The Deceased's Locked Phone |
A PRACTICAL GUIDE TO DIGITAL ACCESS AFTER A DEATH
The paperwork side of an estate has a rhythm to it. Death certificates, the will, the certificate of appointment, notifying institutions one at a time. Slow, sometimes maddening, but it moves.
Then the executor picks up the deceased's phone to cancel a subscription, and everything stops.
We've written before about the broader job of the estate trustee — the legal duties, the liability, the probate mechanics. This piece is about the part that surprises people most, because it isn't a legal problem at all. It's a locked screen, and no amount of correct paperwork opens it.
We hand this article to families who've just taken on the role. It's written to be used rather than admired, so it's longer than most of what we publish. Skip to whichever section you need.
The paperwork side of an estate has a rhythm to it. Death certificates, the will, the certificate of appointment, notifying institutions one at a time. Slow, sometimes maddening, but it moves.
Then the executor picks up the deceased's phone to cancel a subscription, and everything stops.
We've written before about the broader job of the estate trustee — the legal duties, the liability, the probate mechanics. This piece is about the part that surprises people most, because it isn't a legal problem at all. It's a locked screen, and no amount of correct paperwork opens it.
We hand this article to families who've just taken on the role. It's written to be used rather than admired, so it's longer than most of what we publish. Skip to whichever section you need.
|
Start here: the phone is the most important object in the estate
Before anything else, understand what you're holding. For most people, the mobile phone is not merely a device that holds accounts. It has quietly become the master key to nearly every other account they own — the place password resets land, the place two-factor codes are generated, the thing that proves to a bank's app that the person signing in is who they say they are. |
|
Everything else in this article follows from that. Which means the first hour matters more than the first week:
If a family member already knows the phone passcode, write it down somewhere safe today, while it's still in someone's memory rather than in a stressful phone call three weeks from now.
Why knowing the password usually isn't enough
Families are often better prepared than they expect. There's a notebook in a drawer, or a spouse who's always known the email password. That's a genuine head start. It also, on its own, gets you nowhere.
Almost every account worth reaching now demands a second factor after the password. Where that second factor comes from is the whole problem:
So the executor holds the correct password and still can't get in. Worse, the standard escape hatch — "we'll send a reset code to the number on file" — routes straight back through the same locked device. This is why the phone passcode is worth more to an executor than a list of passwords. One unlocks everything. The other unlocks almost nothing.
- Find the phone, and keep it charged. A device that fully discharges and sits for months can become substantially harder to work with.
- Do not guess repeatedly at the passcode. Some devices are configured to erase themselves after a number of failed attempts. A wiped phone is usually the end of the road.
- Do not cancel the mobile plan. More on this below, because it's the single most costly mistake you could make.
- Resist the urge to "reset" passwords early. Password and security changes can trigger cooling-off periods and security holds on the very accounts you're trying to reach.
If a family member already knows the phone passcode, write it down somewhere safe today, while it's still in someone's memory rather than in a stressful phone call three weeks from now.
Why knowing the password usually isn't enough
Families are often better prepared than they expect. There's a notebook in a drawer, or a spouse who's always known the email password. That's a genuine head start. It also, on its own, gets you nowhere.
Almost every account worth reaching now demands a second factor after the password. Where that second factor comes from is the whole problem:
- A code texted to a phone number — which requires the phone's passcode to read, and an active line to receive.
- An authenticator app — Google Authenticator, Microsoft Authenticator and similar. These generate rotating codes on the device itself. The codes are not stored with the account, they're often not in the device backup, and they cannot be recreated by the company that issued them.
- A prompt on a trusted device — the "approve this sign-in" tap, which appears on the phone you can't unlock.
- A physical security key — a small hardware fob. If you can't find it, and no backup key was registered, the door stays shut.
- A passkey — the newer, password-free method. Worth understanding, because it changes the shape of the problem: with a passkey there is no password to reset. If passkeys sync through the deceased's Apple or Google account, they may be reachable. If they were device-bound, they die with the device.
