What Happens to Online Accounts When Someone Dies

The Short Answer: Nothing, Automatically

When someone dies, their online accounts don't close, transfer, or notify anyone. Email keeps arriving. Subscriptions keep billing. Social media profiles stay active, showing birthday reminders to friends who already know the person is gone.

The accounts sit in a kind of limbo until someone actively intervenes — platform by platform, each with its own process, documentation requirements, and timeline.

What Happens by Platform Type

Email accounts stay active until they hit an inactivity threshold or the provider acts on a legacy setting. Google Inactive Account Manager can share or delete selected data after a user-configured period of 3 to 18 months; separately, Google may delete a personal account after two years of inactivity. Microsoft closes Outlook accounts after two years of inactivity and deletes OneDrive data after one year. Yahoo Mail content is deleted after 12 months without mailbox access; the Yahoo account itself may be deactivated after 18 months without sign-in. Until those thresholds hit, the inbox keeps receiving mail — including financial statements, password reset links, and subscription receipts that an executor needs.

Social media profiles remain visible. Facebook shows the person in "People You May Know" suggestions and birthday reminders until someone requests memorialization. Instagram, LinkedIn, and other platforms behave similarly. X (formerly Twitter) does not support memorialization at all — the only option is deactivation and deletion.

Subscriptions keep billing. Netflix, Spotify, Adobe, domain registrations, cloud storage upgrades, app store subscriptions — all of them continue charging whatever payment method is on file. Credit card companies don't proactively cancel recurring charges when a cardholder dies. Each subscription must be canceled individually.

Financial accounts (online banking, investment platforms, PayPal, Venmo, cryptocurrency exchanges) may be restricted once the institution is notified of the death. The access route depends on ownership and beneficiary designations. An executor may need court-issued Letters Testamentary or Letters of Administration; some providers also accept small-estate documents such as an affidavit.

The Legal Barriers

Even with clear intentions from the deceased, executors face two federal laws that limit access:

The Stored Communications Act prohibits email and messaging providers from disclosing the contents of electronic communications to third parties without the account holder's consent. This means an executor with valid probate authority may be able to get a catalog (who communicated and when) but not the message contents unless the deceased authorized disclosure in a will or through a platform tool. The SCA's restriction concerns communication contents, not every file stored online.

The Computer Fraud and Abuse Act criminalizes certain forms of intentional unauthorized computer access. In Van Buren v. United States, the Supreme Court interpreted "exceeds authorized access" to cover access to files or areas a user was not allowed to access, rather than improper use of information the user was permitted to obtain. DOJ's charging policy says a CFAA prosecution may not be brought solely for violating a public website's access restriction in its terms of service. Whether logging in with a deceased person's credentials was authorized depends on the facts, consent, and applicable law.

What Executors Can Actually Do

1. Check for platform legacy tools. Google Inactive Account Manager, Apple Legacy Contact, and Facebook Legacy Contact all provide structured access paths that bypass most legal complications.

2. Keep the phone plan active. Many accounts use two-factor authentication via SMS. If the phone plan is canceled, the executor loses the ability to receive verification codes, which stalls access to virtually everything.

3. Review bank statements. Three months of credit card and bank statements reveal nearly every active subscription and digital account.

4. File formal requests. Each platform has a deceased-user process. Many ask for proof of death; some also require legal proof of authority. Google and Yahoo require a specific US court order for content requests.

5. Work quickly on time-sensitive accounts. Some platforms delete data on a schedule. Microsoft removes OneDrive files after a year of inactivity. Snapchat does not delete accounts after 30 days of inactivity; a deletion request starts a 30-day deactivation period. Families can request deletion through Snapchat's deceased-person support process.

The Digital Estate Toolkit provides the complete platform-by-platform process, including which platforms have hard deadlines, what documents each one requires, and the communication scripts to use when contacting them.