You generally cannot unlock a deceased person’s phone. Modern iPhones and Android devices are encrypted by default, and neither Apple nor Google holds a key that lets them bypass a passcode without wiping the device. What families can usually get instead is the data that was backed up to the deceased person’s iCloud or Google account, released through a formal request process that requires legal authority over the estate and, in many cases, a court order. Expect the process to take weeks.
Why the Phone Itself Is a Dead End
Every current smartphone encrypts its storage with a key tied to the user’s passcode. Without the code, the contents are unreadable, and Apple has stated publicly that it cannot remove a passcode lock without erasing the device entirely.1Apple. How to Request Access to a Deceased Family Member’s Apple Account Android uses similar full-disk or file-based encryption. There is no manufacturer backdoor.
Biometrics do not offer a workaround. Fingerprint sensors on modern phones use capacitive technology that reads the electrical properties of living skin, and those properties change within hours of death. Face ID uses infrared depth mapping that expects attention and responsiveness. Repeated failed attempts also trigger lockout protections that make the situation worse.
The realistic path, then, is not the device but the account it syncs to. If the deceased had iCloud Backup or Google backup turned on, most of what you would want off the phone (photos, messages, contacts, notes, files) already lives in the cloud and can be released to the estate through the process below.
Act Fast on the Phone Number and Two-Factor Codes
Before you do anything else, keep the phone line active. The deceased person’s number is often the second factor for their email, banking, and social media accounts, and once the carrier disconnects it, those accounts become extremely hard to log into even with the password. T-Mobile, for example, allows a family member to manage a deceased customer’s account by calling support, and does not require a death certificate to begin the conversation.2T-Mobile. Cancel an Account of a Deceased Family Member Other carriers have comparable processes with varying documentation requirements.
If you can move the SIM into another phone and keep verification texts arriving, do that. Also check whether the deceased saved backup verification codes anywhere. Many services generate one-time recovery codes when two-factor authentication is first set up, and people commonly store them in a notes app, a password manager, or printed with their important papers. Those codes bypass the two-factor prompt outright.
Google has confirmed there is no way to bypass its two-step verification, even for a deceased user’s account.3Google Account Community. Need to Bypass 2 Step Authentication as User Has Died That is why keeping the number alive matters so much in the first days.
The Legal Authority You Need Before Any Company Will Help
Apple, Google, and most other providers will not release account data to a family member. They release it to the estate’s personal representative: an executor named in the will, or an administrator appointed by the probate court when there is no will. The probate court issues Letters Testamentary in the first case and Letters of Administration in the second. Getting either means filing with the probate court and waiting anywhere from a few weeks to several months, depending on the estate and the court’s backlog. Smaller estates may qualify for a simplified process called a small estate affidavit, and some states recognize that affidavit as valid authorization for digital asset access.
The state law that gives executors this authority is the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), enacted in every state except Louisiana. RUFADAA lets a fiduciary reach account information with proper paperwork, but treats the content of private communications differently: an executor can only get message content if the deceased specifically authorized it through an online tool like Google’s Inactive Account Manager, through explicit language in a will or trust, or by court order.4Kentucky Legislative Research Commission. Why Your State Should Adopt the Revised Uniform Fiduciary Access to Digital Assets Act
Federal law reinforces that caution. The Stored Communications Act bars electronic communication providers from voluntarily disclosing the contents of stored communications except under narrow exceptions, and whether an executor’s state-law authority counts as the “lawful consent” the statute requires is a legal gray area.5Office of the Law Revision Counsel. 18 US Code 2702 – Voluntary Disclosure of Customer Communications or Records That is the practical reason Apple and Google typically want a court order before releasing message content, not just Letters Testamentary.
Requesting Access from Apple
Apple has two paths, and which one applies depends on whether the deceased set up a Legacy Contact before dying.
If a Legacy Contact Was Named
If the deceased added you as a Legacy Contact through their Apple Account settings, you can request access using the access key they gave you plus a death certificate. The request can be started from a device running iOS 15.2 or later, or through Apple’s Digital Legacy page.6Apple. Digital Legacy This route grants access to most iCloud data: photos, messages, notes, files, downloaded apps, and device backups. It does not include movies, music, or books purchased through the Apple Account, subscriptions, or anything stored in Keychain, which is where saved passwords and payment information live.7Apple. How to Add a Legacy Contact for Your Apple Account
If No Legacy Contact Was Named
Without a Legacy Contact, Apple requires a court order in addition to the death certificate. The order has to name the deceased and their Apple Account specifically, confirm you are the legal personal representative or heir, state that your authorization is “lawful consent,” and direct Apple to assist.1Apple. How to Request Access to a Deceased Family Member’s Apple Account Getting language that specific usually means a separate petition to the probate court beyond the standard Letters Testamentary, which adds time and legal fees.
