What Happens to Online Accounts When Someone Dies

The Short Answer: It Depends on the Platform

There's no universal rule. Every platform has its own policy, and most of those policies default to one of three outcomes: the account sits dormant until it's automatically deleted, the account gets memorialized (frozen in place), or the family goes through a formal request process that can take weeks to months. Without advance setup, families are at the mercy of each platform's terms of service.

Here's what happens on the major platforms — and what families can do before death to avoid the worst outcomes.

Email Accounts

Gmail (Google): If Google's Inactive Account Manager was configured, designated contacts receive access to selected data (Gmail, Drive, Photos) after the specified inactivity period (3 to 18 months). If it wasn't configured, the account sits idle for two years, then Google permanently deletes it along with all emails, photos, and Drive files. Families can submit a formal request to Google with a death certificate and proof of relationship, but Google grants access to data downloads on a case-by-case basis — and routinely denies requests for the content of emails, citing the Stored Communications Act.

Outlook/Microsoft: Microsoft requires a court order or valid subpoena to consider releasing Outlook.com email. A pre-configured OneDrive Digital Legacy code grants read-only access to OneDrive files and photos only — not to Outlook.com. Without a court order, the Microsoft account is frozen after 1 year of inactivity and deleted after 2 years. Microsoft does not provide family members with login access under any circumstances.

Yahoo: Yahoo will not grant access to a deceased user's email. Account contents are non-transferable; Yahoo will not provide passwords or message access. Families can request account closure (and deletion of contents) with a death certificate and proof of authority, but they cannot retrieve messages.

Social Media

Facebook: Accounts can be memorialized (turned into a tribute page) or permanently deleted, depending on the family's preference. If the deceased set up a Legacy Contact, that person can manage the memorialized profile — pin tribute posts, update the profile photo, and respond to friend requests. But Legacy Contacts cannot read private messages, remove existing friends, or log in as the deceased. Without a Legacy Contact, the family must submit a memorialization request with a death certificate.

Instagram: Instagram offers memorialization similar to Facebook (they share the same parent company), but there is no native Legacy Contact feature for Instagram specifically. Families must contact Instagram directly with proof of death. The process is slower and less structured than Facebook's.

X (Twitter), TikTok, LinkedIn: These platforms allow family members to request account deactivation with proof of death, but none offer proactive legacy planning tools. Accounts stay active indefinitely until someone reports the death or the platform's own inactivity policies kick in.

Banking and Financial Accounts

Banks and investment platforms generally freeze accounts upon notification of death. The executor named in the will (or the court-appointed administrator if there's no will) must present a death certificate and letters testamentary to gain access. This is a probate-driven process that follows your jurisdiction's estate law, not the bank's whims.

The practical problem: if nobody notifies the bank, autopay continues drawing from the account, subscriptions keep charging, and direct deposits (including Social Security, which must be returned for any month in which the beneficiary was not alive the entire month) keep landing. The gap between death and formal estate notification is where money gets lost.

Cloud Storage and Photos

iCloud (Apple): If a Legacy Contact was designated, they can request access using their access key and a death certificate. Apple grants access to iCloud Photos, Notes, Mail, Files, and device backups. Keychain passwords, payment information, and licensed media (purchased music, movies, books) are excluded. Access expires after three years.

Google Photos and Drive: Covered by Inactive Account Manager if configured. Otherwise, the same deletion-after-inactivity timeline applies as Gmail.

Dropbox and Amazon: Each has its own request process requiring a death certificate, with no proactive legacy-contact feature comparable to Apple or Google.

OneDrive: Microsoft offers a proactive Digital Legacy setting: generate a legacy access code in OneDrive settings. That code grants read-only access to OneDrive files and photos only — not Outlook.com or other Microsoft services.

The Legal Framework

In the United States, the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) has been adopted by 46 states and Washington, D.C., and provides the legal structure for fiduciary access to digital accounts. It establishes a three-tier priority system:

1. Platform-level settings (Legacy Contact, Inactive Account Manager) take priority
2. Estate planning documents (will, trust, POA with explicit digital asset clauses) come second
3. Platform Terms of Service are the fallback

This means that if your parent configured a Legacy Contact on Apple, that designation trumps anything in their will regarding iCloud data. It also means that a will or POA without explicit digital asset language may be legally insufficient to compel a platform to release data.

In the UK, the Property (Digital Assets etc) Act 2025 formally recognizes digital assets as personal property, strengthening executors' legal standing. But access-oriented accounts (email, social media, streaming) are still treated as non-transferrable contractual licenses that expire on death.

Canada is fragmented — Saskatchewan, Yukon, New Brunswick, and Prince Edward Island have adopted fiduciary digital access legislation, but Ontario and British Columbia have not. In non-enacting provinces, platform terms of service control everything.

Australia has no federal digital asset legislation. Using a deceased parent's passwords without platform authorization can technically violate state computer crime laws.

What Families Should Do Before Death

The gap between "what happens automatically" and "what the family actually needs" is enormous. The platform defaults — deletion, memorialization, denial of access — rarely align with what families want, which is usually: preserve the photos, access the financial records, close the subscriptions, and maintain or memorialize the social presence.

The three highest-leverage steps, in order:

1. Configure platform legacy settings now — Apple Legacy Contact, Google Inactive Account Manager, Facebook Legacy Contact. These are free, take minutes, and sit at the top of the legal priority hierarchy.
2. Update the estate plan — ensure the will or POA contains explicit RUFADAA-compliant digital asset clauses authorizing access to both digital assets and the content of electronic communications.
3. Document the digital footprint — a password manager with emergency access (Bitwarden or 1Password) ensures the family can actually log in when the legal authority is established.

The Managing a Parent's Digital Life toolkit walks through all three steps with templates, checklists, and the exact POA clause language needed, organized into a 90-day implementation timeline.