Apple treats your iCloud account as a locked vault, and the lock is the point: when you die, no one can sign in, and Apple will not hand your photos and messages to your family just because they ask. The one built-in exception is a Legacy Contact, a person you name in advance. With two things, the access key you gave them and your death certificate, they can request your data and receive it. Without those two, the route runs through legal documentation, generally a death certificate and sometimes a court order. And even granted access is temporary: three years after Apple approves the first legacy contact request, the account is permanently deleted. This guide walks through the system as Apple documents it in 2026: how to name a Legacy Contact, why the access key matters more than anything else in the setup, what your family can and cannot receive, and what happens when nobody planned ahead.
Apple is one account of many. For the full picture, covering Google, Facebook, and the legal rules that decide who can access what, start with what happens to your online accounts when you die.
iCloud is a locked vault by design
Most companies can open an account for someone who shows up with the right paperwork. Apple has deliberately built a system in which some locks stay locked, even for Apple. Two sentences from its own support pages, both current as of Apple’s 2026 documentation, define the stance. On a lost access key: “Apple can’t access or replace an access key that’s been lost or misplaced.” On a locked iPhone: “Apple can’t help remove the passcode lock without erasing the device.”
Notice the wording. Not “Apple won’t.” Apple can’t. Apple presents these as hard limits rather than policies open to appeal, and no amount of grief or paperwork moves them.
So there is no phone call in which a spouse explains the situation and receives the photos. What Apple built instead is a formal system called Digital Legacy, with a fast lane and a slow lane. The fast lane exists only if you set it up while you are alive.
Legacy Contact: how to add one
A Legacy Contact is, in Apple’s definition, “someone you choose to have access to certain data in your Apple Account after your death.” Naming one is free and takes a few minutes.
The requirements: a device running iOS 15.2, iPadOS 15.2, or macOS Monterey 12.1 or later, signed in to your Apple Account, with two-factor authentication turned on. Two-factor is a hard requirement, so if you have been putting it off, this is where it stops being optional.
The path sits in your account settings:
- Open Settings and select your name.
- Select Sign-In & Security, then Legacy Contact.
- Select Add Legacy Contact and follow the prompts. Apple confirms the addition by email.
Three details are worth weighing before you choose. You can name more than one legacy contact, but any one of them can act entirely alone after your death, up to and including permanently deleting your account data; multiple contacts are a convenience, not a system of checks. Your legacy contact does not need an iPhone, any other Apple device, or even an Apple Account. And they must be over 13 to file a request, an age that varies by region.
The access key: the one piece of paper that matters
When you add a legacy contact, Apple generates an access key for them, and that key is the hinge of the entire system. To request your data after your death, your legacy contact must present both the access key and your death certificate. Either one alone gets nothing.
There are two ways to hand the key over. Share it through iMessage and, if the person accepts, a copy is stored automatically in their own Apple Account, where it waits without either of you thinking about it again. Or keep the key as a printed copy, a PDF, or a screenshot, and pass it on directly. Apple’s own suggestion is to save a copy “with your estate planning documents.”
Take that suggestion seriously, because of the sentence quoted earlier: “Apple can’t access or replace an access key that’s been lost or misplaced.” There is no recovery route on Apple’s side, and no second chance. A legacy contact who cannot produce the key on the day it is needed is, in practice, no legacy contact at all.
This is exactly the kind of small, decisive item that belongs in one findable place, next to the will and the insurance papers rather than in a drawer nobody thinks to open.
What a legacy contact gets, and what stays sealed
An approved legacy contact receives most of what your account holds. Apple’s summary of the included data: “photos, messages, notes, files, device backups, and more,” and it publishes the item-by-item list of what Digital Legacy covers. Device backups are the quiet heavyweight on that list.
Two categories stay sealed no matter what:
- Purchases. Excluded are “movies, music, books, or subscriptions you purchased.” The library you built over the years is not part of what your legacy contact receives.
- iCloud Keychain. Also excluded is “data stored in your iCloud Keychain,” which Apple spells out as payment information, passwords, and passkeys. Your legacy contact gets your photos; they never get your passwords.
That second exclusion deserves a beat. If your unspoken plan for the practical things was “they will get into my accounts through my Apple ID,” the design says no twice over: the keychain is excluded, and as the next section shows, nobody ever signs in to your account at all.
Requesting access when the time comes
Your legacy contact files the request from their own Apple device or through Apple’s Digital Legacy website, which requires no Apple hardware at all. They submit the access key and the death certificate (in Japan, the family certificate), and Apple reviews the request.
Approval changes three things at once:
- A separate account is created. The legacy contact receives a special Legacy Contact Apple Account with its own new password and two-factor authentication. They sign in there, not to your account, to reach your data.
