Key Takeaways

Most people think about digital security as a way to keep other people out of their accounts.

But there is another problem that becomes more important as we get older:

What happens if you cannot access your own accounts — or if someone you trust eventually needs to handle important digital information for you?

A good digital emergency plan does not require giving a family member all of your passwords.

Instead, it should help a trusted person understand:

Which important digital accounts exist
Which email account is used for important recovery messages
Where important photos and digital documents are stored
Whether Apple, Google, Microsoft, or social-media legacy tools have been set up
What happens if your phone is lost and you cannot receive a verification code
Whether you use a password manager
Where protected recovery instructions are kept
Which information should remain private unless proper access is actually needed

The goal is simple:

Make your digital life understandable to the right person without making it easier for the wrong person to take over.

Digital Emergency Planning Is Not the Same as Sharing Passwords

It is easy to assume that digital emergency planning means writing down every password and giving the list to a family member.

That can create a new security problem.

A safer plan separates three things.

1. Account Information

Someone you trust can know which important services you use.

2. Recovery Information

That person can know whether an approved recovery or legacy system exists and where your instructions are stored.

3. Secret Credentials

Passwords, PINs, device passcodes, backup codes, security keys, passkeys, and financial login information should remain protected.

This distinction matters because major technology companies increasingly provide their own recovery, legacy, or inactive-account tools.

Your trusted person may need to know how your system works without knowing your everyday password.

1. Create a Digital Account Map — Not a Master Password List

Start by creating a simple inventory of the digital services that would matter if you could no longer manage them yourself.

You do not need to list every shopping account or newsletter subscription.

Focus on accounts connected to:

Identity
Communication
Important files
Family photographs
Financial activity
Recurring expenses
Estate administration
Important online property

Your list might include:

Primary email account
Backup email account
Apple Account
Google Account
Microsoft Account
Cloud storage
Photo storage
Mobile phone account
Password manager
Social-media accounts
Financial institutions
Insurance portals
Government-related accounts
Important subscription services
Websites or domain names you own

For each important service, consider recording:

Service name
Username or email used
What the account is used for
Whether two-factor authentication is enabled
Whether a recovery or legacy feature has been configured
Where approved recovery instructions are securely stored

You do not need to put the actual password beside every account.

The account map tells a trusted person what exists without becoming a document that can unlock everything.

2. Identify Which Email Account Handles Important Recovery Messages

Many online services use email for:

Password-reset links
Login alerts
Security warnings
Account-change confirmations
Billing notices
Subscription receipts

That means losing access to an important email account can create problems with many other accounts.

Check the email account you rely on most for account recovery.

Confirm:

The recovery phone number is current
The recovery email is current
Two-factor authentication is enabled where appropriate
You still have access to every recovery method listed
You know what recovery options are available if your phone is lost

Do not assume that a recovery phone number or backup email you added years ago is still correct.

3. Apple Users: Recovery Contact and Legacy Contact Are Different

Apple provides two different tools that can easily be confused.

Apple Account Recovery Contact

A Recovery Contact is someone you choose who can help you regain access to your Apple Account while you are alive.

Apple says a Recovery Contact does not get access to your account. The person can generate a recovery code that helps you reset your Apple Account password if you become locked out. Apple Support

On a current iPhone or iPad, Apple directs users to:

Settings → your name → Sign-In & Security → Recovery Contacts

Apple Legacy Contact

A Legacy Contact serves a different purpose.

Apple’s Digital Legacy program lets you designate one or more people who may request access to certain Apple Account data after your death. Apple says this may include information such as photos, messages, notes, files, and device backups. Apple Support

However, a Legacy Contact does not receive everything.

Apple specifically says inaccessible information includes data stored in iCloud Keychain such as:

Passwords
Passkeys
Payment information

A Legacy Contact generally needs the access key created during setup and documentation of the account holder’s death. Requirements can vary by country or region. Apple Support

On an iPhone or iPad:

Settings → your name → Sign-In & Security → Legacy Contact

Important: Recovery Contact and Legacy Contact solve different problems. Setting up one does not mean you have set up the other.

Official Apple instructions:
Apple — Set up a Recovery Contact
Apple — Add a Legacy Contact

4. Google Users: Review Inactive Account Manager

Google provides Inactive Account Manager.

It allows you to decide what should happen after your Google Account has been inactive for a period of time.

Google says you can select up to 10 people and choose whether they should receive all or only selected types of account data. Different people can receive different data. Google Help

Depending on your choices, that can involve data connected with services such as:

Gmail
Google Drive
YouTube
Other eligible Google data

This is different from simply giving someone your Google password.

