Digital inheritance laws in the United States are anchored by the Revised Uniform Fiduciary Access to Digital Assets Act, or RUFADAA, adopted by nearly every state, and layered on top of the federal Stored Communications Act, the Computer Fraud and Abuse Act, and the IRS rules that treat digital assets as property. Together these rules decide who can reach your accounts after you die, what they can see, and what taxes apply. The outcome depends less on your executor’s efforts than on what you set up while you were alive.
What Counts as a Digital Asset
The law reaches a wide range of things you probably don’t think of as an “asset.”
- Personal files stored in the cloud: photos, videos, and email archives in services like Google Drive or iCloud. Sentimental value more than dollar value, but often what families care about most.
- Social media profiles on Facebook, Instagram, LinkedIn, and similar platforms. Some allow memorialization; others delete accounts after inactivity.
- Intellectual property such as domain names, blogs with traffic, self-published books, and music files that may still generate royalties.
- Financial balances and rewards: airline miles, credit card points, storefront revenue, and payment platform balances. Real money, and it can evaporate if nobody claims it.
- Cryptocurrency and tokens secured by private keys. Lose the key and the asset is gone permanently. No company or court can reverse that.
Each category behaves differently under the law, which is why a single planning approach rarely covers everything.
How RUFADAA Decides Who Gets Access
RUFADAA creates a three-tier priority system that tells platforms whose instructions to follow.
- Tier one: the platform’s own tool. If you use a built-in designation feature like Google’s Inactive Account Manager or Apple’s Legacy Contact, those instructions override everything else, including your will, your power of attorney, and the platform’s terms of service.
- Tier two: your estate planning documents. If you haven’t used an online tool, instructions in your will, trust, or power of attorney govern. This works, but only if those documents specifically address digital assets.
- Tier three: the terms of service. With no instructions at either higher level, the platform’s default terms control. Most prohibit third-party access and permit the company to delete the account.
The most common trap: the person you designate through a platform’s tool doesn’t have to match the executor named in your will. If they don’t match, the tool wins for that account. Your executor gets locked out, and the designee gets in. Keeping platform designations aligned with your estate plan matters more than most people realize.
The Privacy Wall Around Emails and Messages
Even with clear legal authority, an executor doesn’t automatically get to read the deceased’s emails and private messages. Federal law separates digital files from electronic communications, and communications get an extra layer of protection.
Under RUFADAA, a fiduciary can access digital property like photos, documents, domain names, and cryptocurrency without special authorization. But email, text messages, and social media direct messages are different. An executor can see catalog information such as sender, recipient, date, and subject line, but cannot access the content unless the deceased specifically authorized it in a will, trust, or other legal document.
That restriction comes from the federal Stored Communications Act, which bars service providers from disclosing the contents of stored communications except with “the lawful consent of the originator or an addressee or intended recipient of such communication.”1Office of the Law Revision Counsel. United States Code Title 18 – 2702 Whether a court-appointed executor can give that consent on behalf of a deceased person is legally unsettled in many jurisdictions. The reliable fix is explicit language in your will or trust authorizing your executor to access the content of your electronic communications. Without it, expect a wall.
Federal Tax Rules That Follow the Assets
The IRS treats cryptocurrency and other digital assets as property.2Internal Revenue Service. Notice 2014-21 That single classification pulls digital assets into the same estate and income tax framework that applies to stocks and real estate.
Estate Tax
All digital assets with monetary value must be included in the gross estate at fair market value on the date of death.3Office of the Law Revision Counsel. United States Code Title 26 – 2031 For 2026, the federal estate tax basic exclusion amount is $15,000,000 per individual under the One, Big, Beautiful Bill Act signed in July 2025.4Internal Revenue Service. Whats New — Estate and Gift Tax Married couples can effectively shelter up to $30,000,000 combined. Amounts above the exclusion are taxed at a top rate of 40%.5Office of the Law Revision Counsel. United States Code Title 26 – 2001
Valuing volatile assets like cryptocurrency at a specific moment takes care. Use fair market value on the date of death, document how you arrived at it, and keep records of the exchange rates or marketplace data you relied on. Undervaluing digital assets on an estate tax return carries an accuracy-related penalty of 20% of the underpayment.6Office of the Law Revision Counsel. United States Code Title 26 – 6662
Step-Up in Basis
Inherited digital assets receive a step-up in basis to their fair market value at the date of death.7Office of the Law Revision Counsel. United States Code Title 26 – 1014 This is a real tax benefit. If someone bought Bitcoin at $500 and it was worth $60,000 on the day they died, the beneficiary’s new cost basis is $60,000. Selling later for $62,000 means capital gains tax on the $2,000 gain, not the $59,500 that accrued during the original owner’s lifetime. The step-up applies to cryptocurrency, NFTs, and other digital property held personally. It does not apply to assets held inside retirement accounts such as IRAs or 401(k)s.
