TL;DR: Facebook’s legacy contact can’t read messages or download data; RUFADAA §4 lets an executor request access, but Facebook’s terms block it. TikTok influencers ignore these limits. Use a digital vault and a formal digital executor this weekend.
"My sister set me up as a Facebook legacy contact after Mom died, but we can’t get into her private messages. Is there any way to retrieve them, or did we just lose them forever?" — Jenna, 39, Portland
Why the Facebook legacy contact falls short
The short answer: it doesn’t give you the keys you think it does. Facebook’s legacy contact (launched 2018) can only manage a memorialized profile—change the profile picture, write a tribute, and delete posts. It cannot read private messages, download photos, or access ad‑account data. That limitation is spelled out in Facebook’s Terms of Service, which say the legacy contact “may not access personal messages or download data.”
Legally, Oregon follows the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) as Oregon Revised Statutes § 115.285. Under RUFADAA §4, an executor (the person legally authorized to settle an estate) can request access to a decedent’s online accounts, but only if the service’s policy permits it. Because Facebook’s policy expressly denies password disclosure, the executor’s request is dead‑ended.
Under Oregon’s RUFADAA §4, an executor can request digital access, but Facebook’s terms block any password disclosure, leaving legacy contacts powerless to retrieve private content.
What TikTok influencers get wrong
Every week I see a 45‑second TikTok that says, “Just add a legacy contact and you’re done.” Those creators ignore two hard facts: first, the legacy contact is a feature, not a legal tool. Second, they assume the platform will hand over everything to the appointed person, which is false.
Take the viral clip by @EstateHacks, which claims “Your spouse can read all your messages after you die with a legacy contact.” That’s straight‑up misinformation. The platform’s policy, as of Dec 2023, still bars any message access. Influencers also skip the step of naming a digital executor—a legally recognized role that can make a formal request under RUFADAA.
This does NOT mean you should abandon Facebook entirely. It means you need a backup plan: export your data now, store it in a secure vault, and give your executor a separate set of credentials.
TikTok advice that “legacy contacts solve everything” ignores Facebook’s policy limits and the legal requirement for a digital executor under RUFADAA.
How the law actually works for digital assets
RUFADAA (the Revised Uniform Fiduciary Access to Digital Assets Act) is the backbone of digital estate law in 45 states, including Oregon. Section 4 allows a fiduciary—executor, personal representative, or guardian—to request a service provider’s assistance, but the provider can refuse if its terms forbid disclosure. In Ajemian v. Yahoo! (Mass. 2017), the court held that a provider could honor a subpoena only to the extent its terms allowed; it could not be forced to hand over encrypted passwords.
Facebook’s terms are clear: no password sharing, no message access. The only way to get at private content is to have the password beforehand. That’s why a digital executor agreement is essential.
RUFADAA gives executors a legal hook, but providers like Facebook can legally refuse if their terms prohibit password disclosure, as affirmed in Ajemian v. Yahoo!.
Practical steps you can take this weekend
- Export your Facebook data now – Settings → Your Facebook Information → Download Your Information. Choose “All of my data,” include messages, and store the ZIP in an encrypted vault (ICSH, 1Password, or a hardware‑encrypted drive).
- Create a digital executor agreement – Name a trusted adult, attach a copy of your will, and grant them authority to request account access under RUFADAA. Keep this document in the same vault.
- Set up a legacy contact – Do it, but treat it as a public‑facing tool only. Add the contact in Settings → Memorialization Settings.
- Add the login credentials to a secure vault – Use a service that supports Shamir secret sharing (ICSH does) so no single person holds the whole key.
- Tell your executor where the vault lives – A brief letter of instruction (see our post on how to write a letter of instruction) can save hours of grief. Exporting data, creating a digital executor agreement, and storing credentials in a secure vault are the only reliable ways to ensure access beyond Facebook’s limited legacy contact.
That’s it. Spend a couple of hours Saturday, and you’ll spare your family a 2 am scramble in a hospital parking lot.
Frequently Asked Questions
Can a Facebook legacy contact read my private messages after I die?
No. A legacy contact can only manage a memorialized profile. Private messages remain inaccessible because Facebook’s policy explicitly prohibits the legacy contact from reading or downloading them.
Does RUFADAA let my executor get my Facebook password?
RUFADAA §4 permits an executor to request access, but Facebook’s terms block password disclosure. The executor must rely on pre‑shared credentials or an alternate backup method.
What’s the difference between a legacy contact and a digital executor?
A legacy contact is a Facebook‑specific role limited to public profile management. A digital executor is a legally appointed fiduciary who can request access to all digital assets under RUFADAA, provided the service’s policy allows it.
How do I set up a real backup for my TikTok account?
TikTok offers no legacy feature. Export your video archive, store the login credentials in a secure vault, and name a trusted person as your digital executor in your will or a separate agreement.
Can I rely on a spouse’s memory of my passwords?
Never. Memory fails under stress. The law expects a written, accessible plan. Without it, even a spouse may be barred from accessing accounts, leaving families to fight companies or courts for access.
Top comments (0)