Google says trusted contacts are notified only after the inactivity period you selected has been reached. If you chose to share data, the contact receives a link to download the data you authorized. Google Help

Google also has an inactive-account policy for personal Google Accounts.

A personal Google Account that has been inactive across Google for at least two years may be deleted along with its data. Google says it sends notifications to the account and, when available, the recovery email before deletion. Google Help

Practical Google Check

Review:

Your recovery phone
Your recovery email
Inactive Account Manager
Who you selected
What data you selected
Whether those choices still match what you want

Official Google information:
Google — About Inactive Account Manager
Google — Inactive Google Account Policy

5. Microsoft Users: OneDrive Has a Digital Legacy Feature

Microsoft now provides OneDrive Digital legacy.

Microsoft says the feature allows you to designate a trusted contact who can receive read-only access to your OneDrive files and photos if you die or cannot use the account. Microsoft Support

Microsoft’s current process includes:

Sign in to OneDrive.
Open Settings → Digital legacy.
Invite a trusted contact.
The trusted contact accepts.
You obtain a Digital legacy code.
You share that code securely.
When needed, the trusted contact requests access with the code.
Microsoft applies a 72-hour waiting period before access is granted.

The trusted contact must have a Microsoft account.

Microsoft also says the Digital legacy code does not expire and that the resulting OneDrive access is read-only, although downloaded files can later be edited elsewhere. Microsoft Support

There is another important limitation:

If OneDrive Digital legacy was not configured in advance, Microsoft says privacy and legal restrictions generally prevent it from simply providing account information to someone who is not the account holder. Microsoft Support

Official Microsoft instructions:
Microsoft — Preserve Your Digital Legacy With OneDrive

6. Decide What Should Happen to Important Social-Media Accounts

Social-media accounts can contain years of photographs, messages, family history, and personal posts.

Facebook allows users to select a Legacy Contact to help manage a memorialized profile.

Facebook says a Legacy Contact can perform certain actions such as:

Manage the memorialized account
Write a pinned post
Respond to new friend requests
Update the profile picture and cover photo
Download a copy of shared Facebook information if the account holder enabled that option
Request deletion of the memorialized account, where available

But Facebook says a Legacy Contact cannot:

Log in as the deceased person
Read private messages
Remove friends
Edit or remove past posts Facebook

Facebook also allows a user to choose account deletion after death rather than leaving a memorialized profile. Facebook

Official Facebook information:
Facebook — Legacy Contacts

You do not have to make the same choice for every platform.

You may want one account preserved and another deleted.

The important point is to make those decisions before someone else has to guess what you wanted.

7. Plan for Two-Factor Authentication Before You Lose Your Phone

Two-factor authentication adds an extra layer of protection to online accounts.

The Federal Trade Commission recommends using two-factor authentication, especially for sensitive accounts such as email, banking, credit cards, tax services, social media, and payment apps. Consumer Advice

But 2FA creates a practical planning question:

What happens if your phone is lost, damaged, replaced, or unavailable?

For important accounts, check whether you have another legitimate recovery method, such as:

A recovery email
A recovery phone
Backup codes
Another enrolled device
A trusted recovery contact
A security key, if you use one

Backup codes are sensitive credentials.

Do not leave them:

On a refrigerator
On an ordinary emergency sheet
In an unlocked phone note
In an email titled “My passwords”

Instead, keep them in a protected location.

Your digital emergency plan can tell the appropriate trusted person where protected recovery instructions exist without exposing the codes themselves.

Official FTC guidance:
FTC — Use Two-Factor Authentication To Protect Your Accounts

8. If You Use a Password Manager, Check Its Emergency-Access Options

A password manager can reduce the need to maintain paper lists containing dozens of passwords.

Some password managers also offer formal emergency-access features.

Bitwarden is one example.

Its Emergency Access feature allows a user to designate a trusted contact who can request access in an emergency.

Depending on the permission selected, the trusted contact may receive:

View access to vault items, or
Takeover access, which allows the trusted contact to set a new master password

The account owner sets a waiting period. During that period, the owner can approve or reject the request. If the owner does not respond, access can be granted after the configured waiting period. Bitwarden

One important detail:

Bitwarden says adding Emergency Access is a Premium feature for the account owner. The trusted emergency contact can have either a free or paid Bitwarden account on the same Bitwarden server. Bitwarden

This is an example, not a recommendation that every reader must use Bitwarden.

If you already use a different password manager, check whether it offers:

Emergency access
Family recovery
Trusted contacts
Account recovery
Succession features

Watch: How Emergency Access Can Work

Bitwarden — Add peace of mind with Emergency Access

This English-language video comes from Bitwarden’s official YouTube channel and demonstrates how its Emergency Access concept works. YouTube

This is product-specific. Readers who use another password manager should check that provider’s own current instructions.

