Estate Planning and Online Security for Seniors

Traditional estate planning covers wills, trusts, property, and beneficiary designations. But the average person today has dozens of meaningful digital accounts — email, banking, investments, Social Security, Medicare, streaming services, loyalty programs, and potentially cryptocurrency. Most of these cannot be accessed by family members after death or incapacity without advance planning. The result is a growing crisis in which families lose access to significant assets, and grieving relatives spend months trying to recover accounts or settle digital affairs.

Equally important: the estate planning process itself creates vulnerability. When family members begin learning about a senior's assets and accounts, the information can inadvertently reach bad actors — or the senior, feeling the weight of mortality, becomes more susceptible to scams that promise to help them "protect" their assets.

The Digital Estate Problem

Consider what a typical senior has online: an email account that receives bank statements and medical bills, online banking and brokerage accounts, a Social Security account on ssa.gov, Medicare account on medicare.gov, subscription services that auto-charge monthly, loyalty points and travel rewards, potentially cryptocurrency or NFTs, and years of irreplaceable digital photos stored in cloud services.

After death, federal law (the Computer Fraud and Abuse Act) and most platform terms of service technically prohibit unauthorized access — even by a spouse or executor. Without specific legal planning, family members who attempt to access these accounts can face legal obstacles. And without knowing the accounts exist, they cannot even begin the process.

Estimates suggest that hundreds of millions of dollars in legitimate assets go unclaimed each year simply because families don't know the accounts exist or can't gain access to them.

Creating a Digital Asset Inventory

The first step is documenting what exists. A digital asset inventory should cover:

• Email accounts — every email address, the provider, and approximate usage
• Financial accounts — all banks, brokerages, retirement accounts, and their online login locations
• Government accounts — Social Security (ssa.gov), Medicare, VA benefits, IRS online account
• Subscription services — any that involve automatic charges to bank or credit cards
• Cryptocurrency — wallets, exchanges, and critically, seed phrases or private keys (these must be documented securely — if lost, the assets are permanently inaccessible)
• Social media — Facebook, Instagram, LinkedIn, and similar platforms
• Cloud storage — Google Drive, iCloud, Dropbox, and similar services containing photos and documents
• Domain names and websites — if applicable

The inventory doesn't need to include passwords directly — it needs to tell family members where to look and what to expect. Passwords should be stored separately with appropriate security.

Secure Storage Options

There are two viable approaches to storing this sensitive information securely while ensuring it's accessible when needed:

Sealed envelope with an estate planning attorney. Write out account details and instructions, seal them in an envelope, and leave a copy with your attorney alongside your will. Include instructions that it should be opened by the named executor. This is the most legally clear-cut option and works even for people who are not comfortable with digital security tools.

Encrypted password manager with designated family access. Services like 1Password and Bitwarden allow you to designate an emergency contact who can request access if you become incapacitated. Set this up, give the designated person instructions on how to use it, and store the master password (and emergency kit) physically in a secure location like a fireproof home safe or safe deposit box.

Never store passwords in unencrypted files on a computer, in an email to yourself, or in a notes app that isn't secured. These locations are accessible to anyone who gains access to the device.

Digital Power of Attorney Provisions

Modern estate planning documents increasingly include explicit digital asset provisions. When working with an estate planning attorney, specifically request that your power of attorney document includes authorization to access, manage, and distribute digital assets. Without explicit language, some platforms will refuse to honor even a general power of attorney for digital account access.

The Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) has been adopted by most US states and provides a legal framework for this, but the specific language in your documents still matters. Ask your attorney about this directly.

Online Account Legacy Features

Several major platforms now offer built-in legacy or inactivity management features that should be configured as part of estate planning:

Google Inactive Account Manager allows you to designate what happens to your Google account — including Gmail, Drive, and Photos — if you stop using it for a specified period. You can allow trusted contacts to download your data or have the account automatically deleted. Find this in Google account settings under Data and Privacy.

Facebook Legacy Contact allows you to designate a person who can manage your memorialized Facebook account after your death. They can write a pinned tribute post, respond to new friend requests, and update the profile picture and cover photo. You can alternatively request that your account be deleted upon your death. Find this in Facebook settings under Memorialization Settings.

Apple provides a Digital Legacy feature that allows you to add Legacy Contacts who can request access to your iCloud data after your death. This is particularly important if your parent uses an iPhone and stores photos in iCloud.

Protecting Accounts During the Estate Planning Window

The estate planning process itself creates a specific window of vulnerability. When seniors discuss their finances, assets, and account details — with attorneys, with family members, at financial planning sessions — that information can spread beyond trusted parties. Seniors who are actively engaged in estate planning sometimes become more targeted by financial scammers, who may have access to public records about meetings with attorneys or may simply encounter seniors who are thinking about money and therefore more willing to discuss financial topics.

During this period, it's especially important to have GrannySafe installed and active, to review financial account security settings, and to establish clear rules about who is authorized to discuss financial details and in what contexts.

Working With an Estate Planning Attorney on Digital Assets

Not all estate planning attorneys are equally versed in digital asset issues. When selecting or consulting with an attorney, ask directly: "How do you handle digital assets and online account access in estate documents?" A knowledgeable attorney should be able to discuss RUFADAA, digital-specific power of attorney language, and practical guidance on inventory and secure storage.

If your current attorney is unfamiliar with these issues, it's worth consulting with a specialist. The National Academy of Elder Law Attorneys (naela.org) can help locate an elder law attorney with relevant expertise.

For ongoing digital protection during your parent's lifetime, see our guides on how adult children can protect parents online and password safety for seniors.