What Apple Cannot Do
Neither path unlocks the physical phone. If the device has a passcode you do not know, Apple can only erase it. They can also remove Activation Lock so the wiped device can be set up with a new Apple Account, but the data on the phone itself will be gone.1Apple. How to Request Access to a Deceased Family Member’s Apple Account The cloud request is the substitute.
Requesting Access from Google
Google handles these requests through a dedicated online form. You submit identification and a death certificate, and Google reviews the request before deciding whether to release anything, without committing to a timeline.8Google Account Help. Submit a Request Regarding a Deceased User’s Account Families commonly wait weeks to months, and for the content of Gmail messages Google may require a court order for the same Stored Communications Act reasons that Apple does.
If the deceased set up Google’s Inactive Account Manager while alive, it is far simpler. That tool lets an account holder pre-designate up to ten trusted contacts who receive notification and access to selected data after a chosen inactivity period.9Google Account Help. About Inactive Account Manager It only helps if it was set up before death.
One deadline matters here. Google accounts that go inactive for two years may be permanently deleted along with all their data.10Google Account Help. Inactive Google Account Policy If probate drags on, the data could be destroyed before anyone has legal authority to ask for it. File the deceased-user request with Google as soon as you can, even if your probate paperwork is not final, just to put them on notice that the account belongs to someone who has died.
What About Just Unlocking It Yourself?
If you already know the passcode, unlocking the phone right after a death feels natural, and many families do it. The legal risk is not zero. The federal Computer Fraud and Abuse Act makes it a crime to intentionally access a “protected computer” without authorization, and smartphones fit within the statute’s broad definition of devices used in interstate communication.11Office of the Law Revision Counsel. 18 US Code 1030 – Fraud and Related Activity in Connection With Computers Whether post-mortem access by a family member qualifies as “unauthorized” has not been cleanly resolved by courts.
The realistic risk of prosecution for a grieving spouse who checks a partner’s phone is low. It rises when the person accessing the phone is not the executor, when heirs are in conflict, or when the access is used to move money or change account settings. In contested estates, other parties have used device access as leverage in litigation. If any of that is a possibility, leave the phone powered on and locked until you hold formal authority.
Data Recovery Firms
Some families turn to forensic data recovery services when the manufacturer channels stall. These firms extract data from the phone’s hardware directly, sometimes by transferring the storage chip to a working board or by using known vulnerabilities in older models. On older devices without hardware-level encryption, success rates were reasonably high. On current iPhones and Android phones, the odds drop sharply. The passcode is still the gatekeeper, and no reputable firm can bypass it on a modern device. Where they can help is a physically damaged phone whose storage chip is intact but whose screen or board is broken, and only if the device was already unlocked or the passcode is known.
Prices commonly run from around $600 for straightforward jobs to $2,000 or more for board-level work, with some firms quoting $4,000 and up for difficult cases. Any firm that guarantees it can bypass encryption on a modern phone should be treated with suspicion.
Stopping the Charges That Keep Running
While you wait on probate and manufacturer reviews, subscriptions and app charges keep hitting the deceased person’s payment methods. If you get into the Apple or Google account through one of the paths above, you can cancel subscriptions from there. If you cannot, contacting Apple or Google support with a death certificate to request cancellation is an option, though slow. The faster fix is usually the payment side. As the estate’s personal representative, you can direct the deceased person’s bank or credit card issuer to stop recurring charges at the source.
How to Set This Up for Your Own Family
Most of the difficulty above is preventable in under half an hour while you are still alive.
Add a Legacy Contact in your Apple Account settings on any device running iOS 15.2 or later. You share an access key with the person you choose, and after your death they can request your iCloud data with that key and a death certificate, skipping the court order entirely. The contact does not need to own an Apple device.7Apple. How to Add a Legacy Contact for Your Apple Account
Set up Google’s Inactive Account Manager. You choose up to ten trusted contacts, select which data each of them can receive, and pick an inactivity trigger of 3, 6, 12, or 18 months. Google notifies you first, and if you do not respond, your contacts get an email with links to download what you designated. You can also tell Google to delete the account afterward.9Google Account Help. About Inactive Account Manager
Use a password manager with emergency access. Bitwarden, for example, lets you designate a trusted contact who can request access to your vault; if you do not respond within a waiting period you set, they get in automatically.12Bitwarden. Log In With Emergency Access
Have your will authorize your executor to access your digital assets and electronic communications. That language strengthens the RUFADAA consent argument. Keep the passwords themselves out of the will, which becomes a public document in probate. Instead, maintain a separate written list of accounts and access instructions in a safe deposit box or with your estate planning attorney, and update it when you add anything significant.