So the executor holds the correct password and still can't get in. Worse, the standard escape hatch — "we'll send a reset code to the number on file" — routes straight back through the same locked device. This is why the phone passcode is worth more to an executor than a list of passwords. One unlocks everything. The other unlocks almost nothing.
|
The mistake that closes doors permanently
Cancelling the deceased's mobile account feels like responsible early housekeeping. One less bill arriving. Tidy. It is very often the decision that turns a frustrating week into an impossible one. That phone number is the recovery route for nearly everything else — banking alerts, email password resets, two-factor texts, account verification calls. Once the line is released, doors that were merely stiff become sealed, and the number itself may eventually be reassigned to a stranger. |
Keep the line active and the phone charged until the digital side of the estate is genuinely finished. A few months of a basic plan is trivial against the alternative. Make the same call about the deceased's primary email account: it's the hub through which most other accounts can be recovered, so it should be the last thing closed, not the first.
A useful way to sort the problem: 4 tiers of accounts
Executors get overwhelmed because they treat every account as equally urgent. They aren't. Sorting them makes the job finite.
Tier #1 — the accounts that hold real money. Bank accounts, investments, RRSPs and RRIFs, insurance policies, pensions, government benefits. These almost never require online access.
Tier #2 — the big platform accounts. Apple, Google, Microsoft, Meta. These hold data, photos and the keys to much else, and several now offer formal legacy tools.
Tier #3 — the long tail. Subscriptions, autopay utilities, loyalty points, memberships, a domain name, the online shopping accounts. Individually trivial, collectively the bulk of the aggravation.
Tier #4 — the genuinely unrecoverable. A small category, but the one where real money disappears for good.
Work them in that order.
Tier #1: Go through the front door, not the login screen
Here's the reframe we'd offer any executor feeling locked out, and it's the reason to take a breath before panicking.
The accounts that carry the estate's actual value are handled institutionally, not digitally. You present the death certificate and your certificate of appointment, and the institution deals with you as executor. Accounts are re-registered, transferred or paid out through a process built for exactly this. It works whether or not anyone ever knew a password.
That covers the investment accounts, the bank accounts, the insurance, the pension. Our office handles that side directly for client families, and we'd far rather you call us than spend an evening trying to guess your father's password.
The government side works the same way, through channels rather than logins:
None of that requires the deceased's password. Do not let the locked phone stall the parts of the job that don't depend on it. Forms, phone numbers and processing times do change, so confirm the current requirements when you start rather than relying on a printout.
Tier #2: What the platforms actually offer — and they're not the same
Several of the big technology companies now have some form of legacy tool. They work on genuinely different principles, and being precise about the differences saves weeks.
Google — the dormancy model. Google's Inactive Account Manager is set up in advance by the account holder, who chooses how long the account must sit unused before it's treated as inactive and names trusted contacts. Google attempts to reach the account holder first through several channels. If there's no response, the named contacts are notified and given a link to download whichever categories of data the account holder selected — mail, photos, files and so on. The account can also be set to delete itself afterward. Note that the download link doesn't stay live indefinitely, so a notified contact who ignores the email loses the window. Google also has a separate process for requesting a deceased person's data where nothing was set up in advance, but it's slower and the outcome is far less certain.
Apple — the access key model, not dormancy. Apple's Legacy Contact works on an entirely different principle. The account holder names a contact in advance, and Apple issues an access key — an alphanumeric code, usually with a QR code, which should be printed and stored with the estate papers. After death, the named contact submits that access key together with a death certificate, and Apple reviews the request. There's no waiting period at all. But without the access key stored somewhere findable, the process becomes markedly harder.
Microsoft — no legacy contact. Microsoft doesn't currently offer a designate-in-advance feature comparable to Apple's or Google's. What exists is a next-of-kin process handled by their records custodian, requiring documentation of the death and of your relationship or authority, with a review that takes weeks. Realistically it's oriented toward closing the account and, in some cases, releasing data — not toward handing over live access. Timing matters here, because dormant accounts are eventually closed and their contents deleted.
