Your Online Accounts, Cryptocurrency, and Digital Property Need a Plan Too
Summary
The average adult has around 80 online accounts. Most estate plans cover zero of them. Here is how Arizona law handles digital assets, what RUFADAA means for your family, and the steps to make sure nothing gets lost.
What happens to your digital assets after death? From cryptocurrency wallets to social media accounts, protecting digital assets after death requires specific legal steps under Arizona's RUFADAA law. Understanding how to access digital assets after death, and setting up the right estate plan, can save your family from permanently losing valuable accounts and irreplaceable memories.
Think about everything you did online this week. You checked your bank balance. You paid a bill. You logged into your email, maybe scrolled through photos on your phone. You might have checked an investment account or a retirement plan.
Now imagine your spouse or your children trying to do any of that on your behalf. Without your passwords, without your phone for two-factor authentication, without even knowing which accounts exist. That is the situation most families walk into when someone passes away or becomes incapacitated.
The average adult in the United States has around 80 online accounts. Most estate plans cover exactly zero of them. Your will does not unlock your email. Your trust does not automatically give your successor trustee access to your online banking. And the tech companies holding your accounts are not going to hand over the keys just because your family asks.
Arizona has a law that addresses this. It is called the Revised Uniform Fiduciary Access to Digital Assets Act, or RUFADAA. But the law only works if you have a digital estate plan in place. Without the right language in your estate documents, your family could spend months fighting for access to accounts that a few simple steps would have handled.
Under Arizona law, a digital asset is any electronic record in which you have a right or interest. That is the legal definition from ARS § 14-13102. Your digital assets include more than most people realize. This covers digital assets including email accounts, financial platforms, and social media accounts:
Some of these have clear financial value. Others have sentimental value that cannot be replaced. Your iCloud account might hold every photo of your grandchildren. Your email might be the only way to reset passwords on a dozen other accounts. Losing access to one account can lock your family out of a chain of others.
Without explicit instructions in your estate documents, here is what your family is up against.
Most tech companies will not give your family access just because they show up with a death certificate. Companies like Google, Apple, and Facebook each have their own policies. Those policies were designed to protect user privacy, not to help estate executors or family members settle your affairs. Some will lock the account. Some will delete it. A few offer limited options.
Your family's login attempts can actually make things worse. Multiple failed password attempts can trigger security lockouts. Two-factor authentication codes go to a phone they might not have access to. Password recovery emails go to an inbox they cannot open. Each step locks them out further.
Google's policy is clear: inactive personal accounts, and all content within them, are eligible for permanent deletion after two years of inactivity. If your family does not act quickly, years of photos, documents, and emails can disappear.
And here is a detail most people miss: wills become public record during probate. If you list your passwords in your will, every password you own becomes available to anyone who pulls the court file. That is not a security plan. That is a security breach.
Arizona adopted RUFADAA in 2016 under ARS §§ 14-13101 through 14-13117. The law has been adopted by 47 states, and it creates a clear framework for who controls your digital assets after your death or incapacity.
The key concept is a three-tier priority system that determines who gets access. Your instructions take precedence, but only if you give them. If you named your daughter as your Google Legacy Contact, that designation controls your Google account regardless of what your will says. If your estate documents use generic language about "all property I own" instead of specifically authorizing digital asset access, a company can refuse your fiduciary's request. And if you did nothing at all, the platform's terms of service decide what happens to your accounts.
Arizona law follows a strict hierarchy to determine who controls your digital assets
Instructions you set up directly with the platform. These carry the highest legal weight and override everything else, including your will and trust. You can change them at any time, and they are specific to each account.
Your designated person gets access automatically. No court involvement needed.
Your will, trust, or power of attorney. Only applies if you did not use the platform's online tool. RUFADAA requires your documents to specifically authorize your fiduciary to access, manage, and distribute digital assets. The ABA's 2026 guidance recommends explicit language covering private keys, online platforms, and holding or liquidating digital property.
Your fiduciary requests access from the company with legal authority. Companies must comply if the language is specific enough.