9. Make a Separate Plan for Family Photos

Family photographs are often among the most emotionally valuable digital assets a person owns.

But many people cannot quickly answer three questions:

Where are my original photos stored?

Are they backed up somewhere else?

Could someone I trust locate them if I could not explain where they are?

Your photos might be spread across:

iPhone or iPad
Android phone
Google Photos
iCloud Photos
OneDrive
Computer hard drives
External drives
Old phones
Social media

Choose the location you consider your primary family photo archive.

Then record:

Where it is
Whether another backup exists
Whether a legacy or inactive-account feature covers it
Whether a trusted person knows that the archive exists

Do not assume that “it is in the cloud” automatically means another person will have legal or technical access later.

Cloud storage and authorized access are two separate questions.

10. Create a Digital Subscription Map

A digital emergency can also create months of unnecessary recurring charges.

Make a simple list of important recurring digital services, such as:

Streaming services
Cloud storage
Antivirus or security software
Apps
Software subscriptions
Memberships
Online publications
Website hosting
Domain names
Premium online services

For each one, record:

Service name
Approximate billing frequency
General payment method, such as “Visa ending in …” if appropriate
Whether the service should probably be kept or reviewed if you can no longer manage it

Do not put full credit-card numbers or banking credentials on this list.

The purpose is to make recurring obligations visible.

11. Do Not Assume That Being an Executor Automatically Means Having Every Password

Digital access can involve:

Platform rules
Estate documents
Privacy law
State law
The account holder’s prior consent

The Uniform Law Commission’s Revised Uniform Fiduciary Access to Digital Assets Act addresses fiduciary access to digital property.

It covers people such as:

Executors
Trustees
Conservators
Agents acting under a power of attorney

The Act distinguishes between management of digital property and access to the content of electronic communications.

RUFADAA is a model law, and the rules that apply to you depend on how your state has enacted or adapted it.

The Uniform Law Commission explains that access to email, text messages, and social-media communications can be restricted unless the original user consented to fiduciary access in a will, trust, power of attorney, or another qualifying record. Uniform Law Commission

That means these are not automatically the same thing:

Being an emergency contact
Knowing a password
Being named in a will
Having power of attorney
Being an executor
Having authority under a platform’s legacy system

If important digital assets involve substantial money, cryptocurrency, a business, intellectual property, or complicated ownership, consider discussing digital-asset authority with a qualified estate-planning attorney in your state.

Official background:
Uniform Law Commission — Revised Fiduciary Access to Digital Assets Act

12. Use a Two-Layer Digital Emergency System

A practical system separates information that helps someone understand your digital life from information that could allow someone to take it over.

Layer 1 — Information a Trusted Person Can Know

Depending on your circumstances, this may include:

Your important email address
The major digital services you use
Where important photographs are stored
Where important digital documents are stored
Whether Apple Legacy Contact is configured
Whether Google Inactive Account Manager is configured
Whether OneDrive Digital legacy is configured
Whether you use a password manager
Where protected recovery instructions are stored
Which major subscriptions may need attention
Who handles your estate or legal matters, if applicable

Layer 2 — Information That Should Stay Protected

This may include:

Passwords
Device passcodes
PINs
2FA backup codes
Legacy access keys and digital legacy codes
Password-manager master password
Passkeys
Security keys
Full banking login credentials
Social Security number
Cryptocurrency private keys or seed phrases

The first layer helps someone understand the system.

The second layer contains information that could be dangerous if exposed.

13. Do a 30-Minute Digital Emergency Check

You do not have to organize your entire digital life today.

Start with these ten steps:

Identify the email account you rely on most for account recovery.
Confirm its recovery phone and recovery email.
List your five most important digital accounts.
Check whether Apple Recovery Contact or Legacy Contact applies to you.
Review Google Inactive Account Manager.
Check whether you use OneDrive Digital legacy.
Review what would happen if you lost access to your phone and could not receive 2FA codes.
Identify where your most important family photos are stored.
List your major recurring digital subscriptions.
Tell one trusted person where your digital emergency instructions are stored.

That gives you a practical starting system without handing over your passwords.

If You Are Helping a Parent With Their Digital Life

Do not begin with:

“Give me all your passwords.”

Start with questions that reveal the structure without unnecessarily collecting secrets:

Which email account is most important?
Where are your family photos?
Do you use iCloud, Google Drive, Google Photos, or OneDrive?
What happens if you lose your phone?
Is your recovery phone number still correct?
Have you chosen an Apple Legacy Contact?
Have you configured Google Inactive Account Manager?
Do you use a password manager?
Where are protected recovery instructions kept?
Which online services charge you automatically?

