Digital EstateAccountsSuccession2026

How to Set Up a Legacy Contact Before You Need One

A platform legacy contact and an executor's legal authority are two different doors opening two different rooms, and a will is not a key. Most people who try to "sort out" their digital estate conflate the three and end up with a document that names an executor, a platform setting that names a contact, and neither actually able to reach what the other controls. Here is the two-doors model, the ceiling on what a designated contact can usually reach, the setup sequence, and the rule that your master password never goes in the will.

General information only — not legal advice. This page explains the shape of legacy-account mechanisms and the difference between a platform's designated contact and an executor's legal authority, which are broadly consistent ideas. Whether any arrangement is legally sufficient for you, what your provider's policy actually grants, and how your jurisdiction handles digital assets are questions for an estate professional and your provider — not a guide page. Nothing here is a will, and setting up a legacy contact does not replace one.

A single spare key on a plain ring resting on top of a closed blank hardcover book on a clean light surface — The key on the book is the whole confusion in one image: the granted access and the documented instruction are two different instruments, and neither is the other. A legacy contact is the key; the will is the book; pointing the key at the wrong lock is how estates get sealed shut.

Updated September 2026By the AI Help Guide editorial team9 min read

The Conflation

Three Instruments, One Confused Plan

People who care enough to think about what happens to their accounts after they die usually produce a single, well-meaning, structurally broken plan: they write a will that names an executor and says "handle my digital stuff," and perhaps they also tick a "legacy contact" box in one platform's settings, and they consider the matter closed. The problem is that those are different instruments with different powers, and the gap between them is exactly where families end up locked out. The will gives a person legal authority over your estate; the legacy-contact setting gives a person a limited, platform-defined permission over one account; and neither automatically grants what the other does. A executor with a court-granted authority may still find a platform's contractual process demands something else, and a designated legacy contact may find their permission stops at a ceiling the platform drew without asking you.

This page is the living half of the succession pair — the thing you set up while you still control the accounts, so that the bereaved person later has a door that actually opens. Its companion, our closing-after-death guide, is the same door seen from the other side, used by someone who has no password and must rely on documents and legal authority instead. The inventory that feeds both is our survivable-passwords guide. Read this one first, because it is the only one of the three you can do while you are alive and in control.

The Two Doors

A Platform Contact and a Legal Executor Open Different Rooms

The model that dissolves the conflation is to see two doors, not one. They look similar — both are "someone deals with my account after I die" — and both are named in the same breath, which is why people assume they are the same instrument. They are not, and the room each opens is different.

Door 1 — the platform's legacy mechanism

A contractual permission, defined by the providerMost major platforms offer some form of deceased-account or legacy-contact process. It is a term of service: the provider has decided, in advance, what a designated person may do with an account after death, and the scope is whatever the provider wrote — not whatever you intended.

Opens: a limited, predefined set of actions on that one platform's account.

Door 2 — the executor's legal authority

A legal grant, defined by your jurisdictionA will appoints an executor, and in many places a court grant (the precise name and form vary by jurisdiction) is what gives that executor the legal authority to act on your estate. That authority is broader than any single platform's permission — but it is a legal fact, and a provider's process may still ask for its own documents before honouring it.

Opens: authority over the estate — but reaching a specific account may still require Door 1's paperwork.

The question	Door 1 — platform contact	Door 2 — legal executor
Who defines the scope?	The provider, in its terms of service	Your jurisdiction's law, via the grant
What does it cover?	One platform's account, a predefined set of actions	The estate broadly, subject to law
How is it set up?	A setting inside the account, while you live	A will and, usually, a court process after death
Can it be blocked by the other?	No — it is the provider's own path	Sometimes — a provider may still require its policy steps
Does one replace the other?	No	No — you generally need both

The seam in the bottom-right cell is the whole reason this page exists: an executor's legal authority does not magically compel every platform to hand over every account on demand, and a platform's legacy-contact permission does not give the designated person authority over anything the provider did not predefine. So the careful plan sets up both doors and makes sure the executor and the legacy contact know about each other, because the person holding Door 2's authority will often need Door 1's mechanism to actually open a specific account, and vice versa. Treating them as one instrument is how a well-intentioned will produces an executor who legally owns the estate and practically cannot get into the email that holds the keys to everything else.