- Your original account stops working. Once the request is approved, your own Apple Account no longer functions. No one, the legacy contact included, ever signs in as you.
- Activation Lock comes off your devices. Your iPhones and iPads are released from your account, though they still have to be erased and restored before anyone can use them.
The three-year countdown
Legacy contact access has an end date. Apple’s rule: access lasts three years “from when Apple approves the first Legacy Contact account request,” and after that, “the account is permanently deleted.”
The word “first” is doing real work there. If you named several legacy contacts, the clock does not restart for each of them. It starts once, at the first approval, and everyone shares it. A second contact who requests access two years in has one year left, not three.
So the practical reading of the rule: legacy access is a rescue window, not an archive. Download the photos, export the files, and move what matters to storage the family controls, early, while the window is wide. When it closes, the deletion is total.
No legacy contact: the court-order path
Without a legacy contact, or with a key nobody can find, the family meets the slow lane. Apple’s documentation says it plainly: “Apple requires and verifies legal documentation… This generally includes a death certificate, and might also require a court order.”
For US families, Apple specifies exactly what that court order must state:
- The name of the person who died and their Apple Account.
- The name of the requester.
- That the person who died was the user of the accounts in question.
- That the requester is the deceased’s “legal personal representative, agent, or heir, whose authorization constitutes ‘lawful consent.’”
- That the court orders Apple to assist.
That list is written for US courts; in other countries, the required legal documentation follows local forms. Either way, the family is now in a legal process to reach the same data a legacy contact could have requested with a key and a certificate. Apple itself makes the comparison, in its own understated way: naming a Legacy Contact “can simplify the process of acquiring a legal order and reduce delay and frustration for family members.” When the company that built the wall recommends the door, use the door.
There is one other option on this path, for families who want closure rather than content: a family member can request permanent deletion of the account through the same Digital Legacy website. That request needs the requester’s own Apple Account and legal documentation, and it ends the account rather than opening it.
Locked devices: a separate wall
Everything above concerns the account, the data in iCloud. The iPhone itself is a separate question with a harder answer. If a device is locked with a passcode nobody knows, “Apple can’t help remove the passcode lock without erasing the device.” No document changes that, court order included.
The legacy contact path softens the loss without breaking the wall: approval removes Activation Lock, and the iCloud data, device backups included, arrives through the Legacy Contact account. The phone in hand still gets erased. Anything that lived only on the device and never reached iCloud has no retrieval path in Apple’s documentation.
Frequently asked questions
Can my family unlock my iPhone after I die?
No. Apple states that it “can’t help remove the passcode lock without erasing the device,” and there is no exception for family. What an approved legacy contact receives is the iCloud data, device backups included, through a separate Legacy Contact account, plus removal of Activation Lock so the erased device can be set up again. The passcode itself is never bypassed.
What is an Apple Legacy Contact access key?
The access key is generated when you add someone as your legacy contact, and it is their proof of the role. To request your data after your death, they must present both the key and your death certificate. It can be shared by iMessage, which stores a copy in their Apple Account if they accept, or kept as a printed copy, PDF, or screenshot. Apple suggests storing it with your estate planning documents, because a lost key is gone for good: Apple can’t access or replace it.
What happens to purchased movies and music?
They stay sealed. As of Apple’s 2026 documentation, “movies, music, books, or subscriptions you purchased” are excluded from what a legacy contact can access. Photos, messages, notes, files, and device backups pass to your legacy contact; the purchased library does not.
How long does a legacy contact have?
Three years, counted from the moment Apple approves the first legacy contact request. After that, the account is permanently deleted. The clock is shared by all legacy contacts and does not restart per person, so the sensible move is to download everything that matters soon after access begins.
Do legacy contacts get my passwords?
No. Data stored in iCloud Keychain, which is where payment information, passwords, and passkeys live, is excluded from legacy contact access. If your family will need particular passwords or instructions, those have to be recorded somewhere they can actually reach, outside your Apple Account.
Apple’s answer to death is the strictest of the big platforms, and the most dependent on preparation. Google answers the same question with a completely different mechanism; that guide is what happens to your Google account when you die.
The lesson in Apple’s design reaches past Apple: the whole outcome turns on two small acts done in advance, a person named in settings and a key kept where it can be found. Every platform in your life has its own version of those two acts, and your family will face them all. A Myend Vault gathers the pieces in one place, and Myend’s Legacy Contact role names the person who gets access to your whole record when the time comes. It is not Apple’s Legacy Contact, and neither role is the legal executor of your estate; it is the practical layer that hands the right people the right keys. Free to start, as part of an end-of-life plan that keeps decisions like these where your family will actually find them.
