When you die, your smartphone becomes one of the hardest things your family will have to deal with. The device locks, the encryption holds, and the accounts tied to it — email, banking, photos, social media — often become unreachable along with it. Understanding what happens to your phone when you die, and taking a few steps now, is the difference between your family recovering your digital life in weeks and fighting tech companies for months.
The Phone Itself Stays Locked
Modern smartphones encrypt everything on the device by default, and that encryption is tied directly to the passcode or biometric unlock. There is no backdoor. If no one knows the passcode and your fingerprint or face is no longer available, the data on the phone is essentially sealed. On iPhones with the setting enabled, too many wrong guesses can trigger a full data wipe. Android devices have similar protections.
Apple will not unlock an iPhone for your family, even with a death certificate and a court order. The company’s position is that it does not have the technical ability to bypass the device passcode on modern iPhones. Apple can provide access to cloud-stored account data through a Legacy Contact or a formal request, but the physical device stays locked unless someone already knows the passcode.
Professional forensic recovery services advertise the ability to extract data from locked phones, typically for $1,500 to $3,000, but results are not guaranteed on newer phones with stronger encryption chips. For most families, the passcode is the only realistic key.
Your Phone Is Probably the Key to Everything Else
This is where a locked phone becomes a much bigger problem than a lost device. If your phone is the second factor for your bank, email, investment accounts, or social media, losing access to it means losing access to all of those at once. Knowing someone’s password is not enough when every login demands a six-digit code sent by text or generated by an authenticator app on the locked device.
Financial institutions will work with executors who present a death certificate and letters testamentary, but the process is slow and often requires in-person visits. Each institution has its own verification protocol, and automated security systems may lock accounts after failed login attempts.
Keeping the phone number active buys time. Your cellular account does not automatically close when you die; carriers will keep billing until someone takes action, and canceling too quickly cuts off text-based verification codes needed to recover other accounts. Carriers generally allow executors to transfer the number to another account or disconnect the line, with a death certificate and executor paperwork required.1Verizon. What to Do When Someone on Your Mobile Account Passes Away If your executor needs the number for two-factor authentication access, they should say so when contacting the carrier so the line is not simply shut down.
What Each Platform Will Release
The company behind each account has its own process for a deceased user, and the differences matter.
Apple
Apple’s Legacy Contact feature lets you designate someone who can access your Apple Account data after your death. That person can retrieve photos, messages, notes, files, downloaded apps, and device backups. A Legacy Contact cannot access movies, music, books, or subscriptions purchased through the Apple Account, and cannot see anything stored in Keychain, which includes saved passwords, payment information, and passkeys.2Apple. How to Add a Legacy Contact for Your Apple Account If no Legacy Contact was set up, family members can submit a formal access request with a death certificate and proof of legal authority, but the process takes longer and may yield less.3Apple. How to Request Access to a Deceased Family Members Apple Account
Google’s Inactive Account Manager lets you choose what happens to your data if your account sits unused for a period you select. You can designate trusted contacts to receive specific account data and decide whether the account should be deleted after inactivity.4Google Account Help. About Inactive Account Manager If no plan was set up, Google reserves the right to delete an inactive personal account and all its data after two years of inactivity, a policy active since December 2023.5Google Account Help. Inactive Google Account Policy
Microsoft
Microsoft is stricter. To access the contents of an Outlook.com email account, OneDrive storage, or any other aspect of a deceased person’s Microsoft account, the company requires a valid subpoena or court order before it will consider releasing information.6Microsoft Support. Accessing Outlook.com, OneDrive and Other Microsoft Services When Someone Has Died Microsoft accounts also face deletion after two years of inactivity, though accounts with purchased products may be exempt.
Facebook and Instagram
Meta allows Facebook accounts to be memorialized, which adds the word “Remembering” above the person’s name and prevents anyone from logging in. A designated legacy contact can manage certain aspects of the memorialized profile, or family members can request full account deletion. Both options require documentation proving the person has died.7Meta. Memorialization Instagram follows a similar process through Meta’s system.