The Ceiling

What a Designated Contact Can Usually Reach — and the Hard Cap

The second conflation is inside Door 1 itself: people assume a legacy contact gets "my account," and in reality they get a capped subset the provider chose. The ceiling below is deliberately general, because the exact line differs by platform and moves over time — the only authoritative answer for your account is the provider's own description of the feature. What matters is the shape: a designated contact's power is bounded, and several categories of thing you might assume are included are commonly outside the cap.

The ceiling — a platform contact's power is predefined by the provider, not unlimited

Usually within reachActions the provider has explicitly granted: memorialising the account, managing a profile image or a short public message, responding to new contact requests, and in some cases downloading a defined subset of the account's data.

−

Often outside the cap: encrypted or protected contentEnd-to-end encrypted messages and content the provider cannot decrypt are frequently beyond a contact's reach, because the platform itself cannot hand over what it cannot read.

−

Often outside the cap: financial and payment dataAccounts holding money, cards, or payment instruments are commonly governed by separate, stricter processes than a social legacy contact, and a contact's permission rarely extends to them.

−

Often outside the cap: the private contents of messagingFull message histories are a frequent exclusion even where a profile can be memorialised, because the provider has drawn the line at public-facing management.

−

Outside the cap by definition: other platformsA legacy contact on one service governs that service only. It is not a universal key; each account needs its own Door 1, or the executor's Door 2.

The ceiling's practical lesson is that a legacy contact is a targeted instrument, not a general one: it is worth setting up on the platforms where its predefined actions match what you actually want someone to be able to do (memorialising a beloved social profile, for instance), and it is the wrong instrument to rely on for the accounts that hold money, encrypted correspondence, or anything the provider has capped out of reach. For those, the executor's legal authority (Door 2) and a clear inventory (our survivable-passwords guide) are the real tools — and the contact setting, where it exists, is a convenience layered on top, not the plan itself.

The mirror of the security guide: the account is the perimeter — from the other side. Our smart-home security guide argued that for most connected products the real trust boundary is the account, and its fear was intrusion: someone getting in. This page holds the same object and fears the opposite: the door sealing shut, and no one getting in. The account that 46 told you to lock with two-factor authentication is the same account that, without a succession plan, becomes unreachable the moment you cannot unlock it yourself — and 2FA, the very thing that keeps attackers out, is the thing that can keep your executor out if they have no second factor. The discipline is identical (the account is the perimeter) and the risk is inverted (46 feared the wrong person in; this fears the right person out). Which is why the break-glass path in our survivable-passwords guide is not a weakening of 46's advice but its completion: you secure the perimeter and you decide, in advance and under calm, who may knock.

The Setup Sequence

Do This While You Still Control the Accounts

Legacy-contact setup is a living-person task, and the order matters because each step depends on the one before it. The sequence below is the disciplined version, and the "why now" on each step is the reason it cannot be deferred to the executor: these are actions that require your logged-in control, which will not survive you.

Build the inventory firstYou cannot designate a contact for an account you have not listed. Start with the category sweep in our survivable-passwords guide and write down what exists, where, and which door each account needs.

Why now: only you know the full list, and it is the raw material for every later step.

Choose the mechanism per account, not globallyFor each account, decide whether Door 1 (a platform legacy contact, where the provider offers one and its ceiling matches your intent) or Door 2 (the executor's authority, for financial, encrypted, or capped accounts) is the right instrument. Some accounts want both.

Why now: the choice depends on what each provider's feature actually grants — read its own description, do not assume.

Designate, and tell the person you designatedSet up the contact inside the account while you are logged in, and — the step almost everyone skips — tell the designated person they have been designated, and where to find the inventory. A contact who does not know they are one is a door nobody knocks on.

