You prepared a will.

You created a trust.

Your financial power of attorney is signed.

Your health care directive is complete.

Your beneficiaries are updated.

Your family knows where the estate-planning documents are located.

Perfect.

Now let me ask you a question that is becoming just as important:

Does anyone know the passcode to your phone?

And another:

If you died tomorrow, could someone figure out how to log into the accounts that run your life?

For many people, the answer is no.

That can create an enormous problem.

We now carry much of our financial and personal lives inside a six-digit passcode. Bank accounts, investment information, bills, utility accounts, email, photographs, business records, contacts, calendars, airline accounts, cryptocurrency information, two-factor authentication codes, and password managers may all be accessible through one small device.

When someone dies, the family may have legal authority to handle the estate but still find themselves technologically locked out.

And if that device is an iPhone, you should understand something very important:

Apple takes security very, very seriously.

Your executor cannot simply call Apple, explain that you died, send over a copy of the will, and ask Apple to unlock your iPhone.

Apple specifically states that devices protected by a passcode use passcode encryption and that Apple cannot remove the passcode lock without erasing the device.

In other words, your estate plan can name the perfect executor in the world.

That does not mean your executor can unlock your phone.

Your Phone May Be the Road Map to Your Entire Estate

Think about what is currently stored on your phone.

For many people, the phone provides access to:

• personal email;
• work email;
• online banking;
• brokerage accounts;
• retirement information;
• credit cards;
• mortgage accounts;
• utilities;
• insurance policies;
• tax documents;
• cloud storage;
• photographs and videos;
• contact lists;
• text messages;
• calendars;
• subscription services;
• airline and hotel accounts;
• digital wallets;
• cryptocurrency apps;
• social media;
• business records;
• electronic statements;
• electronic bills;
• password managers; and
• two-factor authentication codes.

Twenty years ago, an executor might go through someone’s desk, filing cabinet, and mail.

Today, the filing cabinet may be an iPhone.

And it may be locked.

“My Executor Can Just Reset My Password”

Sometimes.

But that answer greatly underestimates how interconnected modern security systems have become.

Imagine your daughter is serving as executor.

She needs access to your investment account.

The investment company sends the password-reset link to your email.

She cannot access the email.

She tries to reset the email password.

The email provider sends a verification code to your cell phone.

The phone is locked.

She contacts the phone provider.

The provider requires documentation and may have its own procedures.

Meanwhile, your authenticator app is also on the locked phone.

One inaccessible device can create a chain reaction.

The problem isn’t necessarily that the executor lacks legal authority.

The problem is that the executor lacks practical access.

The Most Important Password May Be Your Phone Passcode

People often spend considerable time creating lists of account passwords but overlook the password they use dozens of times every day:

their phone passcode.

For an iPhone user, that omission can be particularly consequential.

Face ID is wonderfully convenient while you are alive.

It isn’t an estate plan.

If someone cannot authenticate through Face ID, the phone will eventually require the device passcode.

And Apple isn’t going to simply hand that passcode over to your family.

Apple expressly says it cannot remove a deceased person’s passcode lock without erasing the device.

Read that again.

Without erasing the device.

That matters enormously if the information your family is trying to retrieve exists on the phone itself.

Apple Is Hard-Core About Security

I actually understand Apple’s position.

We want technology companies to protect our information.

We don’t want someone calling Apple Support and saying:

“Hi, I’m her son. Can you unlock her phone?”

and having Apple respond:

“Sure.”

Apple’s strong security protects living customers from theft, fraud, stalking, identity theft, and unauthorized access.

The problem is that the same security that works so well during life can become a major obstacle after death.

Apple explains that access to the Apple Account of someone who has died may require legal documentation, and requirements can vary depending upon the circumstances and jurisdiction.

And even if Apple assists with the Apple Account or Activation Lock, that is not the same thing as Apple unlocking the deceased person’s passcode-protected iPhone.

Apple says that to reuse a deceased person’s locked device, it may ultimately need to be erased and restored.

Apple isn’t being difficult for the sake of being difficult.

Apple is doing exactly what its security architecture is designed to do.

That is why you need to plan around it while you are alive.

Apple’s Legacy Contact Is Excellent—But It Is Not the Same as Giving Someone Your Passcode

Apple has created a very useful estate-planning feature called Legacy Contact.

A Legacy Contact is someone you designate to request access to certain information stored in your Apple Account after your death.

Apple describes Legacy Contact as the easiest and most secure way to give someone you trust access to certain Apple Account data after death.

Everyone with an Apple Account should at least consider setting this up.

