Digital legacy
Talking to your family about digital legacy
The planning is the easy part. Having the conversation is what people avoid — so here is how to raise it without it becoming morbid, what to actually agree on, and where to write it down.
Most people who intend to sort out their digital legacy never do, and the obstacle is almost never the paperwork. It is that raising the subject feels like inviting bad luck, or like asking a relative to contemplate their own death over dinner.
So the accounts stay unlisted, the passwords stay unknown, and the work lands on grieving people at the worst possible moment, when they are least equipped to do it and every institution they contact wants documentation they do not have.
This guide is about the conversation rather than the mechanics. For the mechanics themselves — what to inventory and how to record it — see Planning your digital legacy.
Why the conversation is the hard part
There is a well-documented gap here: surveys consistently find that most adults believe digital legacy planning matters and a small minority have done anything about it. The reasons people give are rarely practical. They are about superstition, awkwardness, and not knowing how to start without alarming somebody.
It helps to know that the discomfort is close to universal, and that it drops sharply once the topic is on the table. The hardest sentence is the first one.
Ways in that actually work
The technique that works best is to make it procedural rather than personal. You are not asking someone to confront mortality; you are asking them to help with an administrative task.
Lead with yourself. "I've just written down what happens to my accounts if something happens to me, and I realised I have no idea what you'd want." This makes you the subject, models the behaviour, and asks for reciprocity rather than compliance.
Attach it to something already happening. A will being drawn up, a house move, a new job with a pension form, a relative's illness, or a friend's bereavement. These moments make the subject unremarkable rather than ominous, which is exactly what you want.
Use somebody else's difficulty as the entry point. "A colleague spent four months trying to close her father's accounts because nobody knew what he had." Third-party stories carry the message without anyone having to be the person who raised death.
Frame it as protection, not preparation. The point is not that you expect to die soon. The point is that you do not want your family arguing with support desks during the worst week of their lives.
Keep the first conversation short. You are trying to establish that the subject is discussable, not to complete the task. Ten minutes and an agreement to come back to it is a success.
What not to do
Do not ambush someone with it at a family gathering. Do not present a completed plan and ask them to sign off — people resist decisions made about them. And do not push if someone genuinely does not want to discuss it; leave the door open and return later. A refused conversation you can revisit is worth more than a resented one you cannot.
The four things to actually agree on
Keep the scope narrow. Most attempts collapse under their own ambition.
1. Who is responsible. One named person, with a named backup. Not "the family". Shared responsibility for an unpleasant administrative task reliably becomes nobody's responsibility, and it is a common source of conflict between siblings.
2. Where the list lives, and how it is reachable. Not the credentials themselves in a text file — the location of the record and the means of access. A password manager with a documented emergency-access process, a sealed document with a solicitor, a safe with a known combination. The most common failure is a well-maintained list that nobody can open.
3. What should be preserved, and what should not. This is the part only the person can answer, and the part families agonise over afterwards. Photographs almost always matter. Private correspondence frequently does not, and many people have clear feelings about messages they would not want read. Saying so once, out loud, spares everyone from guessing.
4. What should happen to each significant account. Broadly: memorialise, delete, or hand over. Several major services offer built-in tools — legacy contacts, inactive-account handlers, memorialisation requests — and these are far more reliable than informal arrangements, because they are honoured by the provider rather than depending on someone's cooperation. Where those tools exist, use them; they are the difference between a wish and an instruction.
Write it down, and put it where the will is
A conversation that is not recorded degrades into half-remembered impressions, and half-remembered impressions are what families argue about.
Two practical notes.
Never put passwords in a will. Wills can become public documents in probate, and they are typically read long after they are needed. Reference the location of the credential record instead.
Say explicitly who is authorised. In many jurisdictions, accessing someone else's account without clear authorisation sits in genuinely uncertain legal territory, even for a spouse — and terms of service frequently prohibit credential sharing outright. Written authorisation from the account holder does not resolve every question, but it materially improves the position of the person acting on your behalf.
If the estate is at all complicated, or there is a business involved, this is a reasonable thing to raise with a solicitor while the will is being written. It adds very little to the cost of work already being done.
Doing this with an older relative
The same principles apply, with two adjustments.
Lead with the practical benefit to them rather than to you: knowing that photographs will reach grandchildren, or that a long-running correspondence will not simply evaporate. And be careful that the conversation does not read as an audit of their competence — a frequent and entirely reasonable sensitivity. Asking for their instructions is very different from offering to take over.
There is more on this dynamic in Helping older relatives stay safe online.
If you are already dealing with it
If someone has died and none of this was done, the situation is harder but far from hopeless. Providers have established processes for exactly this circumstance, and they operate on documentation — a death certificate, proof of relationship, sometimes probate paperwork — rather than on credentials.
The order that saves the most time: obtain multiple certified copies of the death certificate before contacting anybody, make a list of every account you can identify from paperwork, email, and card statements, then work through them one at a time keeping a record of reference numbers. Expect it to be slow. The slowness is a deliberate consequence of these processes being designed to resist fraud.
Grief and social media covers the emotional side of encountering someone's accounts afterwards, and Memorializing accounts covers what memorialisation typically changes.
The short version
Have a ten-minute conversation. Name one responsible person and a backup. Record where the credential list lives rather than what is in it. Use the providers' own legacy tools wherever they exist. Write down what should be kept and what should not.
None of it takes long. It is simply easier to postpone indefinitely — which is precisely why it is worth doing this month rather than eventually.