Why now: designation is a logged-in action, and the conversation that makes it real is a living one.

Record the plan in the will's instructions, not its termsYour will should appoint an executor and, in a separate letter of wishes or instruction, point to the inventory and the designated contacts. Keep the secret out of the document; keep the map in the instructions. See the rule below on why the distinction is not pedantic.

Why now: the will is the legal door; the instructions are the bridge to the platform doors, and both are written by you.

Test the path and set a review cadenceConfirm the designated person could actually find and use the mechanism (a dry run of "where would you look?"), and review the whole plan on a fixed cadence — accounts are added and closed, contacts move, providers change their features.

Why now: a plan that is never tested is a hope, and a plan never reviewed rots as quietly as a password list.

The sequence's logic is that every step is a logged-in, living action, which is precisely why it cannot be delegated to the moment of death. The executor inherits Door 2; you must open Door 1 yourself, now, on each account, and tell someone where the keys hang. Step 4's separation of instructions from terms is the bridge to the rule below, and it is the single most consequential line on the page.

The rule with teeth: your master password never goes in the will. This is the non-obvious instruction that prevents a real, irreversible exposure, and it has two independent reasons. First, in some jurisdictions a will becomes part of the public probate record once it is filed, so a secret written into its terms can be read by strangers — a fact that varies by place and that you must check with a professional, but whose direction is clear enough to act on conservatively. Second, a static master password written down defeats the entire security model of the password manager it unlocks, which is the discipline our account-security guide exists to protect. The correct pattern is the one step 4 encodes: the will and its instructions point to a secured break-glass path — commonly a password manager's emergency-access feature, which lets a designated person request access after a waiting period you set, revocable while you live — rather than containing the secret itself. Record the map and the pointer in the instructions; keep the key in the break-glass. Check your jurisdiction and your manager's own documentation, because the safe pattern depends on both.

A worked example: the tidy will that sealed three accounts shut

Concretely, the two-doors model and the ceiling catching a plan that looked complete. A person writes a careful will, names their partner as executor, and adds a line: "my partner should have access to all my digital accounts." They also set a legacy contact on one social platform, because that platform prompted them to. They consider the digital estate sorted.

After the death, three failures appear, each from a different conflation. Failure one, the wrong door for the room: the executor's legal authority (Door 2) is real, but the email account — the one that holds password-reset links for everything else — has no legacy-contact mechanism the person set up, and the provider's deceased-account process asks for documents the executor must now obtain, a delay that locks the partner out of the very account that unlocks the rest. The will's broad instruction did not open the specific door. Failure two, the ceiling mistaken for a key: the one platform where a legacy contact was set up granted memorialisation and a limited data download — but not the full message history the partner wanted, because that sat above the provider's predefined ceiling. The contact did its job; the job was narrower than assumed. Failure three, the secret in the public document: had the person written their master password into the will "to be helpful," and had their jurisdiction filed wills publicly on probate, the single line meant to assist would have exposed every account the manager protects. The rule above exists to prevent exactly this.

The corrected version is the sequence: an inventory that lists each account and names which door it needs; a legacy contact set up only where the provider's ceiling matches the intent (the social profile), and the executor's authority relied on for the capped and financial accounts; the designated people told they are designated and pointed to the inventory; the will's instructions mapping all of it while the secret lives in the manager's emergency-access break-glass; and a tested, reviewed plan rather than a hopeful one. The will was never the problem. Treating one instrument as if it were all three was.

The Check

A Sensible Default

Hold the model: a platform contact and a legal executor are two doors, and a will is not a key.
You generally need both doors, and they must know about each other.
A designated contact's power is capped by the provider — encrypted content, financial data, and full messaging are often outside it.
A legacy contact is per-platform; it is not a universal key, and it is not a trusted contact.
Run the sequence while you are logged in: inventory → per-account mechanism → designate and tell them → record in the instructions → test and review.
Your master password never goes in the will; point to a break-glass instead, and check your jurisdiction.
Remember the mirror: 46 feared intrusion; this fears the door sealing shut — same perimeter, opposite risk.
Feed every step from the inventory in our survivable-passwords guide; you cannot bequeath the unknown.