But there is a very important limitation.

Legacy Contact does not mean your designated person receives every password stored in your Apple ecosystem.

Apple says Legacy Contact access may include things such as:

• photographs;
• messages;
• notes;
• files; and
• device backups.

But it does not include certain information stored in iCloud Keychain, including passwords, passkeys, and payment information.

That distinction is enormous.

If you assume:

“It’s okay. I named my daughter as my Apple Legacy Contact, so she’ll get all my passwords.”

you could be very wrong.

She may receive substantial Apple Account data.

She does not thereby inherit your entire iCloud Keychain.

Legacy Contact and Phone Passcode Solve Different Problems

Think of them as two different estate-planning tools.

Apple Legacy Contact can provide post-death access to certain Apple Account data.

Your device passcode can potentially provide practical access to the physical phone itself.

Those aren’t interchangeable.

A thoughtful digital estate plan may address both.

How Do You Create an Apple Legacy Contact?

Apple currently allows users to designate one or more Legacy Contacts.

On an iPhone or iPad, Apple instructs users to go to:

Settings → Your Name → Sign-In & Security → Legacy Contact

and select Add Legacy Contact.

Apple generates an access key.

That access key is extremely important.

After the account holder dies, Apple says the Legacy Contact generally needs both:

1. the Legacy Contact access key; and
2. the account holder’s death certificate.

Apple even recommends considering keeping a printed copy of the access key with your estate-planning documents.

That should tell estate-planning attorneys something.

Digital succession is no longer optional estate-planning trivia.

Apple itself is telling people to coordinate digital access information with their estate documents.

The Other Document Every Estate Plan Needs: A Digital Asset Inventory

I increasingly believe every adult should maintain some form of digital asset and account inventory.

It doesn’t necessarily have to contain every password on a printed piece of paper.

In fact, depending upon how you maintain it, that could create its own security risk.

But someone should be able to determine:

What accounts exist?

At minimum, your inventory might identify categories such as:

Financial Accounts

• banks;
• brokerage firms;
• retirement custodians;
• credit unions;
• cryptocurrency exchanges;
• payment services;
• credit cards;
• mortgages;
• personal loans; and
• business accounts.

Insurance

• life insurance;
• homeowners insurance;
• automobile insurance;
• umbrella policies;
• disability insurance;
• long-term-care coverage; and
• business insurance.

Household Accounts

• electricity;
• gas;
• water;
• internet;
• cellular service;
• alarm systems;
• streaming services;
• storage facilities; and
• homeowners associations.

Digital Accounts

• Apple Account;
• Google account;
• Microsoft account;
• Dropbox;
• cloud-storage accounts;
• password managers;
• social media;
• domain registrars;
• website hosting;
• online stores; and
• subscription services.

Business Accounts

Business owners should go even further.

Someone may need access to:

• payroll;
• QuickBooks or accounting software;
• merchant processors;
• business banking;
• CRM systems;
• case-management systems;
• cloud storage;
• websites;
• domain names;
• social media;
• advertising platforms;
• vendor accounts;
• employee systems; and
• business email.

Imagine owning a company and dying while you are the only person who knows how to access the company’s primary email or domain registrar.

That isn’t merely inconvenient.

It can jeopardize the business.

Don’t Put All Your Passwords in Your Will

There is an important distinction between estate-planning documents and digital-access instructions.

Your will is generally not the place to list your passwords.

Among other concerns, a will may eventually become part of a probate proceeding and potentially a public court record.

Passwords also change frequently.

You don’t want to execute a codicil every time Netflix makes you reset your password.

Instead, the estate plan can refer to a separate, secure digital inventory or access method.

That information can then be updated without rewriting the will.

Consider Using a Password Manager

For many people, the most practical solution is a reputable password manager.

Instead of requiring someone to locate 85 different passwords, you maintain them in one encrypted system and create an appropriate emergency-access plan.

But don’t stop at:

“I use a password manager.”

Ask the next question:

How does my trusted person access it after I die?

If the answer is:

“They can’t.”

you haven’t solved the estate-planning problem.

Some password-management services offer emergency-access, family-access, recovery, or estate-planning features.

Whatever system you use, make sure your designated person understands that it exists and knows the procedure for obtaining access.

Two-Factor Authentication Has Changed Estate Administration

Two-factor authentication makes accounts safer.

It can also make estate administration more complicated.

You may know the correct username and password and still be unable to log in because the service sends a code to:

• the deceased person’s cell phone;
• an authenticator app;
• another trusted Apple device;
• an email account; or
• a physical security key.

