What happens to your online accounts when you die

When someone dies, their online life does not disappear at the same time as their physical life. Email accounts may continue receiving messages, social media profiles may remain visible, subscriptions can keep charging a card, and photos may sit in cloud storage for years. Some services have a process for closure or memorialisation, while others simply wait for a relative, executor or authorised representative to make contact.

The answer depends on the type of account, the provider’s terms, the person’s privacy settings and the law applying to the estate. In Australia, a will and an executor are important, but they do not automatically give another person access to every password-protected service. Good planning can reduce confusion, protect private information and help family members find valuable digital records when they need them.

Your digital life is part of your estate

Online accounts include much more than social media. They can include an email inbox, online banking, investment platforms, shopping accounts, loyalty programs, streaming services, cloud photo libraries, domain names, gaming profiles and workplace systems. A phone may also hold password managers, authentication apps, digital wallets and files that never exist anywhere else.

Some digital material has financial value. A website, online shop, advertising account, cryptocurrency wallet or monetised video channel may produce income or contain transferable assets. Other material has mainly sentimental value, such as family photographs, messages and travel records. A personal reading list might even include pages about hobbies, such as this scuba diving article, which may help relatives understand what mattered to the account holder.

The distinction between content and an account is important. A family may want copies of photographs without taking over the entire cloud account. An executor may need transaction statements from an investment service but have no reason to read years of private email. Providers often offer limited tools rather than unrestricted access to everything stored on their systems.

The executor does not receive automatic access

In Australia, an executor is responsible for administering the estate according to the will and relevant state or territory law. That role can include identifying assets, paying debts, dealing with tax and distributing property. It does not necessarily override the contract between the deceased person and an online platform.

A provider may ask for a death certificate, proof of identity, a copy of the will or evidence that the applicant is the legal personal representative. Requirements differ widely. Google, Apple, Meta, Microsoft, banks and cryptocurrency exchanges each have their own procedures, and those procedures can change. A platform may close an account, provide selected information, transfer certain files or refuse access to private messages.

Privacy law also creates complications. Australia’s Privacy Act generally protects personal information about living individuals, rather than creating a simple inheritance right over a deceased person’s data. Contract terms, copyright, confidentiality and financial regulation may still restrict what can be released. If a business account is involved, the company’s ownership and records may need to be considered separately from the owner’s personal estate.

Social media profiles may be closed or memorialised

Social networks usually provide a few choices after a death. A profile might be removed, preserved as a memorial, or managed in a limited way by a nominated legacy contact. A memorial profile may show a remembrance label and allow existing friends to share memories, while preventing ordinary logins and changes to the account.

The practical outcome varies between services. Some platforms require a request form and supporting documents. Others allow the account holder to choose a legacy contact in advance. A legacy contact may be able to pin a tribute or manage selected profile features, but generally cannot read private messages or log in as the deceased person.

Relatives should be cautious about posting from a deceased person’s account or changing old messages. Even when a platform technically permits some action, friends and family may regard it as intrusive. Saving photographs, notifying contacts and preserving a memorial page are usually different tasks from taking control of a person’s online identity.

Email and cloud storage need careful handling

An email inbox can be the key to finding bills, policies, receipts, travel bookings and other accounts. It may also contain confidential correspondence involving other people. Giving someone the password can appear to solve the problem, but it may breach the provider’s terms, compromise two-factor authentication or expose information that the deceased would have expected to remain private.

Cloud services create similar issues. Family members may want access to photographs stored in iCloud, Google Photos, OneDrive or Dropbox, but the provider may distinguish between downloading a file and taking over the account. A device passcode, recovery key or trusted contact can help, although none of these guarantees that the company will release data after death.

Before making a request, an executor should record what is being sought and why. A targeted request for family photographs is easier to explain than a demand for unlimited access to every account. It is also sensible to preserve original files, dates and folder structures where possible, because a hurried download can remove useful context from a digital archive.

Money, subscriptions and digital assets can linger

Online subscriptions may continue charging a debit card or credit card after death. Streaming memberships, software licences, cloud storage, app purchases, gym services and automatic deliveries should be identified and cancelled. Checking bank statements is often more effective than relying on memory, since a recurring payment may appear under a billing company’s name rather than the familiar brand.

Financial accounts require extra care. Australian bank accounts, share-trading services, PayPal-style payment platforms and buy-now-pay-later accounts will generally have formal estate processes. The executor may need to notify the institution, provide identification and wait for probate or letters of administration. Tax matters can continue after death, including final tax returns and income earned by the estate.

Cryptocurrency is especially difficult because control may depend on a private key, recovery phrase or hardware wallet. An exchange might have a claims process, but a self-custodied wallet may be impossible to recover without the correct information. The value can also change sharply, and revealing a recovery phrase in an ordinary will may expose it to anyone who later handles that document. Specialist legal and financial advice is sensible for significant holdings.

A digital estate plan can make the process calmer

A useful digital estate plan does not need to list every password in a document that travels through ordinary email. It can identify the main accounts, explain where secure access information is stored and name the person who should coordinate the process. A password manager with an emergency-access feature, a sealed record held securely, or instructions for accessing a safe deposit arrangement may be appropriate.

The record should cover email, cloud storage, financial services, social platforms, devices, subscriptions, websites, domain names and important files. It should also state preferences: which accounts should be deleted, which photographs should be preserved, whether social profiles should be memorialised and who may receive personal correspondence. These instructions help distinguish wishes from legal authority, which may still require action by an executor.

It is worth checking the plan every year, especially after changing phones, opening an Australian bank account, moving to a new password manager or subscribing to a new service. A person may also keep useful information across several websites, so a private list of important online places can include a broader online resource alongside more obvious services. The purpose is not to give someone permanent access during life; it is to prevent a digital trail from becoming a locked room later.

Family members should know where the instructions are kept, but they do not necessarily need to know every password in advance. Two-factor authentication recovery codes, device passcodes and instructions for contacting providers can be stored separately. A trusted person can then locate the information without being given unnecessary access to private accounts while the account holder is alive.

Australia’s geography and everyday habits can make preparation particularly useful. A family in Perth may be sorting out an estate while relatives are in Brisbane or regional New South Wales, and important records may be spread across different devices. Someone who spends time travelling between Melbourne, Cairns and overseas destinations may have bookings, insurance documents and photos stored in several cloud services. Clear instructions save relatives from guessing across time zones and providers.

The main point is that an online account is governed by more than a password. Provider policies, estate law, privacy expectations and the nature of the digital asset all affect what happens next. Make a clear inventory, record personal wishes, protect recovery information and ensure the executor knows where the instructions are kept. What readers should remember is simple: digital accounts need an estate plan just as carefully as physical property does.