account Manager. You can configure your Google account to automatically trigger if it sees no activity for a set period (like 3 or 6 months). Once triggered, Google will send a download link for specified data (Gmail, Photos, Drive) to a trusted contact you chose in advance.

Facebook/Meta also allows users to choose a “Legacy Contact” who can manage or memorialize their profile after they pass away.

If no pre-planning was done, the road gets pretty bumpy. Legally, just logging into someone else’s account—even if you are the legal executor and have the password—technically violates the Terms of Service (ToS) of almost every major internet company. In some strict interpretations, it can even violate federal anti-hacking laws.

An executor has the legal right to manage the estate, but tech companies are notoriously fiercely protective of user privacy. If you contact Microsoft, Yahoo, or a major bank out of the blue, they will not just hand over a password. You will have to go through their official corporate legal departments, submitting certified copies of the death certificate, Letters of Administration (proof that you are the court-appointed executor), and sometimes even a specific court order directing the tech company to grant access. This process can take weeks or months.

The best defense against all this is to be prepared with a good offense. If you want to save your family a massive headache, here is your homework:

1. Use a Password Manager: Services like 1Password or Bitwarden allow you to store all your passwords and 2FA info digitally. Crucially, they have an “Emergency Access” feature. You can designate a loved one to request access to your vault. If you don’t deny the request within a certain number of days, the vault opens for them.

2. Write Down the Device PINs: Do not just write down web passwords. Ensure your master phone PIN, computer login passwords, and email passwords are physically written down and locked in a secure fireproof safe or safety deposit box accessible to your executor.

3. Set Up Your Legacy Features: Before another day passes, take 10 minutes to search for “Legacy Contact” in your Apple or Google settings and fill it out.

Technology has made our lives incredibly secure, but it has made digital afterlives incredibly complicated. A little foresight today ensures your digital legacy doesn’t vanish into a cloud of unreadable binary data tomorrow.

---

To view additional content, comment on articles, or submit a question of your own, visit my website at ItsGeekToMe.co (not .com!)