That means a good digital inventory should identify more than passwords.

It should identify how accounts authenticate.

For especially important accounts, consider noting things such as:

Bank account: Username/password + SMS verification to iPhone.

Email: Password + authenticator app.

Password manager: Master password + recovery method.

Apple Account: Two-factor authentication + Legacy Contact established.

That road map can save an executor hours—or weeks—of frustration.

Your Email Account May Be More Important Than Almost Any Other Account

If I had to identify one account that families routinely underestimate, it would be email.

Why?

Because email frequently serves as the recovery mechanism for everything else.

Your email can reveal:

• monthly statements;
• account notifications;
• insurance policies;
• receipts;
• subscription renewals;
• financial institutions;
• business contacts;
• travel plans;
• utility accounts; and
• password-reset links.

Someone administering an estate may discover accounts simply by searching the deceased person’s email.

Without email access, identifying the full financial picture can become substantially harder.

Your digital plan should specifically address it.

What About Text Messages?

Texts can also contain information that is difficult to reconstruct elsewhere.

They may reveal:

• appointments;
• business discussions;
• contact information;
• outstanding transactions;
• promises;
• debts;
• recent purchases;
• travel arrangements; and
• family communications.

That does not mean your executor should indiscriminately read every private conversation you ever had.

Privacy still matters.

But from an estate-administration standpoint, immediate access to recent communications can sometimes answer important questions.

Photographs Are Estate Assets Too

Not everything valuable has a dollar sign attached.

For many families, the most devastating digital loss would be:

the photographs.

Twenty years of family photographs may exist primarily in:

• iCloud Photos;
• Google Photos;
• a phone;
• external storage; or
• another cloud service.

Those memories may be worth far more to your children than an investment account statement.

Apple’s Legacy Contact feature can permit access to certain photographs and other qualifying account data, making it particularly valuable for preserving family memories.

Set it up before there is a problem.

Don’t Forget Cryptocurrency

Cryptocurrency presents an even more extreme version of this issue.

Traditional financial institutions have procedures for dealing with death.

A bank can generally identify an account holder and respond to appropriate legal documentation.

Cryptocurrency may be different.

If nobody knows that the assets exist—or nobody has the information required to access them—the value may effectively disappear.

Depending upon the type of digital asset, your plan may need to identify:

• exchanges;
• wallets;
• hardware devices;
• recovery procedures;
• seed phrases; and
• security keys.

But these credentials need extraordinary security.

You don’t want estate planning to make theft easier while you are alive.

Digital estate planning is fundamentally about balancing security today against access tomorrow.

Who Should Know Your Phone Passcode?

Not everyone.

Giving people unrestricted access to your phone while you are alive creates obvious privacy and security concerns.

But there should be a deliberate plan.

That might mean your:

• spouse;
• adult child;
• executor;
• trustee; or
• another exceptionally trusted person

knows how to obtain the passcode if something happens to you.

There is no universal solution.

Some people may be comfortable giving the passcode directly to a spouse.

Others may prefer keeping it inside a secure emergency envelope, password manager, safe, or other controlled system.

The important thing is that someone knows the system exists.

A passcode sealed in a safe doesn’t help if nobody knows the safe exists.

Your Executor Doesn’t Need to Know Everything Today

Digital estate planning does not require handing your adult children a spreadsheet titled:

MOM’S COMPLETE PASSWORD LIST

and emailing it to the entire family.

Please don’t do that.

The objective is controlled access.

You might maintain:

1. a list identifying your important accounts;
2. passwords inside a secure password manager;
3. emergency instructions explaining how to access that manager;
4. an Apple Legacy Contact;
5. your current phone passcode in an appropriately secure location; and
6. instructions telling the appropriate person where these materials are located.

That can provide accessibility after death without unnecessarily compromising security during life.

Update the List

A digital inventory created in 2019 is probably nearly useless today.

Accounts change constantly.

People:

• change banks;
• open brokerage accounts;
• cancel credit cards;
• create new emails;
• change phone numbers;
• buy cryptocurrency;
• subscribe to new services;
• change passwords;
• create businesses; and
• adopt new technology.

Review your digital inventory at least periodically.

A particularly easy time to do it is when you conduct your regular estate-plan review.

Also Plan for Incapacity

Everything we have discussed applies to death.

But there is another possibility:

You are alive but cannot communicate.

Suppose you are hospitalized after an accident.

Your spouse needs to pay bills.

Your business needs to make payroll.

Your family needs insurance information.

Your phone contains everything.