Facebook and Instagram — memorialization. Facebook allows a legacy contact to be named in advance, but the authority only activates once the account has been memorialized, which is a separate request someone must make. A legacy contact can then manage a limited set of things — the profile photo, pinned posts, friend requests — rather than take over the account. Instagram offers memorialization but no equivalent designate-in-advance role.
The limitation nobody mentions. Here's what gets lost in most write-ups of these features, and it's the reason to keep expectations realistic.
These are data-retrieval tools, not account keys. A legacy contact typically receives a copy of photos, messages and files. What they generally do not receive is working control of a live account — and notably, Apple's legacy access excludes the saved-password vault, which is precisely the thing an executor would most want.
So a legacy contact may recover the family photographs. That's genuinely valuable, and worth setting up. They still can't log in as the deceased and pay a bill.
Tier #3: The long tail, and a trick for finding it
Subscriptions, autopay utilities, memberships, the streaming services, the cloud storage plan, the monthly charge nobody can identify.
The problem here isn't access so much as discovery — you can't cancel what you don't know exists. So work backwards from the money rather than forwards from the phone:
Loyalty points deserve a specific mention, because families routinely assume they simply evaporate. Often they don't. Aeroplan, for example, publishes an estate policy: the points can't be left in a will as such, but an executor can request a transfer to a beneficiary, with fees that differ depending on whether you use the standard transfer route or the estate account route. Other programs vary widely — some transfer, some expressly don't. It's worth a look before writing off a balance that may be worth real money.
Also in this tier: domain names, an online store, a monetized channel, or anything else that generates income or carries goodwill. These are estate assets, not digital clutter, and they can lapse quietly while probate grinds on.
Tier #4: The category that genuinely cannot be recovered
This one is short, and it matters more than its length suggests.
Self-custody cryptocurrency is not recoverable by any legal process. If the deceased held crypto in their own wallet rather than on an exchange, access depends entirely on a private key — usually a recovery phrase of twelve or twenty-four words. Whoever has that phrase controls the asset. If nobody does, the asset is simply gone. A court order cannot compel a blockchain to release funds, and there is no institution to write to. A great deal of cryptocurrency has been permanently lost this way, and inheritance failures are a meaningful share of it.
Crypto held on an exchange is a different matter — an exchange is a company with a bereavement process, much like a bank.
The other members of this category are hardware security keys with no registered backup, and device-bound passkeys on a device that's been wiped.
If someone in the family holds crypto and you don't know how it's stored, that conversation should happen while they're alive. There is no version of it that works afterward.
The legal grey zone — worth saying out loud
Executors often ask us whether it's actually allowed to log in using the deceased's credentials. It's a fair question and the honest answer is unsatisfying.
The law across Canada is uneven. Saskatchewan has legislation giving fiduciaries a defined right of access to a deceased person's digital accounts, and it overrides contract terms that would block them. Ontario has no equivalent in force. So in Ontario, an executor's position rests largely on each company's terms of service — terms written by the company, for the company, and typically prohibiting anyone but the account holder from signing in.
Layered on top is federal privacy law, which constrains what a company may disclose about an individual, and the general criminal provisions around impersonation, which are aimed at fraud for gain rather than at an executor paying a hydro bill — but which are the reason nobody in our position will ever tell you to go ahead.
The practical reality is that families do use credentials they were given, and companies rarely pursue it. But "rarely pursued" is not the same as "permitted," and an executor already carries personal liability for how the estate is administered. So:
Family harmony is usually the real risk here, not prosecution. A sibling who feels shut out of a parent's photo library or email can turn a straightforward estate into a contested one.
A note for farm and business families
In Huron County this tier deserves its own paragraph, because a farm or a small business doesn't pause politely while probate runs its course.
A business carries a second, parallel set of digital access problems: business banking with its own security tokens and dual signing authority, CRA business and payroll accounts, farm program portals, grain marketing and elevator accounts, supplier and input accounts, accounting software, equipment telematics, and payroll for anyone still drawing a cheque. Employees need to be paid. Remittances have deadlines. And the calendar has opinions of its own — a crop in the ground does not wait for a certificate of appointment.