If you did not use an online tool and your estate documents are silent on digital assets, the company's own policies decide what happens. In practice, this usually means denial, deletion, or a long process where your family petitions each company individually.
The company decides. Your family petitions each platform individually with no guarantee of access.
Most families end up at Tier 3 because they never set up online tools or included digital asset language in their estate plan. Moving your family to Tier 1 takes a few minutes per account.
Arizona Revised Statutes §§ 14-13101 through 14-13117 (Revised Uniform Fiduciary Access to Digital Assets Act, adopted 2016)
RUFADAA makes an important distinction that most people are not aware of. The law treats the content of electronic communications differently from other digital assets.
Your fiduciary can request access to a "catalog" of your communications. That means metadata: who you exchanged messages with, when, and the email addresses involved. Think of it as the outside of the envelope.
But reading the actual emails, text messages, or private social media conversations? That requires explicit authorization. Your trust, will, or power of attorney must specifically grant your fiduciary permission to access the content of electronic communications. Without that language, the company can legally refuse to share anything beyond the catalog.
Bottom line: if you want your successor trustee to be able to read your email, your trust needs to say so. RUFADAA does not assume consent. It requires it.
These take a few minutes each and carry the highest legal weight under RUFADAA. They override your will and your trust for the specific accounts they cover.
Google lets you name up to 10 trusted contacts who receive access to your account data if the account goes inactive. You choose the inactivity period (3, 6, 12, or 18 months), select which Google services each contact can access (Gmail, Drive, Photos, YouTube), and optionally request that Google delete the account after the inactivity period.
Set it up at myaccount.google.com under Data & Privacy. Look for "Make a plan for your digital legacy." It takes about five minutes.
Apple lets you designate a Legacy Contact who can request access to your Apple ID data after your death. They will need the access key Apple generates when you set it up, plus a death certificate. The Legacy Contact can access photos, messages, notes, files, and app data, but not payment information, licensed media, or Keychain passwords.
Set it up in Settings > [Your Name] > Sign-In & Security > Legacy Contact on your iPhone, iPad, or Mac.
Facebook allows you to choose a Legacy Contact who can manage your memorialized account or request that the account be permanently deleted. The Legacy Contact can pin a post, update your profile photo, and respond to friend requests, but cannot log in as you, read your private messages, or remove existing posts.
Set it up in Settings > General > Memorialization Settings.
These tools are free, take minutes to complete, and carry the strongest legal weight under Arizona law. There is no reason not to set them up today.
Learn how digital assets fit into a complete estate plan. Join one of our free workshops.
List every account you use. Include the platform name, your username or email on file, and whether the account has financial value. Note which accounts hold sentimental content like photos or personal documents.
Do not put passwords in this inventory. Instead, use a password manager like 1Password, Bitwarden, or LastPass. Store your master password and recovery instructions in a secure location (a fireproof safe, not a filing cabinet), and make sure your successor trustee knows where to find them.
Your estate documents need to explicitly authorize your fiduciary to access, manage, distribute, and delete your digital assets and electronic communications in accordance with RUFADAA. A recommended clause reads: "I authorize my fiduciary to access, manage, distribute, and delete my digital assets and electronic communications in accordance with the Revised Uniform Fiduciary Access to Digital Assets Act."
This covers your successor trustee under your trust and your agent under your power of attorney. Without this language, tech companies have legal grounds to refuse access.
Complete the Google, Apple, and Facebook tools described above. Check your financial institutions and cryptocurrency exchanges for similar options. Some platforms, like Coinbase and Fidelity, have their own legacy or beneficiary designation processes.
Cryptocurrency creates a unique problem. Unlike a bank account or an email, there is no company to petition. If your Bitcoin sits in a hardware wallet secured by a seed phrase and nobody knows that seed phrase, those funds are gone permanently. No court order can recover them. No attorney can call the blockchain and ask nicely.
Document your holdings: which currencies, which exchanges or wallets, and how to access them. If you use a hardware wallet, store the recovery seed phrase in a secure location and tell your successor trustee where to find it. Consider whether your trustee has the technical knowledge to manage crypto, or whether your trust should authorize them to hire a professional digital asset custodian.