This approach can help a family understand what needs attention while still respecting the older adult’s privacy and independence.

Connect This With Your Non-Digital Emergency Plan

A digital emergency plan should complement — not duplicate — your regular emergency information.

For emergency contacts, medications, mobility needs, home access, pets, transportation, and important physical documents, use the separate Wise Years Living guide:

If You Live Alone After 60: What Should Someone Be Able to Find in an Emergency?

For a practical way to organize essential paper documents and prepare a folder you can take during an evacuation, see our Emergency Grab-and-Go Folder After 60: What to Pack and How to Test It guide. Keep passwords, PINs, and recovery codes separate and protected.

Frequently Asked Questions

Should I give my adult child all of my passwords?

Not automatically.

An unprotected master password list can create serious privacy and security risks.

A safer system may combine:

An account map
Secure password management
Platform-native legacy tools
Protected recovery instructions
Appropriate estate planning

The correct arrangement depends on your circumstances.

Is an Apple Recovery Contact the same as a Legacy Contact?

No.

A Recovery Contact helps you regain access to your Apple Account.

A Legacy Contact can request access to certain Apple Account data after your death.

Apple says Recovery Contacts do not receive access to your account; they can provide a recovery code. Apple Support

Will Google give my family my Gmail password after I die?

No.

Google says it does not provide passwords or other login details when handling requests involving a deceased user.

Google recommends Inactive Account Manager as the best way to specify who should receive information and whether you want the account deleted. Google Help

Can a trusted person access my OneDrive after I die?

If OneDrive Digital legacy was configured in advance, Microsoft provides a process for a trusted contact to request read-only access using the Digital legacy code.

Microsoft says that without prior Digital legacy setup, privacy and legal restrictions generally prevent it from providing information to non-account holders. Microsoft Support

Should I put 2FA backup codes on my emergency sheet?

No.

Treat backup codes as sensitive credentials.

Keep them protected rather than placing them on an ordinary emergency sheet.

What should I do first if all of this feels overwhelming?

Start with three things:

Find your most important recovery email.

Confirm its recovery information.

Write down your five most important digital accounts.

Then continue one platform at a time.

The Most Important Thing to Remember

Digital planning is not about giving someone unrestricted access to your private life.

It is about preventing confusion.

A good digital emergency plan helps the right person understand:

What important accounts exist
Where important digital assets are stored
Which official access arrangements you created
Where protected recovery instructions exist
Which information should remain private
Who has legitimate authority to act when necessary

Your digital life may contain decades of photographs, communications, documents, subscriptions, and online property.

A small amount of planning now can make those assets easier to protect and easier for an authorized person to handle later.

Information reviewed: September 28, 2026

Sources

Apple — Set Up a Recovery Contact for Your Apple Account
Explains how a Recovery Contact can help an account holder regain access without receiving access to the account itself.
Apple — How to Add a Legacy Contact for Your Apple Account
Explains Legacy Contact setup, access keys, eligible data, and information that remains inaccessible.
Google — About Inactive Account Manager
Explains inactivity settings, trusted contacts, and selective data sharing

Google — Inactive Google Account Policy
Explains Google’s current two-year inactivity policy for personal accounts.

Google — Submit a Request Regarding a Deceased User’s Account
Explains that Google does not provide passwords or other login credentials and recommends planning with Inactive Account Manager.

Microsoft — Preserve Your Digital Legacy With OneDrive
Explains trusted contacts, Digital legacy codes, read-only access, and the 72-hour request process.

Facebook — Legacy Contacts
Explains what a legacy contact can and cannot do with a memorialized Facebook profile.

Federal Trade Commission — Use Two-Factor Authentication To Protect Your Accounts
Provides consumer guidance on using 2FA to protect sensitive accounts.

Uniform Law Commission — Revised Uniform Fiduciary Access to Digital Assets Act
Provides the legal framework regarding fiduciary management of digital assets and access to electronic communications.

Bitwarden — Emergency Access
Explains the Emergency Access feature, trusted contacts, access permissions, and waiting periods.

General Digital Safety & Legal Notice

This article provides general educational information about digital emergency planning, account recovery, privacy, digital assets, and legacy-access features. Platform features, account policies, security procedures, and applicable laws can change. Access rights may depend on account settings, platform rules, legal documents, applicable state law, and individual circumstances. This article does not replace individualized legal, financial, cybersecurity, or estate-planning advice. Do not attempt to bypass account security or access another person’s account without proper authorization.

Digital Emergency Plan After 60: What Should a Trusted Person Know — Without Giving Away Your Passwords?