How to Find and Protect Digital Assets in an Estate

Overview

Digital assets are more than social media profiles. They may include financial accounts, cryptocurrency, websites, domain names, online businesses, cloud storage, email, photographs, videos, subscription records, rewards balances, intellectual property, and files stored on phones or computers. Some have monetary value, while others matter because they contain records needed to administer an estate.

What happens to online accounts after death depends on several factors: the account agreement, the type of asset, applicable state law, the estate plan, and whether the personal representative can prove authority. A password alone does not necessarily give an executor the legal right to access an account. Conversely, a will may express the deceased person's wishes without overriding a provider's access procedures or terms.

Digital asset estate planning should therefore address three separate questions:

• What exists? Create a complete, organized inventory.
• Who may act? Name appropriate fiduciaries and provide legally valid authority.
• What should happen? State whether an asset should be transferred, preserved, closed, deleted, or kept private where lawful.

Keep the inventory separate from the will when it contains passwords or security details. A will can become part of a public probate record, depending on local procedure. Instead, use a secure password manager, encrypted record, or other protected method and explain to the appropriate fiduciary how to locate it. Review the difference between a will and a trust when deciding where digital-asset instructions fit into the broader estate plan.

Checklist by scenario

1. Personal devices, email, and cloud files

• List phones, tablets, computers, external drives, cameras, and other devices.
• Record where backups are stored, including cloud services and physical locations.
• Identify email accounts that may contain bills, account notices, business records, or information needed to locate assets.
• State whether family photos, videos, messages, and personal documents should be preserved, shared, or deleted.
• Document the location of recovery instructions without placing a master password in an unsecured note.

Do not assume that a family member may lawfully open every device or account. The person handling the estate should follow the provider's process and applicable fiduciary-access law rather than guessing or bypassing security controls.

2. Banking, payment accounts, and financial apps

• List online banks, payment platforms, brokerage portals, lending accounts, and stored-value accounts.
• Note the institution, account type, last four digits or another non-sensitive identifier, and the location of statements.
• Identify automatic deposits, subscriptions, recurring transfers, and scheduled payments.
• Keep statements and transaction records that may help the executor value property or identify debts.
• Do not transfer money to a beneficiary informally before the estate's debts, taxes, and administration requirements are reviewed.

Beneficiary designations may control some financial assets, but they do not eliminate every estate-administration obligation. For related issues, see Beneficiary Rights After Someone Dies.

3. Cryptocurrency and digital wallets

• Identify exchanges, custodial wallets, hardware wallets, software wallets, and blockchain addresses.
• Record where wallet devices, recovery phrases, private keys, and backup codes are stored.
• Explain which information is needed to locate and transfer assets, but keep highly sensitive credentials protected.
• Consider whether the estate plan identifies someone with the technical ability and legal authority to manage the assets.
• Preserve transaction records and valuation information for administration and tax reporting.

Cryptocurrency can be permanently inaccessible if the necessary key or recovery information is lost. It can also be stolen if those details are disclosed carelessly. Do not place a private key or recovery phrase in an ordinary email, shared document, or publicly filed estate document. A lawyer and qualified tax professional may be appropriate when the holdings are substantial, complex, or held through a business.

4. Domain names, websites, and online businesses

• List domain registrars, hosting providers, website platforms, advertising accounts, payment processors, and business email services.
• Identify renewal dates, ownership records, licensing agreements, customer data, and revenue accounts.
• Separate personally owned assets from assets owned by a company, partnership, or other entity.
• Record who maintains the site, where backups are stored, and how a temporary administrator can be contacted.
• State whether the business should continue, be sold, transferred, archived, or closed.

A domain name or online business may be part of a business estate rather than an individual's probate estate. Review ownership documents and obtain legal advice before transferring control.

5. Photos, social media, subscriptions, and loyalty accounts

• List social media profiles, photo libraries, video channels, blogs, newsletters, and online communities.
• Record preferred actions, such as memorialization, preservation, deletion, or limited family access where the service permits it.
• Identify paid subscriptions and recurring charges that should be reviewed or canceled.
• List airline, hotel, retail, gaming, and other loyalty programs, recognizing that transferability may depend on the program's rules.
• Save important receipts, purchase records, licenses, and warranties in a location the executor can find.

What to double-check

Authority and instructions

Confirm that the estate documents identify the people expected to act and that those people understand the limits of their authority. A personal representative may need court-issued documents, such as letters testamentary or another form of appointment, before an institution will discuss an account. A trust may require a trustee to provide a certification of trust or other documentation.

Review state fiduciary-access rules and the provider's current procedures before taking action. Laws and account policies can change, and a provider may distinguish between content, account management, and financial property.

Security and privacy

• Use unique passwords and multifactor authentication while the owner is living.
• Choose a recovery contact who is reliable and understands the responsibility.
• Keep recovery codes, private keys, and device passcodes in a protected system.
• Tell the fiduciary where the information is stored without sharing sensitive credentials broadly.
• Remove outdated recovery contacts and devices after major life changes.

Do not give an executor more access than necessary. The goal is to make lawful administration possible while reducing the chance of identity theft, unauthorized transfers, or unnecessary exposure of private communications.

Taxes, valuation, and records

Digital property may raise income-tax, estate-tax, inheritance-tax, or reporting questions depending on the asset and the applicable jurisdiction. Keep acquisition records, transaction histories, account statements, and valuation information. Do not assume that an asset has no value because it is intangible or stored online. For broader planning, review the guidance on inheritance and estate-tax deadlines.

Common mistakes

• Listing accounts but not instructions: An inventory is more useful when it explains the intended action and the location of supporting records.
• Putting passwords in the will: Public filing and broad circulation can expose credentials. Use a secure, separately maintained method instead.
• Assuming a spouse or child automatically has access: Family relationship does not always establish authority under account terms or law.
• Ignoring small or dormant accounts: Old email addresses, domain names, rewards accounts, and subscriptions can still contain property, charges, or evidence.
• Mixing personal and business assets: An online store, domain, customer list, or advertising account may belong to a company and require separate administration.
• Moving cryptocurrency without a documented process: A mistaken address, missing key, or unverified transfer can cause irreversible loss.
• Closing accounts too quickly: Deletion may destroy records needed for taxes, debts, claims, or the identification of additional assets.

When digital property is extensive, disputed, held jointly, connected to a business, or likely to affect probate, a probate lawyer can help coordinate authority, preservation, valuation, and distribution. The signs that legal help may be appropriate are worth reviewing before a problem becomes urgent.

When to revisit

Treat the digital-asset inventory as a living part of estate planning, not a one-time form. Revisit it at least during regular planning cycles and whenever a major change affects access, ownership, or intended beneficiaries.

• After opening or closing a bank, investment, exchange, email, storage, or social media account.
• After buying a domain, starting an online business, acquiring cryptocurrency, or changing business ownership.
• After marriage, divorce, separation, a death in the family, or a change in the nominated executor or trustee.
• After replacing a phone, computer, password manager, hardware wallet, or recovery device.
• When a service changes its account, memorialization, transfer, or recovery process.
• Before travel or extended periods away from home if a trusted person may need emergency access to records.

Practical next step: Create five headings—financial, devices and files, communications, business and intellectual property, and digital currencies. List each asset, its owner, its purpose, the location of records, the intended action, and the person who should handle it. Store the completed inventory securely, tell the appropriate fiduciary how to find it, and schedule a review date. If a death has already occurred, preserve devices and records, avoid guessing at passwords or transfers, and follow the executor process described in the executor checklist before distributing or deleting digital property.