Digital assets, crypto & online accounts
Florida's 2026 reforms gave personal representatives clearer authority to access digital accounts. Here's how it works in practice — Apple, Google, Meta, exchanges, and the rest.
Until recently, accessing a deceased person's digital accounts was a legal gray zone. Email passwords, photo libraries, social media, cloud-stored documents, cryptocurrency wallets — none of it had clear procedures. Tech companies often refused access citing terms of service. Personal representatives were stuck.
Florida's 2026 reforms clarified statutory authority for personal representatives to access digital assets. Combined with the federal RUFADAA framework adopted by Florida earlier, the law now provides a workable path. The technical reality, though, varies wildly by platform — and some assets remain genuinely difficult to recover.
What 'digital assets' actually means
- Email accounts — Gmail, Outlook, Yahoo, iCloud Mail, etc.
- Cloud storage — Google Drive, iCloud, OneDrive, Dropbox, photos.
- Social media — Facebook, Instagram, X/Twitter, LinkedIn.
- Subscription services — Netflix, Spotify, gym apps.
- Cryptocurrency — exchange-held (Coinbase, Kraken) and self-custody (hardware wallets, paper wallets).
- Domain names and websites — registered domains, hosted sites.
- Digital purchases — Kindle books, iTunes movies, Steam games.
- Loyalty / rewards programs — airline miles, hotel points.
- Income-producing accounts — Etsy shops, YouTube channels, blog ad revenue.
Apple — Legacy Contact + court order
Apple introduced Legacy Contact in 2021. If the decedent designated a Legacy Contact while alive, that person can request access with a death certificate and the access key. Far simpler than the alternative.
Without a Legacy Contact: PR must obtain a court order specifically authorizing access to the Apple ID. Apple's process is slow (4–8 weeks) and they are strict about the order's wording. We've drafted these many times.
Google — Inactive Account Manager + court order
Google's Inactive Account Manager lets users designate trusted contacts who get notified after a period of inactivity. If the decedent set one up, that contact can request data.
Without an Inactive Account Manager designation: PR fills out Google's family-member request form. Google decides case-by-case; for full account access (rather than just data export), a court order may be required. Photo and email access without account control is sometimes available without court order.
Meta (Facebook, Instagram) — Memorialization + Legacy Contact
Facebook accounts can be memorialized (turned into a memorial page) or deleted at the family's request, with a death certificate. Legacy Contact (designated pre-death) can manage the memorialized account.
Instagram accounts can be memorialized or removed similarly. Account access for posting/messaging is generally not permitted even with court orders — Meta's policy is firm here.
Cryptocurrency — the special case
Crypto is genuinely different. The category splits into two:
- Exchange-held crypto (Coinbase, Kraken, Binance, Gemini): treated like a brokerage account. Exchange has KYC, knows the account holder, accepts death certificates and Letters of Administration. Process is similar to claiming any financial account, though crypto exchanges are sometimes slower than traditional brokerages.
- Self-custody crypto (hardware wallet, paper wallet, software wallet): if you don't have the seed phrase or private keys, the crypto is functionally lost. There is no 'reset password' and no central authority to appeal to. We can't recover crypto without the keys — full stop.
Cloud storage and photos
Personal photo libraries are emotionally one of the highest-value digital asset categories. Most cloud providers will release photos to verified family members with proper documentation, even when fuller account access isn't permitted.
- iCloud Photos: through Legacy Contact (best) or court order.
- Google Photos: through Inactive Account Manager (best) or family-member request.
- Amazon Photos: family member request with death certificate.
- Dropbox / OneDrive: similar process; provide death cert and Letters.
- Local backups: check for external drives, computer hard drives, USB drives in the estate. Often the easiest source of photos.
Subscriptions and recurring charges
Subscriptions don't get accessed — they get cancelled. PRs should cancel within the first month or two:
- Streaming: Netflix, Hulu, Spotify, Apple Music — cancel via account or family-member request.
- Software: Microsoft 365, Adobe Creative Cloud, antivirus subscriptions.
- Storage: cloud storage plans (after data is preserved).
- Shopping: Amazon Prime, Costco online, etc.
- Gym, magazines, dating apps, niche services — easy to overlook; check 6 months of credit card statements to find them.
Some subscriptions auto-cancel when the linked card is cancelled. Cancel the card first if account-by-account cancellation is too tedious — but only after data preservation is complete.
Two-factor authentication after death
This is the biggest practical obstacle. Many accounts the PR is trying to access have 2FA tied to a phone number or authenticator app. After death:
- Phone: keep the decedent's phone active and in your possession. Don't cancel the phone plan immediately — many 2FA codes flow through SMS.
- Authenticator apps (Google Authenticator, Authy): on the decedent's phone. If the phone is locked, this is a problem.
- Hardware keys (YubiKey): physical device. Locate it; the account is functionally inaccessible without it.
- Backup codes: sometimes printed and stored with important papers. Look for them.
Income-producing digital assets
Some digital assets have ongoing economic value — they're not just data, they're businesses.
- YouTube channels with monetization: revenue stream, transferable to heirs with documentation.
- Etsy / eBay shops: business interests; transferable but require platform consent.
- Blogs with ad revenue: similar.
- Domain names: have market value; can be sold or transferred.
- Newsletter subscribers / Substack: can be transferred to heirs who continue or sell the operation.
These are rarer than the everyday digital asset categories but matter when they apply. We treat them as business interests during administration.
What people ask us about this.
Related guides
Free 30-minute consult. Plain English. No pressure.
Most callers leave the consult with a one-page action list, an honest scope, and a flat fee — even if the answer is “you don't need us.”