TL;DR: In the first 72 hours an executor must lock down high‑risk accounts, keep essential services like banking and cloud storage active, and pause recurring payments. Oregon’s RUFADAA §4 lets you request digital access, but Google will still demand a court order (Ajemian v. Yahoo! Mass. 2017). Do the lock‑keep‑pause checklist tonight.
Why the first three days matter more than any later probate step
Within 72 hours you either secure the estate’s digital lifelines or watch them bleed away. Oregon law (RUFADAA §4) gives you a statutory right to request account access, but providers such as Google and Apple interpret that right narrowly. The practical result: without a pre‑planned digital vault, you’ll spend weeks—sometimes months—chasing passwords, paying late fees, and fielding angry family members.
The executor’s initial triage determines whether digital assets become a liability or a recoverable resource; RUFADAA §4 grants access rights, yet providers often require a court order, turning the process into a race against time.
Case study: Maya’s nightmare in Portland
Meet Maya Patel, 38, a software engineer in Portland. Her mother, 66‑year‑old Anita, died suddenly of a stroke on March 3. Maya was named personal representative (executor) in the will. Within hours she faced a kitchen table littered with 14 unpaid statements, a $12,500 checking account frozen by the bank, and a Gmail account that held the login for Anita’s joint brokerage, her Venmo, and the family’s Ring doorbell.
What Maya had:
Death certificate (received March 4)
Letters‑testamentary (court‑issued on March 6)
A printed copy of the will
Three denied requests from Google, each citing the Inactive Account Manager policy
What she didn’t have:
Any stored master password for Gmail
A digital vault with Shamir‑split keys
Trusted contacts listed in the vault
Result: Maya spent eight weeks negotiating with Google, paid $1,200 in attorney fees, and missed the deadline to transfer the brokerage account, losing $3,400 in market gains. The Ring doorbell remained active, sending nightly alerts to the neighbor’s phone and costing $12 / month.
Why it happened: Maya assumed the will covered everything. The myth that “the will handles digital stuff” is pervasive on TikTok and in r/personalfinance threads, but it’s flat‑out wrong. A will can name an executor, but it cannot compel a tech company to hand over a password without a court order.
This does NOT mean you should ignore the will. It still determines who the legal fiduciary is. It just means you need a parallel digital plan.
Step 1: Lock down the high‑risk accounts immediately
High‑risk accounts are those that can cause immediate financial loss or privacy breaches if left open. In Maya’s case the Gmail was the master key. The rule of thumb: lock anything that holds credentials for other services.
Change passwords on email and primary cloud accounts. Use a password manager to generate a random 16‑character string. Record it in your digital vault and share the split key with two trusted contacts.
Enable two‑factor authentication (2FA) on those accounts. If the deceased used SMS 2FA, replace the phone number with your own or a dedicated “executor” line.
Contact the provider with RUFADAA §4 paperwork. Submit the death certificate and letters‑testamentary. Google’s Inactive Account Manager (launched 2013, updated 2020) will still require a court order, but the request starts the clock.
Legal note: Under Oregon’s Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) §4, a fiduciary can demand access, but the provider may refuse if the user’s terms of service expressly prohibit it. Courts have upheld that refusal in Ajemian v. Yahoo! (Mass. 2017), where the court ruled that a provider’s contractual terms trumped the fiduciary’s request.
RUFADAA §4 gives fiduciaries the statutory right to request digital access, yet providers can still refuse if their terms of service prohibit disclosure, as affirmed in Ajemian v. Yahoo! (Mass. 2017).
Step 2: Keep the essential services alive
Not everything should be locked. Some accounts are the lifeline for the estate’s administration.
Banking and brokerage accounts. Notify the bank immediately of the death, provide the death certificate, and request a temporary freeze while you arrange probate. Keep the account active; a frozen account can trigger overdraft fees.
Cloud storage (Dropbox, Google Drive). These hold tax returns, insurance policies, and medical records. Do NOT delete or deactivate them until you’ve downloaded everything. See our post on cloud storage inheritance for a step‑by‑step download guide.
