What the research found
A study from Carnegie Mellon University’s CyLab, presented at the 2026 ACM CHI Conference, interviewed people over 60 about how they think about their online accounts after death. The clearest finding: participants prioritized financial account access for their heirs over concerns about their social media presence or online identity, by a wide margin. Bank accounts, investment portals, bill-pay services: these were treated as urgent. Photos and social content were often seen as already handled, since many participants had shared or backed up what mattered to family already.
The researchers also found something less expected. Many participants showed little concern about their own postmortem privacy, a contrast with how much digital legacy research and design tends to assume people want privacy protected after death. And despite general awareness that planning matters, the actual tools built for this (Google’s Inactive Account Manager, Apple’s Legacy Contact, similar features from other platforms) were unfamiliar to most participants, who leaned on informal methods instead, most often a handwritten list of passwords kept somewhere in the house.
Why the built-in tools aren’t the default solution people assume
The gap here is a mismatch between what people worry about and what the available tools were built to solve, not a lack of concern. Legacy contact features are built around photos, messages, and social profiles, the exact category participants treated as lower priority. Financial account access, the thing people cared about most, isn’t something these built-in features are designed to hand over in a clean way. Even Apple’s own Legacy Contact system leaves out access to Keychain, meaning stored passwords and payment information stay out of reach even for a designated contact, and access through the feature runs out after three years, when the account gets deleted for good.
The practical takeaway
If you’re the one setting this up, treat financial account access as the priority, not an afterthought handled by whatever a social platform’s tool happens to cover. A password manager with an emergency access feature, or a documented, secured list reviewed with a trusted person while you’re alive, does more real work here than any single platform’s legacy tool. If you do use built-in options like Apple’s Legacy Contact or Google’s Inactive Account Manager, set them up with a clear sense of their real limits: they’re useful for photos and messages, not a full financial safety net.
Platform-specific tools and their limits change over time as companies update their policies. Whatever rule applies to a given platform’s legacy feature today is worth checking against the source rather than assuming it still matches older information.
References
Tang, J., Wu, X., Bauer, L., Christin, N., Cranor, L. F. “Passing Down Passwords: How Older Adults Approach Postmortem Account Access and Digital Estate Planning.” Proceedings of the 2026 CHI Conference on Human Factors in Computing Systems, summarized by Carnegie Mellon University CyLab. https://www.cylab.cmu.edu/news/2026/04/15-digital-estate-planning.html
Apple. “Request access to an Apple Account as a Legacy Contact.” https://support.apple.com/en-lamr/102678
Top comments (0)