The short answer: Don’t write your passwords into a will or hand them over on a note. The safe way to share passwords after death is through the legacy-contact or trusted-contact settings built into Google, Apple, and password managers like Bitwarden, which pass on access without exposing the password itself or breaking a platform’s terms of service.
A legacy contact, Apple’s term, or a trusted contact, Google’s term, is a person you name ahead of time inside an account’s own settings. That person can request access, or a data download, only after the account holder’s death or a set period of inactivity. Unlike a password on a sticky note, this access can be built to expire, require proof, or notify someone before anything unlocks. For a wider view of what counts as digital property beyond passwords, see What Is a Digital Legacy, and How Do You Plan for One?
Why shouldn’t you put passwords in your will?
A will becomes part of the court file once filed for probate, and many county courts post those filings for public online search. Orange County, California’s Superior Court runs a public case-access system that covers all case types, including probate filings. Anything written into that document, including a password, can become a searchable public record. Use the will to name people and point to where access lives, not to list logins. 7 Documents You Need to Fill Out Before You Die covers what belongs in the paperwork instead.
Why isn’t texting or emailing the list safer?
A password sent by text or email sits in that inbox indefinitely, readable by anyone who gets into the account later, and it still doesn’t solve the platform’s side of the problem. Netflix’s Terms of Use restrict an account to one household unless you pay for an Extra Member add-on, and the account holder stays responsible for all activity on it, regardless of whether that sharing of access was permitted under those Terms of Use. The same problem applies from the other side: logging into a family member’s email with a password they left behind. Under RUFADAA, the model law most states use for digital access after death, a fiduciary can manage digital property like files and domains but is blocked from private message content, email, texts, social DMs, unless the account holder consented in a will, trust, power of attorney, similar record, or through a platform’s own online tool such as Google’s Inactive Account Manager. A password left on a note isn’t that consent.
What should you set up instead?
Google’s version is Inactive Account Manager. You choose a timeout of 3, 6, 12, or 18 months of inactivity, then name up to 10 trusted contacts, who get notified and can be given a data download link without ever being handed your password. Google also has a separate rule: an account left untouched for 2 years or more can be deleted, a policy Google began enforcing in 2023, unless it holds an active subscription, purchased content, or a monitored Family Link child account. Set the trusted contact before that clock runs out.
Apple’s version is Legacy Contact. The person you name needs two things before Apple issues new sign-in credentials: your Access Key and a death certificate, submitted through Apple’s dedicated claim website. Apple builds this on split-key cryptography: an encrypted data packet stays with Apple, the decryption key stays with your legacy contact, and neither side can open anything until both the Access Key and a verified death certificate are supplied. Even then, Legacy Contact excludes iCloud Keychain data, along with purchased movies, music, books, and subscriptions.
Check what your password manager promises before you rely on it. Bitwarden’s Emergency Access lets you name a trusted contact and set a waiting period; if you don’t approve or deny their request before that time runs out, access is granted automatically, either read-only or a full takeover that resets the master password. 1Password has no official process for death or incapacity, though Family plans include an Account Recovery feature that lets the organizer help a member regain access without a pre-shared vault, if that member has recovery enabled. Its zero-knowledge design means the company cannot recover a lost master password or Secret Key outside of that feature, so on a Family plan without recovery enabled, the organizer can only get in if that member had already shared a vault holding their email login. Keep a record of who’s named where, somewhere your executor can find it, like Vault: End of Life Planning, instead of scattered across notes.
Does anyone need legal permission to use these tools?
Usually the platform’s own tool settles it. Under RUFADAA as enacted in Virginia, a platform’s tool for naming a trusted contact, like Google’s Inactive Account Manager, legally overrides conflicting instructions in a will, trust, or power of attorney, as long as that tool lets the user change or delete the designation at any time. That rule is specific to Virginia; check your own state’s version of RUFADAA before assuming it applies the same way. It’s also why setting up that tool is worth doing: it’s the version of someone’s wishes most likely to be honored. How Can You Help Your Executor Before You Die? covers what else to put in place now.
Frequently asked questions
Is it legal to give someone your Netflix password before you die?
Sharing your password can violate Netflix’s Terms of Use even between family members living apart, since accounts are limited to one household without a paid Extra Member add-on and the account holder remains responsible for all activity regardless of who is using the login.
What happens to a Google account if no one logs in after someone dies?
If Inactive Account Manager is set up, trusted contacts are notified after the chosen inactivity window of 3 to 18 months. If it isn’t set up, Google’s separate policy allows deletion after 2 years of inactivity, a rule enforced since December 2023, unless the account has an active subscription, purchases, or a Family Link child profile.
Does Apple’s Legacy Contact hand over saved passwords?
No. Even with an approved Legacy Contact, Apple excludes iCloud Keychain data, meaning saved passwords, passkeys, and payment information stay out of reach, along with purchased movies, music, books, and subscriptions, none of which are handed over even after death.
What if my password manager has no death or emergency process?
1Password is an example: there is no official process, and its zero-knowledge encryption means even the company cannot recover a lost master password. The only workaround is sharing a vault with a Family plan organizer while you’re alive. Bitwarden, by contrast, has a built-in Emergency Access feature for this.
This is general information, not legal, medical, or financial advice. Consult a licensed professional in your jurisdiction for guidance specific to your situation.
Last reviewed: August 2026
