Digital Assets and Estate Planning: Crypto, Passwords, and Online Accounts
Protect and transfer your digital assets — cryptocurrency, online accounts, and digital files — with a comprehensive digital estate plan.
PMJC
Patricia Moore, JD, CFP®
Estate Planning and Digital Assets Specialist
Published
The digital revolution has created an entirely new category of assets that most estate plans completely ignore. Cryptocurrency holdings, online investment accounts, digital businesses, intellectual property, and even social media accounts can have significant financial and sentimental value. Yet without proper planning, these assets can be lost forever when their owner dies — locked behind passwords that no one else knows, stored on hardware wallets that no one can access, or simply unknown to heirs. This guide provides a comprehensive framework for including digital assets in your estate plan.
The first step in digital estate planning is creating a comprehensive inventory of all digital assets. Financial digital assets include cryptocurrency (Bitcoin, Ethereum, altcoins), online brokerage accounts, PayPal and Venmo balances, online banking accounts, and digital payment systems. Non-financial digital assets include email accounts, social media profiles, cloud storage (photos, documents), digital subscriptions, domain names, websites, and digital businesses. Sentimental digital assets include digital photo libraries, videos, and personal communications. Create a detailed inventory with account names, usernames, and instructions for access — stored securely but accessible to your executor.
2Cryptocurrency: The Unique Challenge
Cryptocurrency presents the most complex digital estate planning challenge. Unlike bank accounts, crypto held in self-custody (hardware wallets, software wallets) has no institution to contact — if the private keys or seed phrases are lost, the crypto is gone forever. Billions of dollars in Bitcoin have been permanently lost this way. Your estate plan must include secure documentation of all wallet addresses, private keys, seed phrases, and hardware wallet PINs. Store this information in a fireproof safe, with your attorney, or in a secure digital vault service. Never store seed phrases digitally without strong encryption. Consider using a multi-signature wallet that requires multiple keys to access, reducing single-point-of-failure risk.
3Legal Authority for Digital Assets
Your executor or trustee needs legal authority to access and manage digital assets. Update your will and trust documents to explicitly grant authority over digital assets. Many states have adopted the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), which provides a legal framework for fiduciary access to digital assets. Your power of attorney should also include digital asset authority for incapacity planning. Some platforms have their own legacy contact or inactive account management tools — Facebook, Google, and Apple all offer ways to designate someone to manage your account after death. Use these platform-specific tools in addition to your legal documents.
A password manager is essential for both security and estate planning. Services like 1Password, LastPass, and Bitwarden store all your passwords securely and can be set up to grant emergency access to a trusted person. Document your master password and emergency access instructions in your estate planning documents. For two-factor authentication (2FA), document which accounts use 2FA and how to access the authentication codes — this is often overlooked and can prevent heirs from accessing accounts even with the correct password. Consider using a hardware security key (like YubiKey) for critical accounts and document its location and use instructions.
5Digital Business and Intellectual Property
Digital businesses — websites, online stores, content channels, software — can have significant value that requires specific estate planning. Document all domain names, hosting accounts, and platform accounts (YouTube, Amazon, Etsy, etc.) with access credentials and revenue information. Intellectual property including digital art, music, writing, and software may have ongoing royalty value. NFTs (non-fungible tokens) are digital assets with unique ownership records on the blockchain — document wallet addresses and access credentials. Social media accounts with large followings may have commercial value. Work with an attorney to ensure your estate plan addresses the transfer or monetization of these assets.
Key Takeaways
Create a comprehensive inventory of all digital assets including crypto, accounts, and digital businesses
Cryptocurrency seed phrases and private keys must be documented securely — lost keys mean lost crypto
Update estate documents to explicitly grant authority over digital assets
Use a password manager with emergency access features for comprehensive credential management
Platform-specific legacy tools (Google, Facebook, Apple) supplement but do not replace legal documents
Conclusion
Digital assets represent a growing and often overlooked component of personal wealth. Without proper planning, these assets can be lost, inaccessible, or create significant problems for your heirs. Creating a comprehensive digital asset inventory, documenting access credentials securely, granting proper legal authority in your estate documents, and using platform-specific legacy tools are all essential steps. Review and update your digital estate plan annually — the digital landscape changes rapidly, and your plan must keep pace. The time invested in digital estate planning protects both the financial value and the personal legacy of your digital life.
We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. By clicking "Accept All", you consent to our use of cookies. You can manage your preferences or learn more in our Cookie Policy.
You can choose how your personal data is used. Vendors want your permission to do the following:
TCF vendors
Store and/or access information on a device
Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here.
Advertising presented to you on this service can be based on limited data, such as the website or app you are using, your non-precise location, your device type or which content you are (or have been) interacting with (for example, to limit the number of times an ad is presented to you).
Information about your activity on this service (such as forms you submit, content you look at) can be stored and combined with other information about you (for example, information from your previous activity on this service and other websites or apps) or similar users. This is then used to build or improve a profile about you (that might include possible interests and personal aspects). Your profile can be used (also later) to present advertising that appears more relevant based on your possible interests by this and other entities.