Your Digital Purchases Don’t Pass Down
This catches almost everyone off guard. The money you spent on Kindle books, iTunes movies, apps, and digital music almost certainly cannot be inherited. Most digital storefronts license content to the purchaser rather than selling it outright. Amazon’s Kindle terms state that digital content is “licensed, not sold” and prohibit transferring it to another person by any means, including after death. Apple’s Legacy Contact rules explicitly exclude purchased movies, music, and books.2Apple. How to Add a Legacy Contact for Your Apple Account If the account stays logged in on a shared device, family may keep using the content, but they have no legal right to transfer it to their own accounts.
Federal Law Limits What Can Be Released, and What Your Family Can Do
Even with every document in order, two federal laws shape what is actually possible.
The Stored Communications Act prohibits electronic communication services from knowingly disclosing the contents of stored communications to anyone other than the intended recipient.8Office of the Law Revision Counsel. 18 US Code 2702 – Voluntary Disclosure of Customer Communications or Records Providers routinely cite it to refuse requests from executors.
The Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), adopted in nearly every state, gives executors legal authority over digital assets similar to their authority over physical property.9Uniform Law Commission. Fiduciary Access to Digital Assets Act, Revised But it does not give executors automatic access to the content of private messages and emails. An executor can get that content only if you explicitly authorized it, either through an online tool like Google’s Inactive Account Manager, or in a will, trust, or power of attorney. Without that written consent, a court order is typically required, and courts may decline if there is no evidence you wanted your private communications shared.
RUFADAA also establishes a priority: if you used a platform’s own online tool to specify who gets access, that choice overrides anything written in a will or trust. So if you set an Apple Legacy Contact but your will names someone different, the Apple setting controls.
And there is a risk in the shortcut everyone considers. Family members who know your passwords sometimes just log in and start managing accounts. That feels natural but may violate the federal Computer Fraud and Abuse Act, which criminalizes accessing a computer or online account without authorization.10Office of the Law Revision Counsel. 18 US Code 1030 – Fraud and Related Activity in Connection With Computers Whether using a deceased person’s credentials counts as unauthorized access is legally murky, and prosecutions against grieving relatives are essentially unheard of. But the risk is not zero, particularly if heirs are in conflict or if the access produces a financial advantage.
Subscriptions Keep Charging Until Someone Stops Them
Recurring charges do not stop because you die. Netflix, Spotify, cloud storage, gym apps, meal kits, news sites, and dozens of other services will keep billing until someone cancels each one. Credit card companies may eventually flag the account, but “eventually” can mean months of charges that complicate estate settlement.
The process is similar across services: contact support, explain that the account holder has died, and provide a certified death certificate along with proof of authority over the estate. Some services, like Amazon, have dedicated bereavement channels. Checking bank and credit card statements for recurring charges is the fastest way to find subscriptions no one knew about.
The Two-Year Deletion Clock
If no one acts, some accounts delete themselves. Google deletes inactive personal accounts after two years of no activity across any Google service.5Google Account Help. Inactive Google Account Policy Microsoft has a similar two-year inactivity policy. When these accounts delete, everything goes: emails, photos, documents, contacts, purchase history. There is no recovery.
Estate settlement frequently stretches past two years. Setting up Google’s Inactive Account Manager is the simplest way to prevent silent deletion, since it notifies and transfers data to your designated contacts before any removal occurs.4Google Account Help. About Inactive Account Manager
What to Do Now
Planning ahead turns an impossible situation into a manageable one. A few steps, none of them expensive:
- Set up Apple’s Legacy Contact and Google’s Inactive Account Manager. These are free, take minutes, and override your will for the data they cover.2Apple. How to Add a Legacy Contact for Your Apple Account4Google Account Help. About Inactive Account Manager
- Use a password manager with emergency access. Services like LastPass let you designate contacts who can request your stored passwords after a waiting period you set.11LastPass. Emergency Access
- In your will or trust, explicitly authorize your executor to access your digital accounts, including the content of electronic communications. Without that written consent, RUFADAA blocks executors from reading private messages in most states.
- Store your phone’s passcode with your estate documents or give it to a trusted person. No legal paperwork will unlock an encrypted iPhone. The passcode is the only key.
- Keep a list of your major accounts, the email addresses tied to them, and which ones carry recurring charges. An executor who doesn’t know an account exists cannot manage it.
- Tell your executor if your phone is the second factor for your financial accounts, and give them a plan for keeping the phone number active long enough to receive codes.
None of this requires a lawyer. The families that recover a loved one’s digital life quickly are almost always the ones where someone took these steps while they could.