How Executors Access Accounts Without Violating Terms of Service

Navigating digital accounts after someone dies can feel confusing, especially when you’re trying to do the right thing and also move practical tasks forward. Many people assume an executor can simply “log in and handle it,” but most online services have rules that limit sharing passwords or accessing an account as if you were the owner.

This guide explains how executors can work within common Terms of Service (ToS) and platform policies, using respectful, documented steps. It’s not legal advice—just a steady, practical overview to help you avoid unnecessary problems while you support the person’s wishes and the family’s needs.

Why Terms of Service matter after someone dies

Accounts are licensed, not “owned” in the usual way

For many services—email, social media, streaming, cloud storage—the account is governed by a contract between the user and the company. That contract often says the account is personal and not transferable. Even if you are the executor, the platform may still require a specific process before it will share information or make changes.

This can feel frustrating, but it’s usually tied to privacy, fraud prevention, and security. Companies are trying to avoid giving access to the wrong person, especially when accounts contain messages, photos, and financial details.

Password sharing is often prohibited, even with good intentions

Many ToS agreements prohibit sharing passwords or letting someone else access the account “as the user.” That means using a saved password from a spouse’s phone or a family password manager can technically violate the rules, even if everyone agrees you should be the one handling things.

In practice, families often do what’s easiest in the moment. But if you want to reduce risk—account lockouts, disputes among relatives, or delays—using the provider’s official pathway is usually the safest route.

“Executor” doesn’t automatically equal “authorized user”

Being named executor gives you responsibilities, but it doesn’t automatically make you an authorized user under a platform’s policies. Companies typically want documentation before they will take action, such as a death certificate and proof of your role.

Thinking of it this way can help: your authority is real, but the platform still needs to verify it through their process.

Common misconceptions that create trouble

Misconception: “If I have the password, I’m allowed to use it”

Having access is not the same as having permission. A password may get you in, but it can also create problems later—especially if the provider flags unusual activity, locks the account, or requests verification you can’t complete.

If you do access an account informally early on, consider shifting to official channels as soon as you can, especially for accounts that matter for money, identity, or long-term records.

Misconception: “I need to close everything immediately”

There’s rarely a need to rush. Some accounts should be secured quickly (like email and financial services), but others can wait until you have documents and a plan. Moving too fast can lead to accidental data loss—photos deleted, subscriptions canceled before you download receipts, or two-factor authentication (2FA) getting locked to a phone number you no longer control.

A calmer approach is to stabilize first, then decide what to memorialize, transfer, download, or close.

Misconception: “Customer support will just take my word for it”

Most providers won’t. Support teams usually follow a checklist and may be limited in what they can disclose. Planning for that reality—by gathering documents and using the right request forms—reduces back-and-forth and emotional strain.

A practical, ToS-respecting approach to account access

Start with a simple inventory and priorities

Before contacting companies, it helps to map what exists and what matters most. A short inventory also prevents duplicate work when multiple family members are trying to help.

Use a quick list to organize what you find:

• Email accounts (often the “key” to password resets)
• Phone and carrier accounts (for number control and 2FA)
• Financial accounts (banking, credit cards, payment apps)
• Identity accounts (government portals, tax software, credit bureaus)
• Cloud storage and photo libraries
• Social media and messaging apps
• Subscriptions and utilities
• Devices and device accounts (Apple ID, Google account, Microsoft account)

Use official “deceased user” or “legacy” processes when available

Many major platforms have a dedicated process for death-related requests. These pathways are designed to respect privacy while giving families a way to memorialize an account, request limited data, or close the account.

When you use these processes, you’re typically asked for:

• A death certificate (copy or scan)
• Proof of your authority (executor documents, letters, or similar)
• Identification and contact information
• The account URL, email address, or username

Separate “access” from “outcomes”

It helps to think in terms of what you’re trying to accomplish rather than whether you can log in. Often, you don’t need full access to meet the goal.