Two things make an enormous difference here, and both have to be arranged in advance: someone other than the principal needs signing authority on the business accounts, and someone needs to know how the business systems are accessed. Where a corporation is involved, share ownership and signing authority are separate questions with separate answers, and they belong in the same conversation as the will.
This is one of the practical reasons we push families toward succession planning for farm families earlier than feels necessary. The tax and ownership questions get the attention. The "who can actually log in and pay the fertilizer bill in March" question is the one that bites first.
If you're planning ahead: the short list that solves most of this
Everything above is far easier to prevent than to fix. If you do nothing else:
The Bottom Line — an executor's digital problem is almost always a device problem, and it's solved before a death rather than after one. The good news is that the accounts holding the estate's real value were never behind that locked screen in the first place — they go through the front door, and we can walk you through that part. The rest is a finite list, and it gets shorter when you sort it. If you've been named executor and don't know where to start, or you're organizing your own affairs and would rather your family never read this article, come in and we'll work through it together. Bring the phone.
A useful way to sort the problem: 4 tiers of accounts
Executors get overwhelmed because they treat every account as equally urgent. They aren't. Sorting them makes the job finite.
Tier #1 — the accounts that hold real money. Bank accounts, investments, RRSPs and RRIFs, insurance policies, pensions, government benefits. These almost never require online access.
Tier #2 — the big platform accounts. Apple, Google, Microsoft, Meta. These hold data, photos and the keys to much else, and several now offer formal legacy tools.
Tier #3 — the long tail. Subscriptions, autopay utilities, loyalty points, memberships, a domain name, the online shopping accounts. Individually trivial, collectively the bulk of the aggravation.
Tier #4 — the genuinely unrecoverable. A small category, but the one where real money disappears for good.
Work them in that order.
Tier #1: Go through the front door, not the login screen
Here's the reframe we'd offer any executor feeling locked out, and it's the reason to take a breath before panicking.
The accounts that carry the estate's actual value are handled institutionally, not digitally. You present the death certificate and your certificate of appointment, and the institution deals with you as executor. Accounts are re-registered, transferred or paid out through a process built for exactly this. It works whether or not anyone ever knew a password.
That covers the investment accounts, the bank accounts, the insurance, the pension. Our office handles that side directly for client families, and we'd far rather you call us than spend an evening trying to guess your father's password.
The government side works the same way, through channels rather than logins:
- The Canada Revenue Agency needs to be notified of the death, and you'll need to be registered as the legal representative before you can act on the estate's tax matters. There's a specific form for registering as representative for a deceased person, and an information sheet covering what to do following a death. Expect the registration to take several weeks to process, so start it early.
- Service Canada needs to be told to stop CPP and OAS payments — and benefits paid after the date of death generally have to be repaid, so delay here creates work later. The CPP death benefit is applied for through the same channel.
- Provincial and municipal accounts — health card, driver's licence, property tax — each have their own notification process.
None of that requires the deceased's password. Do not let the locked phone stall the parts of the job that don't depend on it. Forms, phone numbers and processing times do change, so confirm the current requirements when you start rather than relying on a printout.
Tier #2: What the platforms actually offer — and they're not the same
Several of the big technology companies now have some form of legacy tool. They work on genuinely different principles, and being precise about the differences saves weeks.
Google — the dormancy model. Google's Inactive Account Manager is set up in advance by the account holder, who chooses how long the account must sit unused before it's treated as inactive and names trusted contacts. Google attempts to reach the account holder first through several channels. If there's no response, the named contacts are notified and given a link to download whichever categories of data the account holder selected — mail, photos, files and so on. The account can also be set to delete itself afterward. Note that the download link doesn't stay live indefinitely, so a notified contact who ignores the email loses the window. Google also has a separate process for requesting a deceased person's data where nothing was set up in advance, but it's slower and the outcome is far less certain.
