The Law Behind Digital Access

Knowing someone's password is not the same as having the right to use it. Families who log in to a relative's accounts after a death can breach the service's terms, and companies often refuse to hand anything over without legal paperwork, partly because federal privacy law forbids them to. This chapter explains the rules that decide who gets access to what, the order in which those rules apply, the clause your will probably lacks, and why settling a digital estate takes months, which is a cash problem as much as a legal one. Estate law is made state by state, so the details below describe the common pattern and tell you what to check for your own state.

Four layers of rules

Four different bodies of rules meet at a dead or incapacitated person's account.

Federal privacy law. The Stored Communications Act, passed in 1986, generally bars a provider of email and messaging services from disclosing the contents of your communications without your lawful consent. A death certificate is not consent. This is why an email provider may give a family nothing, even when everyone agrees the family should have it.

Computer-access laws. Federal and state laws make it a crime to access a computer system without authorization. Whether a relative who logs in with a password you shared is "unauthorized" has never been settled cleanly. The risk in practice is small for a family acting in good faith, but it is not zero, and it is one reason professionals advise executors to go through the formal process.

Contract. Each service's terms of service govern the account. Many say the account is personal, cannot be transferred and ends at death. Some forbid sharing your password with anyone.

State fiduciary law. This is the layer that tries to reconcile the other three, and in most states it is a version of one model law.

The model law most states use

In 2015 the Uniform Law Commission approved the Revised Uniform Fiduciary Access to Digital Assets Act, usually shortened to RUFADAA. Most states have since enacted it, some with changes; a few have their own law, and some enacted versions cover only people who have died, not people who are incapacitated. Check your own state before relying on any detail below.

The act gives the account holder's own instructions a clear order of priority.

1. An online tool comes first. If a service offers a setting that is separate from its general terms, such as an inactive-account manager or a legacy contact, and you used it, that choice controls, even over a will that says something different.
2. Your documents come second. If you did not use an online tool, directions in your will, trust or power of attorney decide.
3. The terms of service come last. If you left no direction at all, the service's terms apply, and where they are silent, the act's default rules do.

The act also separates three kinds of information, and treats them very differently.

A service that receives a proper request may give full access, give only the access needed for the task, or simply send copies of the records. It may charge a reasonable administrative fee, and it does not have to recover anything you deleted. A proper request is usually written and comes with a death certificate, the court's letters appointing the executor, and, for message content, a copy of the document in which you consented. Under the model act a service then has 60 days to respond before the executor can ask a court to order it; your state's version may set different terms.

Two details catch people out. A power of attorney reaches the content of your messages only if it says so expressly. And a trustee has full access to anything the trust itself owns, which is one reason some people hold online accounts inside a revocable trust.

The clause your will probably lacks

Most wills were written as if the digital world did not exist. Because the act puts your documents second in line, a few sentences can change what your family is allowed to see. Ask your attorney about:

• Express consent to disclose content. Without it, the content of your email and messages stays closed in many cases. You can consent fully, consent to some accounts and not others, or refuse.
• The same language in your durable power of attorney. Incapacity is the case people forget: your agent may need your inbox to pay bills while you are alive. A power of attorney ends at death, so the will and the power of attorney need to work as a pair.
• A named helper. Your executor may not be comfortable with technology. Some states let you name a separate person to handle digital assets; elsewhere the will can direct the executor to hire help.

Never put passwords or crypto recovery phrases in a will. Once a will goes through probate it generally becomes a public court record.

Where you live changes the answer

The law of your domicile, the state you live in permanently when you die, generally governs your estate. That decides which version of the fiduciary access act applies, how probate works, and whether a simplified small-estate procedure is available, since the thresholds for those vary widely. A service's terms may also choose the law of the company's home state, and an account with a foreign exchange or provider can pull in another country's rules entirely. If you move, your plan moves with you only as far as the new state's law allows, so review it after a move.

Taxes follow the same split. Digital assets count in your estate at their fair market value, like anything else you own. For deaths in 2026 the federal estate tax applies only to estates above $15,000,000 per person, so most families owe none. A minority of states charge their own estate or inheritance tax, often starting at much lower amounts, so check your state's rules or try the estate tax calculator for the federal side.

Why it takes months, and the cash bridge

The formal route is slow. A court has to appoint the executor before most institutions will act, which can take weeks or months depending on the state and the county. Each service then runs its own verification. Accounts in your sole name with no joint owner and no named beneficiary generally wait for all of this. Accounts with a payable-on-death or transfer-on-death beneficiary, jointly owned accounts and life insurance generally pass outside probate and arrive sooner.

Meanwhile the household still has bills. That gap between a death and access to the money is easy to underestimate.

A household whose essential costs are $6,000 a month, with $10,000 of cash the survivor can reach in their own name, is covered for 1.7 months. If the estate takes 9 months to release the rest, it needs $54,000 to bridge the gap, which leaves $44,000 to find from somewhere else. The usual ways to close that gap are an account the survivor owns jointly, a payable-on-death beneficiary on one account, life insurance, or the survivor's own emergency fund. The emergency fund calculator runs the same sum with your numbers.