The honest takeaway is that a digital estate is not one instrument but a small system of doors, and the living half of the work — the half only you can do — is opening the platform doors, capping your expectations to what each provider actually grants, and pointing your executor and your designated contacts at a map that exists. The will gives legal authority; the legacy-contact setting gives a bounded permission; the inventory gives both something to act on; and the break-glass gives the passwords a survivable path that does not require writing a secret into a document that may become public. For the bereaved side of the same door, see our closing-after-death guide; for the inventory that feeds both, see our survivable-passwords guide; for the account-security discipline this page completes rather than weakens, see our password-manager guide and our smart-home security guide; and for the legal door itself, which this page can describe but never decide, see an estate professional in your jurisdiction.

Two plain identical wooden doors side by side in a sunlit hallway, the left one slightly ajar — The two identical doors are the two-doors model made physical: they look alike and are named alike, but they open different rooms, and one being ajar does not mean the other is unlocked. A plan that assumes they are the same door is a plan with a sealed room in it.

Common Questions

Frequently Asked Questions

Does a legacy contact replace a will?

No, and conflating the two is the central mistake this page exists to prevent. A legacy contact is a platform-level permission that lets a designated person do a limited, predefined set of things with one account after your death. A will is a legal instrument that directs your whole estate and appoints an executor with legal authority. They open different doors to different rooms, and you generally need both.

What can a legacy contact actually do?

It varies by platform and changes over time, so the providers own description is the only authoritative answer for your account. Broadly, a designated contact is usually granted a limited, predefined set of actions rather than full control, and things like encrypted content, financial data, and the private contents of messaging are often outside the contacts reach. Treat the contacts powers as capped by the platform.

Should I put my passwords in my will?

Generally no, and this is the non-obvious rule with real consequences. In some jurisdictions a will becomes part of the public probate record once it is filed, so a secret written into it can be exposed to strangers. The safer pattern is to point to a secured break-glass path, such as a password managers emergency-access feature, rather than to write the master password itself into a document that may become public.

Is a legacy contact the same as a trusted contact?

No, and the names are confusingly similar. A platform legacy contact governs what happens to an account after your death. A trusted contact, in the sense some financial institutions and password managers use, is a live person the institution may contact if it suspects you are vulnerable or incapacitated while you are still alive. They are different instruments for different situations.

I set up a legacy contact on one platform. Is my digital estate sorted?

No — that is one door on one room. A legacy contact is per-platform and per-provider-ceiling, so it governs only that account and only the actions that provider predefined. The accounts it does not cover, and the capped things it cannot reach, still need the executor's legal authority and a clear inventory. One setting is a beginning, not a plan.

My executor has a court-granted authority. Can they get into every account?

Not automatically. Legal authority over the estate is broader than any single platform's permission, but a provider's contractual process may still require its own documents and steps before it opens a specific account, and some things sit above a platforms ceiling regardless. The seam between legal authority and provider policy is exactly why you set up Door 1 while you live rather than relying on Door 2 alone after.

How often should I review the plan?

On a fixed cadence you actually keep — annually, or at any life event that changes accounts, relationships, or providers. Accounts are opened and closed, designated people move, and providers change what their legacy features grant, so a plan that is set once and forgotten rots as quietly as an unreviewed password list. The review is step 5 of the sequence, and it is the step most plans skip.

Ask our AI. Sorting out your digital estate? Tap the chat icon and tell us which accounts matter most and what you have already set up, and it can help you sort each one into Door 1 or Door 2, flag the ones whose provider ceiling will disappoint a designated contact, and point you to an estate professional for the legal door this page can describe but never decide.

More digital-estate & succession guides like this

We treat a digital estate as a small system of doors rather than one instrument — a platform contact and a legal executor open different rooms, a designated contacts power is capped by the provider, and the master password belongs in a break-glass, never in a will.

Explore All Guides