Digital assets change more frequently than physical ones. You open new accounts, close old ones, change passwords, and add two-factor authentication. Build an annual review into your routine. Update your inventory, confirm your platform legacy settings, and make sure your password manager is current.
In May 2025, Governor Hobbs signed HB 2749, which updated Arizona's unclaimed property laws to specifically address cryptocurrency and other digital assets.
Under this law, if you hold digital assets on a custodial platform (like a crypto exchange) and there is no contact between you and the platform for three years, those assets are presumed abandoned. The exchange must report them to the Arizona Department of Revenue, which holds them in the Bitcoin and Digital Assets Reserve Fund.
The three-year clock starts when the platform cannot reach you and you have not taken any "act of ownership interest" like a login, a transaction, or a written communication. Once the assets are turned over to the state, recovering them gets significantly harder.
HB 2749 means your estate plan needs to account for abandonment risk. If you hold crypto on an exchange and become incapacitated, your successor trustee needs the authority and access to interact with the account before the three-year clock runs out.
Wills go through probate, and probate records are public. Listing your passwords in your will is the same as posting them for anyone to see. Use a password manager with emergency access, and keep the master credentials in a secure, private location referenced in your trust.
A will names who gets your property. It does not solve the access problem. Your executor still needs to contact each company, provide a death certificate, and navigate each platform's individual policy. Without RUFADAA language in your documents, companies can refuse to cooperate. A trust with explicit digital asset authorization is more effective because it avoids probate entirely and gives your successor trustee immediate authority to act.
Many accounts are secured by a code sent to your phone. If your family does not have access to your phone, they cannot complete the login. Include instructions for accessing your devices. Some password managers can store two-factor backup codes, which solves this problem cleanly.
People tend to think of digital assets as email and social media. But domain names, online business accounts, cryptocurrency, digital art, and e-commerce storefronts can have real financial value. If your estate plan does not account for these, your family may not even know they exist.
No. You do not need a separate trust. Digital asset provisions belong in your existing revocable living trust. Your attorney adds the RUFADAA authorization language, your trust references your digital asset inventory, and your successor trustee gets the same authority over your digital property that they have over your bank accounts and real estate.
The key is making sure the language is specific. A trust that says "all my property" without mentioning digital assets creates ambiguity. A trust that explicitly references digital assets, electronic communications, and RUFADAA leaves no room for a platform to refuse.
Your estate is not just your house and your savings account anymore. It includes every account you log into, every password you manage, every photo stored in the cloud, and every dollar sitting on a cryptocurrency exchange.
Arizona law gives you the tools to protect all of it. RUFADAA creates a clear framework. Platform legacy tools give you direct control. And a well-drafted trust ties everything together so your family does not spend months fighting for access to things that should have been simple.
The steps are straightforward. Build your inventory. Set up your platform tools. Add the right language to your trust and power of attorney. Tell your successor trustee where to find everything. That is the whole plan. It takes an afternoon, and it saves your family from a problem that gets harder every year you wait.
Want to make sure your estate plan covers your digital life? Schedule a free consultation and we will walk through everything together.
ARS §§ 14-13101 through 14-13117: Arizona Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA). Establishes the three-tier priority system for fiduciary access to digital assets, defines digital assets and electronic communications, and governs the catalog-versus-content distinction for electronic communications.
ARS § 14-13102: Definitions. Defines "digital asset," "fiduciary," "custodian," "catalogue of electronic communications," and "content of an electronic communication."
ARS § 44-7061: Arizona's blockchain and smart contract recognition statute. Establishes that signatures and contracts secured through blockchain technology are legally valid electronic records.
HB 2749 (2025): Updates Arizona's unclaimed property laws (ARS §§ 44-301, 44-302, 44-308, 44-312) and creates the Bitcoin and Digital Assets Reserve Fund (ARS § 41-180). Establishes a three-year abandonment presumption for digital assets on custodial platforms.
ARS § 14-5501: Arizona durable power of attorney statute. ARS § 14-10816: Trustee powers, including authority to manage trust property.
Our team of estate planning professionals is here to help you navigate the complexities of trusts, wills, and financial planning.