Nobody knows the passcode.

That’s a problem even though there is no estate yet.

Digital-access planning should therefore coordinate with both:

estate planning

and

incapacity planning.

Your financial agent may have legal authority under a power of attorney, but legal authority does not magically reveal passwords.

An Executor With Authority Is Not the Same as an Executor With Access

This distinction deserves emphasis.

Your executor may have a court certificate establishing authority over your estate.

Your trustee may have complete authority over your trust.

Your agent may have a valid power of attorney.

But none of those documents automatically tells them:

your iPhone passcode.

Technology companies have their own security rules.

Apple’s published procedures illustrate the point perfectly.

Apple may assist an appropriate person with aspects of a deceased user’s Apple Account after its requirements are satisfied. But Apple says it cannot simply remove the device’s passcode encryption while preserving the data.

Sometimes legal authority and technical capability are two entirely different things.

Your estate plan should address both.

A Simple Digital Estate-Planning Checklist

Along with your traditional estate plan, consider making sure you have addressed:

• Current phone passcode
• Apple Account or Google account
• Apple Legacy Contact
• Apple Legacy Contact access key
• Primary email account
• Password manager
• Bank accounts
• Brokerage accounts
• Retirement accounts
• Credit cards
• Mortgage and loan accounts
• Insurance accounts
• Cryptocurrency
• Cloud storage
• Social media
• Utility accounts
• Subscription services
• Business systems
• Domain names and websites
• Two-factor authentication methods
• Physical security keys
• Digital photographs and videos
• Instructions telling your trusted person how to obtain this information

The Apple Step You Can Do Today

If you use an iPhone, one of the simplest things you can do today is check whether you have designated a Legacy Contact.

Apple currently directs users to:

Settings → [Your Name] → Sign-In & Security → Legacy Contact.

If you designate someone, make sure the access key is actually preserved.

Apple specifically notes that the access key is extremely important and suggests that a copy can be stored with estate-planning documents.

And then address the separate question:

If my family needs this physical phone, does someone have a secure way to obtain the passcode?

Those are two different steps.

Do both.

“Can’t My Family Just Call Apple?”

Do not build your digital estate plan around this sentence:

“Apple will figure it out.”

Apple may have procedures to assist families after a death.

But Apple’s job is also to protect the security and privacy of its users.

That means the company is intentionally hard-core about authentication.

Apple will not simply disclose your passwords.

Legacy Contact access does not include passwords and passkeys stored in iCloud Keychain.

And Apple says it cannot remove the passcode lock on a protected iPhone without erasing the device.

Your family should not discover those rules for the first time while grieving.

The Modern “Drawer in the Kitchen”

Older generations often had a particular drawer.

Everyone knew the drawer.

Inside it were:

• insurance policies;
• bank statements;
• Social Security information;
• deeds;
• tax returns;
• account numbers; and
• important telephone numbers.

If Dad died, somebody opened the drawer.

Our generation largely eliminated the drawer.

We replaced it with:

a locked smartphone.

That’s incredibly convenient while we are alive.

It can be a nightmare after death.

So every modern estate plan needs a digital version of that kitchen drawer.

Not an insecure pile of passwords.

A deliberate, secure system that lets the right person find what they need when they need it.

The Bottom Line

Estate planning isn’t just about deciding who gets your house and investment accounts.

Increasingly, it is about making sure your family can find the house account, locate the investment accounts, access your records, preserve your photographs, communicate with the right people, and operate the technology through which your entire financial life is managed.

Your executor can have the best will ever drafted.

Your trustee can have a perfectly funded trust.

Your agent can have a beautifully drafted power of attorney.

But if everyone is standing around your locked iPhone saying:

“Does anyone know the passcode?”

you missed an important part of the plan.

Create a secure digital inventory.

Make sure someone knows where it is.

Address your password manager.

Address two-factor authentication.

Set up your Apple Legacy Contact.

Save the Legacy Contact access key.

And decide how a person you deeply trust can obtain your phone passcode if you die or become incapacitated.

Because when Apple says your encrypted iPhone is locked, Apple means locked.

The best time to solve that problem is not after your family is holding your phone.

It is while you are still here to unlock it.

This article is for general educational purposes only and does not constitute legal advice, cybersecurity advice, or a recommendation to disclose passwords indiscriminately. Digital-access laws, service-provider terms, fiduciary authority, and security technology vary and change over time. Sensitive credentials should be stored using appropriate security practices, and individuals should coordinate digital-asset planning with their estate-planning attorney and other appropriate professionals.