Advertising presented to you on this service can be based on your advertising profiles, which can reflect your activity on this service or other websites or apps (like the forms you submit, content you look at), possible interests and personal aspects.
Information about your activity on this service (for instance, forms you submit, non-advertising content you look at) can be stored and combined with other information about you (such as your previous activity on this service or other websites or apps) or similar users. This is then used to build or improve a profile about you (which might for example include possible interests and personal aspects). Your profile can be used (also later) to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests.
Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services (for instance, the forms you submit, content you look at), possible interests and personal aspects. This can for example be used to adapt the order in which content is shown to you, so that it is even easier for you to find (non-advertising) content that matches your interests.
Information regarding which advertising is presented to you and how you interact with it can be used to determine how well an advert has worked for you or other users and whether the goals of the advertising were reached. For instance, whether you saw an ad, whether you clicked on it, whether it led you to buy a product or visit a website, etc. This is very helpful to understand the relevance of advertising campaigns.
Information regarding which content is presented to you and how you interact with it can be used to determine whether the (non-advertising) content e.g. reached its intended audience and matched your interests. For instance, whether you read an article, watch a video, listen to a podcast or look at a product description, how long you spent on this service and the web pages you visit etc. This is very helpful to understand the relevance of (non-advertising) content that is shown to you.
Understand audiences through statistics or combinations of data from different sources
Reports can be generated based on the combination of data sets (like user profiles, statistics, market research, analytics data) regarding your interactions and those of other users with advertising or (non-advertising) content to identify common characteristics (for instance, to determine which target audiences are more receptive to an ad campaign or to certain contents).
Information about your activity on this service, such as your interaction with ads or content, can be very helpful to improve products and services and to build new products and services based on user interactions, the type of audience, etc. This specific purpose does not include the development or improvement of user profiles and identifiers.
Content presented to you on this service can be based on limited data, such as the website or app you are using, your non-precise location, your device type, or which content you are (or have been) interacting with (for example, to limit the number of times a video or an article is presented to you).
Ensure security, prevent and detect fraud, and fix errors
Your data can be used to monitor for and prevent unusual and possibly fraudulent activity (for example, regarding advertising, ad clicks by bots), and ensure systems and processes work properly and securely. It can also be used to correct any problems you, the publisher or the advertiser may encounter in the delivery of content and ads and in your interaction with them.
Certain information (like an IP address or device capabilities) is used to ensure the technical compatibility of the content or advertising, and to facilitate the transmission of the content or ad to your device.
The choices you make regarding the purposes and entities listed in this notice are saved and made available to those entities in the form of digital signals (such as a string of characters). This is necessary in order to enable both this service and those entities to respect such choices.
Information about your activity on this service may be matched and combined with other information relating to you and originating from various sources (for instance your activity on a separate online service, your use of a loyalty card in-store, or your answers to a survey), in support of the purposes explained in this notice.
In support of the purposes explained in this notice, your device might be considered as likely linked to other devices that belong to you or your household (for instance because you are logged in to the same service on both your phone and your computer, or because you may use the same Internet connection on both devices).
Identify devices based on information transmitted automatically
Your device might be distinguished from other devices based on information it automatically sends when accessing the Internet (for instance, the IP address of your Internet connection or the type of browser you are using) in support of the purposes exposed in this notice.
The choices you make with this CMP regarding the purposes and entities will affect how personalized advertising is presented to you. We need to store these choices to respect them on future visits, and they are stored differently based on the type of site or app you're using:
For sites, your choices are saved in a cookie named “FCCDCF” for a maximum duration of 390 days.
For apps, your choices are saved in device storage prefixed by “IABTCF_”. Your choices will be invalidated after 390 days and overwritten once you make new privacy choices on this app.
For accelerated mobile page (AMP) sites, your choices are saved in local storage prefixed by “amp-store”. Your choices will be invalidated after 390 days and overwritten once you make new privacy choices on this site.
Vendor preferences
Confirm our vendors
Vendors can use your data to provide services. Declining a vendor can stop them from using the data you shared.
TCF vendors
Exponential Interactive, Inc d/b/a VDX.tv
Cookie duration: 90 (days).
Data collected and processed: IP addresses, Device identifiers, Probabilistic identifiers, Browsing and interaction data, Non-precise location data, Users’ profiles, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Probabilistic identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Probabilistic identifiers, Browsing and interaction data, Non-precise location data
Data collected and processed: IP addresses, Device characteristics, Probabilistic identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Authentication-derived identifiers, Browsing and interaction data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Authentication-derived identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, User-provided data, Non-precise location data, Precise location data
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Authentication-derived identifiers, Browsing and interaction data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Users’ profiles, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, User-provided data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Users’ profiles, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
Data collected and processed: IP addresses, Device identifiers, Probabilistic identifiers, Browsing and interaction data, Non-precise location data, Privacy choices