Apple — the access key model, not dormancy. Apple's Legacy Contact works on an entirely different principle. The account holder names a contact in advance, and Apple issues an access key — an alphanumeric code, usually with a QR code, which should be printed and stored with the estate papers. After death, the named contact submits that access key together with a death certificate, and Apple reviews the request. There's no waiting period at all. But without the access key stored somewhere findable, the process becomes markedly harder.
Microsoft — no legacy contact. Microsoft doesn't currently offer a designate-in-advance feature comparable to Apple's or Google's. What exists is a next-of-kin process handled by their records custodian, requiring documentation of the death and of your relationship or authority, with a review that takes weeks. Realistically it's oriented toward closing the account and, in some cases, releasing data — not toward handing over live access. Timing matters here, because dormant accounts are eventually closed and their contents deleted.
Facebook and Instagram — memorialization. Facebook allows a legacy contact to be named in advance, but the authority only activates once the account has been memorialized, which is a separate request someone must make. A legacy contact can then manage a limited set of things — the profile photo, pinned posts, friend requests — rather than take over the account. Instagram offers memorialization but no equivalent designate-in-advance role.
The limitation nobody mentions. Here's what gets lost in most write-ups of these features, and it's the reason to keep expectations realistic.
These are data-retrieval tools, not account keys. A legacy contact typically receives a copy of photos, messages and files. What they generally do not receive is working control of a live account — and notably, Apple's legacy access excludes the saved-password vault, which is precisely the thing an executor would most want.
So a legacy contact may recover the family photographs. That's genuinely valuable, and worth setting up. They still can't log in as the deceased and pay a bill.
Tier #3: The long tail, and a trick for finding it
Subscriptions, autopay utilities, memberships, the streaming services, the cloud storage plan, the monthly charge nobody can identify.
The problem here isn't access so much as discovery — you can't cancel what you don't know exists. So work backwards from the money rather than forwards from the phone:
- Pull twelve months of bank and credit card statements and mark every recurring charge. This is the single most effective technique in the whole exercise, and it needs no passwords at all — as executor you're entitled to those statements through the front door.
- Watch for annual charges, not just monthly ones. A domain name renewal or an annual membership hides easily in a monthly scan.
- Check the mail, paper and electronic, for renewal notices over a full year.
- Cancel through the merchant where the login is unreachable. Most companies have a bereavement process, and a death certificate generally resolves it. Cancelling the card itself is a blunter instrument that can cause its own tangles, but it exists.
Loyalty points deserve a specific mention, because families routinely assume they simply evaporate. Often they don't. Aeroplan, for example, publishes an estate policy: the points can't be left in a will as such, but an executor can request a transfer to a beneficiary, with fees that differ depending on whether you use the standard transfer route or the estate account route. Other programs vary widely — some transfer, some expressly don't. It's worth a look before writing off a balance that may be worth real money.
Also in this tier: domain names, an online store, a monetized channel, or anything else that generates income or carries goodwill. These are estate assets, not digital clutter, and they can lapse quietly while probate grinds on.
Tier #4: The category that genuinely cannot be recovered
This one is short, and it matters more than its length suggests.
Self-custody cryptocurrency is not recoverable by any legal process. If the deceased held crypto in their own wallet rather than on an exchange, access depends entirely on a private key — usually a recovery phrase of twelve or twenty-four words. Whoever has that phrase controls the asset. If nobody does, the asset is simply gone. A court order cannot compel a blockchain to release funds, and there is no institution to write to. A great deal of cryptocurrency has been permanently lost this way, and inheritance failures are a meaningful share of it.
Crypto held on an exchange is a different matter — an exchange is a company with a bereavement process, much like a bank.
The other members of this category are hardware security keys with no registered backup, and device-bound passkeys on a device that's been wiped.
If someone in the family holds crypto and you don't know how it's stored, that conversation should happen while they're alive. There is no version of it that works afterward.
The legal grey zone — worth saying out loud
Executors often ask us whether it's actually allowed to log in using the deceased's credentials. It's a fair question and the honest answer is unsatisfying.