Legal Risk of Just Logging In
This is where families get into trouble. When a spouse or child knows the deceased’s password, logging in feels harmless. It isn’t necessarily.
The Computer Fraud and Abuse Act makes it a federal crime to intentionally access a computer “without authorization or in excess of authorization.”8Office of the Law Revision Counsel. United States Code Title 18 – 1030 Most platform terms of service explicitly prohibit anyone other than the account holder from logging in. When the account holder is dead, using their password arguably violates both the terms and the statute. A first offense under the general unauthorized access provision carries up to one year in prison; aggravated violations involving financial gain or damage can mean up to five years.
Federal prosecutors are unlikely to pursue a widow who logged into her husband’s email. The risk isn’t only criminal, though. The Stored Communications Act creates civil liability as well, and a disgruntled family member or business partner can use unauthorized access as leverage in an estate dispute. Platforms have also been known to permanently lock accounts when they detect login activity after a death notification is filed. The official process is slower but protects the executor legally and preserves the data for probate.
What to Set Up Now
The planning steps that actually change the outcome are practical and mostly free.
Build a Digital Asset Inventory
List every account, the email address tied to it, and where to find login credentials or recovery keys. A printed sheet in a safe deposit box or with your estate documents is enough. Update it when accounts change.
Use Each Platform’s Own Tool
Google’s Inactive Account Manager lets you designate trusted contacts who receive a download link for specific categories of your data after your account sits unused for a period you choose.9Google Account Help. About Inactive Account Manager You choose the wait time, pick which data to share, and can instruct Google to delete the account afterward. Setup takes about ten minutes and puts your instructions at the top of RUFADAA’s priority order.
Apple’s Legacy Contact feature works similarly. You add one or more contacts through your Apple Account settings, and each receives an access key.10Apple Support. How to Add a Legacy Contact for Your Apple Account That access key, together with your death certificate, is what your contact needs to request your data. Without both, Apple releases nothing. Store the access key somewhere your contact can actually find it, such as with your estate documents or a physical safe.
Facebook allows you to designate a legacy contact who can manage a memorialized profile, or you can instruct Facebook to delete the account entirely. The legacy contact can pin a post, update your profile photo, and respond to friend requests, but cannot log in as you or read your messages.
Set Up Password Manager Emergency Access
A password manager with an emergency access feature handles credential sharing more cleanly than a printed list. Bitwarden, for example, lets premium users designate a trusted emergency contact who can request access to their vault. The account holder sets a wait period, with a one-day minimum, and if the request isn’t rejected during that window, the contact gains access.11Bitwarden. Log in with Emergency Access A “view” option gives read-only access; a “takeover” option lets the contact reset the master password and take full control. Your executor needs to know which password manager you use and should have the emergency invitation waiting.
Get the Legal Language Right
Your will or trust should include a provision specifically authorizing your executor or trustee to access, manage, and distribute digital assets, and it should explicitly grant permission to access the content of electronic communications. Without that language, the Stored Communications Act blocks access to emails and messages even when your executor otherwise has authority. Naming a “digital executor” who is comfortable with technology can help if your primary executor isn’t, though not every state recognizes a separate digital executor role.
What Happens If You Skip All of This
The default is harsh and predictable. Platform terms of service become the controlling document, and most either prohibit post-death access or give the company discretion to delete the account. Email archives, photos, and messages can be permanently destroyed. Cryptocurrency becomes unreachable when nobody has the private keys, and no authority exists to recover them.12Ledger. How Many Bitcoin Are Lost? Monetized accounts stop generating usable revenue because no one can manage or cash out the earnings.
Families who discover these problems after a death often have limited options. Petitioning a court for access under RUFADAA is possible, but it takes time and money, and courts can only compel platforms to do what the law allows. Without prior authorization from the deceased, that usually means metadata access only for communications. The gap between what families expect to inherit and what the law lets them reach is wide enough to lose entire digital lives in.