Digital assets in your estate plan (passwords, crypto, accounts)

The photo library nobody could open

A parent dies with a will that carefully divides the house and brokerage accounts. The adult children also need the cloud photo library, the domain that hosts the family newsletter, two exchange accounts, and a hardware wallet in a desk drawer. The will never mentions any of them. The email provider refuses to hand over the inbox. The exchange wants a court order and a death certificate. The wallet seed phrase is nowhere.

That is a digital-estate failure, not bad luck. Online accounts are contracts with custodians. Crypto keys are control of property. Without directions the law recognizes — and without a practical inventory — even a diligent executor can spend months locked out of assets the family assumed were "just online."

What counts as a digital asset

Under the Uniform Law Commission's Revised Uniform Fiduciary Access to Digital Assets Act, a digital asset is generally an electronic record in which a person has a right or interest. In practice families mean: email and messaging; cloud storage and photo libraries; social and creator accounts; domain names and websites; loyalty and subscription accounts; financial apps; and cryptocurrency or NFT holdings recorded on a ledger or at an exchange.

Treat "digital" as a category of property and access rights, not a single account type. A Gmail inbox, a Shopify store, and a self-custody Bitcoin wallet raise different access problems — but all of them can strand a Herd if nobody planned for death or incapacity.

RUFADAA: the three-tier priority stack

Nearly every U.S. state has adopted some form of RUFADAA (or a close cousin). The Act's practical gift is a clear priority order when instructions conflict.

First: if the custodian offers an online tool separate from the general terms of service — Apple Legacy Contact, Google Inactive Account Manager, Meta legacy contact, and similar products — directions you give there usually win. Second: if there is no tool, or you skipped it, directions in a will, trust, power of attorney, or other written record can authorize disclosure. Third: if you left no recognized direction, the terms of service and the Act's default rules decide whether a fiduciary gets in.

The lesson for planning: use the online tools and put parallel language in your estate documents. Relying on either alone is how families discover the gap after a death.

Privacy law still gates the inbox

Even when state fiduciary law helps, federal privacy rules matter. The Stored Communications Act restricts when providers may disclose the contents of electronic communications to someone other than the user. RUFADAA-style statutes typically distinguish catalogue information (who you emailed, when) from content (the words in the email) — and often require the user's express consent before a fiduciary sees content.

Practically: if you want your executor or agent to read email or messages, say so in the online tool and in your documents. Silence usually means the custodian will refuse content, even when they will confirm that an account exists.

Crypto and other ledger assets: property with a key problem

The IRS treats convertible virtual currency and many other digital assets as property for federal tax purposes. General property principles apply — including basis and fair market value. Form 706 instructions expressly call out digital assets among property the executor may need to report on the estate tax return (often via Schedule F when not reported elsewhere).

Tax classification does not unlock the wallet. Self-custody assets are controlled by whoever holds the keys or seed. Exchange accounts are controlled by the custodian's death process. A will that says "my Bitcoin to my spouse" without a recoverable key path or exchange beneficiary process can leave the spouse with a claim and no coins.

Plan both layers: legal ownership (will, trust, beneficiary designations where the platform offers them) and operational recovery (who can lawfully obtain keys or exchange access, and how — without pasting seed phrases into an unencrypted note).

A practical digital inventory for the vault

Start with a living inventory, not a novel. For each important account or wallet record: custodian or chain, username or wallet label (not the password), what the account holds in plain language, whether a legacy / inactive tool is enabled, and where recovery materials live (password manager, sealed instructions, attorney letter).

Separate secrets from the map. The inventory can live in the family vault so a co-pilot knows what exists. Seed phrases, recovery codes, and password-manager emergency access should use the security model you already trust — hardware backup, dual control, or counsel escrow — not a shared spreadsheet.

Review after every material change: new exchange, new domain, phone migration, or divorce. Digital estates rot faster than deeds.

Documents and roles that make access real

Align three instruments when you can: (1) platform legacy tools, (2) durable power of attorney language that expressly covers digital assets for incapacity, and (3) will or trust language that authorizes the executor or trustee to access, manage, distribute, or delete digital assets and to hire help to do so.

Name a person who will actually do the work — sometimes called a digital executor in plain English even when the legal role is executor, trustee, or agent. Tell them the inventory exists. An authority letter nobody knows about is not a plan.

State law details differ. Confirm your state's enactment of RUFADAA (or equivalent) and any local quirks before you rely on a generic form clause.

Questions worth asking before you call it done

Which online tools (legacy contact, inactive account manager) are actually turned on for email, cloud photos, and social accounts?

Does our power of attorney and will/trust expressly authorize digital-asset access — including email content if we want that?

Where is the inventory of wallets, domains, and high-value accounts — and who can find it within 24 hours of incapacity?

For crypto: is value on an exchange with a death process, in self-custody with a recoverable key plan, or both?

Educational only: not legal, tax, or cybersecurity advice. Custodian policies and state adoptions of RUFADAA vary; confirm current primary sources and work with a qualified professional before acting.

Related guides