The law across Canada is uneven. Saskatchewan has legislation giving fiduciaries a defined right of access to a deceased person's digital accounts, and it overrides contract terms that would block them. Ontario has no equivalent in force. So in Ontario, an executor's position rests largely on each company's terms of service — terms written by the company, for the company, and typically prohibiting anyone but the account holder from signing in.
Layered on top is federal privacy law, which constrains what a company may disclose about an individual, and the general criminal provisions around impersonation, which are aimed at fraud for gain rather than at an executor paying a hydro bill — but which are the reason nobody in our position will ever tell you to go ahead.
The practical reality is that families do use credentials they were given, and companies rarely pursue it. But "rarely pursued" is not the same as "permitted," and an executor already carries personal liability for how the estate is administered. So:
- Use official channels wherever one exists. They're slower and they're defensible.
- Keep a written record of what you accessed, when and why.
- Ask the estate lawyer before doing anything irreversible, or where beneficiaries may disagree with one another.
Family harmony is usually the real risk here, not prosecution. A sibling who feels shut out of a parent's photo library or email can turn a straightforward estate into a contested one.
A note for farm and business families
In Huron County this tier deserves its own paragraph, because a farm or a small business doesn't pause politely while probate runs its course.
A business carries a second, parallel set of digital access problems: business banking with its own security tokens and dual signing authority, CRA business and payroll accounts, farm program portals, grain marketing and elevator accounts, supplier and input accounts, accounting software, equipment telematics, and payroll for anyone still drawing a cheque. Employees need to be paid. Remittances have deadlines. And the calendar has opinions of its own — a crop in the ground does not wait for a certificate of appointment.
Two things make an enormous difference here, and both have to be arranged in advance: someone other than the principal needs signing authority on the business accounts, and someone needs to know how the business systems are accessed. Where a corporation is involved, share ownership and signing authority are separate questions with separate answers, and they belong in the same conversation as the will.
This is one of the practical reasons we push families toward succession planning for farm families earlier than feels necessary. The tax and ownership questions get the attention. The "who can actually log in and pay the fertilizer bill in March" question is the one that bites first.
If you're planning ahead: the short list that solves most of this
Everything above is far easier to prevent than to fix. If you do nothing else:
- Tell your executor the phone passcode, or record it somewhere they can reach. This single item resolves more problems than everything else on this list combined.
- Use a password manager, and set up whatever succession feature it offers — most of the well-known ones now have some form of emergency access or printable emergency kit. Leave one sealed instruction for the master password with the estate documents.
- Print your two-factor backup codes. Nearly every service offers a set of one-time recovery codes when two-factor is switched on, and almost nobody keeps them. They're the intended solution to this entire problem.
- Name a legacy contact with Apple and with Google, and set up a Facebook legacy contact if you use it. Store Apple's access key with the will — it's useless in a drawer nobody knows about.
- Write down which device holds the authenticator app, and how to unlock that device.
- Never put passwords, PINs or a crypto recovery phrase in the will itself. A will can become a public document through probate. Use a separate letter of instruction, kept with the will and updated as things change.
- Leave a map, not a vault. Your executor mostly needs to know what exists and where — which institutions, which subscriptions, which advisor, which lawyer. That list is far more durable than a password inventory, which is stale within months.
- Check it once a year. Platform settings change, devices get replaced, and a legacy contact who's no longer the right person is worse than none.
The Bottom Line — an executor's digital problem is almost always a device problem, and it's solved before a death rather than after one. The good news is that the accounts holding the estate's real value were never behind that locked screen in the first place — they go through the front door, and we can walk you through that part. The rest is a finite list, and it gets shorter when you sort it. If you've been named executor and don't know where to start, or you're organizing your own affairs and would rather your family never read this article, come in and we'll work through it together. Bring the phone.
This article is for general information purposes and does not constitute personalized financial or insurance advice. Speak with your advisor about the coverage that's right for your situation.
|
Article written in August 2026
|