Common outcomes executors can request through official channels include:

• Memorializing a social media profile
• Closing an account to prevent misuse
• Stopping charges and subscriptions
• Receiving invoices, receipts, or account statements
• Downloading certain data (where the provider permits it)

What to do when you can’t log in (or shouldn’t)

Use documentation instead of passwords

If a provider won’t allow you to sign in as the user, the next step is usually a formal request. This can feel slow, but it’s often the most stable path—especially if there’s any chance of family conflict or later questions about what happened.

Keep digital copies of key documents in one secure place so you can reuse them across requests. If you’re working with others, share documents carefully and only with people who truly need them.

Plan around two-factor authentication and device locks

Two-factor authentication can become the biggest obstacle. Even with a password, you may be blocked by a code sent to a phone number, device prompt, or authenticator app.

If you have the person’s phone or a trusted device, handle it gently:

• Avoid repeated failed login attempts (they can trigger security locks)
• Preserve the phone number if possible until key accounts are stabilized
• Document which accounts rely on that number for verification
• Consider contacting the phone carrier about options for maintaining service temporarily

Know when to ask for help

Some situations are simply more complex: a business account, a large digital photo archive, cryptocurrency, or an account tied to ongoing legal or financial matters. If you’re stuck, it can help to consult the estate’s professionals or a trusted tech support person who understands privacy and security.

Even without specialists, you can still move forward by focusing on the accounts that affect bills, identity, and communication first.

How to document your actions (and protect trust in the family)

Keep a clear activity log

When emotions are high, transparency helps. A simple log can prevent misunderstandings and protect you as the executor.

Write down:

• Which accounts you contacted and when
• What you requested (memorialize, close, download, stop charges)
• What documents you submitted
• Any confirmation numbers or case IDs
• What was changed and why

Avoid mixing your identity with theirs

Try not to “take over” an account by changing the email to yours or adding your phone number unless the provider specifically supports that kind of transition. Blending identities can create confusion later and may violate policies.

When possible, use formal methods: executor requests, authorized representative forms, or account closure with confirmation.

Handle personal content with care

Messages, photos, and private notes can be deeply personal. Even if you can access them, pause and consider what is necessary for the estate versus what is simply available.

If the person left instructions, follow them. If they didn’t, choose the most respectful path: preserve what matters (like family photos), avoid unnecessary reading, and keep decisions consistent and documented.

Preparing in advance: the kindest way to make this easier

Create a “digital access plan” that doesn’t rely on sharing passwords

The goal is to reduce guesswork without putting anyone in a position where they feel they’re “sneaking” into accounts. A plan can list what exists, what should happen to it, and who should handle it.

A simple plan can include:

• A master list of accounts (not necessarily passwords)
• Which accounts should be memorialized, closed, or transferred
• Where important files are stored (photos, documents, contacts)
• Who should be contacted (executor, emergency contact, trusted friend)

Use platform tools like legacy contacts and inactive account settings

Some services let users choose a legacy contact, set an inactivity timer, or specify what happens after a period of no activity. These tools can reduce ToS conflicts because they’re built into the platform’s rules.

If you’re planning ahead, it’s worth checking the settings on major accounts and writing down what you chose so your executor isn’t left guessing.

What to do next (a gentle checklist)

If you’re an executor handling things now, these steps can help you move forward steadily:

1. Gather core documents you’ll likely need (death certificate copy, proof of your role, your ID).
2. Make an account inventory, starting with email, phone, and financial accounts.
3. Stabilize the phone number and key devices to avoid 2FA lockouts.
4. Use official provider forms for memorialization, closure, and data requests.
5. Keep a simple log of actions and confirmations.
6. Preserve what matters (photos, records) before closing accounts, when allowed.

If you’re planning ahead for your own loved ones, the most helpful step is to write down what accounts exist and what you want done with them. Clear instructions—shared with the right person—can turn a stressful situation into a manageable one, without anyone feeling like they have to break rules to do the right thing.

Related Reading

• What to Do If a Loved One Dies With No Digital Plan
• Why You Should Never Store Passwords in a Will
• The Digital Estate Checklist Most People Forget

Organize Your Digital Life Before It Becomes Someone Else's Problem

MyLifeSaved includes a dedicated digital accounts section where you can document your online presence, account locations, and access instructions — without storing sensitive passwords. Start your free legacy plan today.