Health portals. Access to patient portals is needed for final medical bills and insurance claims. Most providers honor a signed release from the executor.
In practice, banks will usually cooperate after you present a death certificate and a copy of the letters‑testamentary. However, they may still require a probate court order for large sums, so keep the account open but limit withdrawals to necessary expenses.
Essential services—bank accounts, cloud storage, health portals—must remain active to allow the executor to pay bills, collect insurance, and retrieve critical documents; they are protected under standard fiduciary‑access statutes.
Step 3: Pause recurring payments and subscriptions
Every subscription that charges the deceased’s credit card becomes a liability. Maya’s Netflix kept pulling $15 / month for six months after her mother’s death, adding $90 to the estate’s debts.
Do this:
Gather all statements (credit‑card, bank, PayPal) and make a list of recurring charges.
Log into each service (or use the password you just locked) and cancel or change the payment method to the estate’s new account.
For services that won’t let you change the payment method (e.g., some subscription boxes), request a termination letter for proof of cancellation.
Bad advice alert: “Just tell your spouse your passwords and they’ll handle it.” That ignores two facts: 1) spouses may not have legal authority if the will names someone else, and 2) many services lock out anyone who isn’t the primary account holder, even with the password.
This does NOT mean you should abandon all subscriptions. Keep those that store estate documents (e.g., Evernote, OneDrive) active until the data is transferred.
Pausing recurring charges prevents unnecessary debt accumulation; estate administrators should audit statements, cancel non‑essential services, and retain those needed for document retrieval.
Weekend action plan: The lock‑keep‑pause checklist
Take the next Saturday and run through this three‑column table. You’ll need a pen, the death certificate, and the court‑issued letters‑testamentary.
LockKeep LivePause
Primary email (Gmail, Outlook)Bank checking accountNetflix
Social media legacy contactsCloud storage (Google Drive, Dropbox)Spotify family plan
Any account that stores passwords (1Password, LastPass)Health portal (MyChart)Amazon Prime
After you finish, store the new passwords in your In Case Shit Happens vault. Use Shamir secret sharing to split the master key among three trusted contacts—your sibling, your attorney, and your CPA. That way no single person can open the vault alone, but any two can reconstruct it in an emergency.
Finally, set up a magic check‑in (dead‑man's switch) for the vault. If you don’t log in for 30 days, the vault automatically releases the split keys to the designated contacts. This safeguards the estate if you become incapacitated.
A weekend‑long lock‑keep‑pause audit, combined with Shamir‑split vault keys and a magic check‑in, transforms a chaotic probate into a manageable digital transition.
What you should check tonight
The ONE thing you can do right now: locate the master password for the deceased’s primary email account. If you can’t find it, write down where you think it might be (a notebook, a password manager export, a sticky note on the fridge) and add that location to your digital vault. That single piece of information unlocks everything else.
Frequently Asked Questions
Can I access my mother's Gmail after she dies?
No. Gmail is protected by two‑factor authentication and Google’s Inactive Account Manager. Under Oregon’s RUFADAA §4 you can request access, but Google will only comply with a court order, not a simple death certificate.
What does RUFADAA §4 actually require?
RUFADAA §4 obligates service providers to give a fiduciary (executor, personal representative) access to a deceased’s account after the fiduciary presents a valid death certificate and a court‑issued letters‑testamentary. The provider may still refuse if the user’s terms of service explicitly forbid it.
Do legacy contacts on Facebook let my spouse read my messages?
No. A Facebook legacy contact can post on the profile, manage friend requests, and update profile info, but cannot read private messages or download photos. Those remain locked unless a court order is obtained.
Should I cancel all subscriptions immediately after a death?
Cancel only the ones that generate recurring charges to the deceased’s payment method. Keep services that contain essential documents (e.g., cloud storage) active until you’ve transferred ownership or downloaded the data.
How does a magic check‑in (dead‑man's switch) help an executor?
A magic check‑in automatically notifies a trusted contact if the user fails to log in within a set period. It can trigger release of encrypted vault keys, giving the executor a way to access critical passwords without waiting for a court order.
Top comments (0)