Digital Assets in an Estate: Inventory, Access, Value, and Transfer

A digital estate is larger than a list of passwords. It may include cryptocurrency, domain registrations, revenue-producing websites, cloud files, photographs, manuscripts, loyalty accounts, subscriptions, devices, and the records needed to find conventional property. Each item raises separate questions: Does it have value? Who owns it? Who has authority to access it? Can it be transferred? What must be preserved before an account changes?

The first task is preservation, not login. Keep devices, email addresses, domain registrations, mobile numbers, and paid storage stable while the executor or other fiduciary confirms authority. A known password may help identify an account, but it does not by itself settle ownership, consent, provider terms, privacy rights, or state law.

This is general U.S. education, not legal, cybersecurity, or tax advice. State versions of fiduciary-access law vary, provider procedures change, and cross-border accounts may add other rules. Use a lawyer licensed in the relevant state for authority questions and a qualified tax professional for valuable digital property.

Separate five questions that are often confused

For every item, answer these independently:

1. Existence: What account, device, file, or right exists?
2. Ownership: Did the deceased own property, share ownership, or only hold a personal license?
3. Authority: Who may obtain information, access content, manage the item, or close the account?
4. Transferability: Can the asset or contract right pass to an estate or beneficiary?
5. Value: Does it have financial, evidentiary, operational, intellectual-property, or sentimental value?

An executor may be entitled to manage an asset without being entitled to read every private message. A family may own a device without being able to decrypt its contents. A purchased digital file may be usable under a license even though the account itself cannot be transferred. Do not collapse these different questions into “we have the password.”

Preserve first and document every action

Before changing an account, photograph the device and record its make, model, serial number, condition, location, and custodian. Keep it powered off or secured if unauthorized access is a concern; do not experiment with passcodes, factory resets, software updates, or recovery tools. Preserve charging cables, hardware security keys, backup drives, and any written recovery information without copying secrets into an ordinary inventory.

Keep a dated action log. Record notices received, people contacted, documents supplied, exports requested, payments maintained, and decisions deferred. If litigation, a business dispute, tax examination, intellectual-property claim, or suspected theft is possible, ask counsel about a formal preservation hold and forensic imaging before anyone opens or alters files.

Build the inventory from evidence

Start with the estate inventory, then add a restricted digital schedule. Sources can include bank and card statements, tax returns, browser bookmarks, app-store receipts, password-manager account notices, domain-renewal invoices, business records, device lists, email headers visible without entering the account, and statements from digital-asset brokers.

Useful categories include:

• email, cloud storage, photographs, and messaging;
• laptops, phones, tablets, external drives, and security keys;
• websites, domains, hosting, email marketing, and advertising accounts;
• cryptocurrency, stablecoins, NFTs, custodial exchanges, and self-hosted wallets;
• social-media, creator, marketplace, and gaming accounts;
• digital publishing, music, video, software, and royalty rights;
• loyalty points, travel rewards, gift balances, and memberships;
• subscriptions and automatic payments; and
• authentication dependencies such as a mobile number or recovery email.

Keep the existence-and-contact inventory separate from recovery phrases, private keys, passwords, and passcodes. Limit access to the secret record and document who holds it.

Map authority before requesting content

The Revised Uniform Fiduciary Access to Digital Assets Act, or RUFADAA, is a model law addressing fiduciary access to online accounts after death or incapacity. States enact and sometimes modify model laws, so the governing state’s current statute (not the model alone)controls.

Under the model framework, an account holder’s direction through a provider’s online tool can receive special priority. Directions in a will, trust, power of attorney, or other record may matter when no qualifying online direction exists. Provider terms can still matter, especially where the user left no direction. The law distinguishes access to a catalogue of communications from disclosure of the content of electronic communications, which generally receives greater privacy protection.

Ask counsel which state law governs, whether the user gave express consent to disclose communication content, what the fiduciary role permits, and what documentation the custodian may require. Do this before asking a provider for “everything.”

A password is not a grant of legal authority

Possession of credentials does not answer whether using them is authorized. Logging in as the deceased can obscure the audit trail, trigger security controls, alter metadata, expose third-party communications, or conflict with provider terms and applicable law. Transactions made inside financial, business, or cryptocurrency accounts may create additional risk.

Use the provider’s fiduciary, bereavement, legacy-contact, or deceased-user process. Submit only the information requested through a verified channel, retain copies, and record the case number. The companion guide Why the Password Is Not the Permission covers the immediate access problem in more detail.

Keep authentication infrastructure alive temporarily

Do not cancel a mobile number, primary email address, cloud-storage plan, domain renewal, website hosting, or password-manager subscription merely to tidy bills. The mobile number or email may be the recovery channel for tax records, banking notices, business systems, and other estate property. A lapse can allow a phone number or domain to be reassigned or data to be deleted under a provider’s policy.

Place necessary charges on a controlled payment method when authorized, document why the expense benefits the estate, and set a review date. Do not continue every subscription indefinitely. The objective is a deliberate handoff or closure after dependencies are known.

Use provider legacy tools precisely

Provider tools differ in both scope and effect. Apple says a Legacy Contact can request access to certain account data using an access key and required death documentation, but purchased media, subscriptions, and Keychain data are among the exclusions. Google’s Inactive Account Manager lets a user choose contacts and selected data to share after inactivity; Google also maintains a separate process for deceased-user requests. Facebook describes a legacy contact as managing a memorialized profile, not logging in as the deceased or reading messages.

These are examples, not universal rules. Save the provider’s current instructions on the date of action. Confirm whether the request seeks data access, account memorialization, transfer of an asset, preservation, or deletion. Those outcomes are not interchangeable.

Treat email as an index, not a free-for-all

Email may reveal accounts, receivables, contracts, tax records, and ownership evidence, but it also contains confidential messages from third parties. The need to locate estate property does not automatically justify unrestricted reading or distribution.

Ask counsel and the provider what level of disclosure is available and authorized. Where possible, use targeted searches, transaction records, account catalogues, or provider exports tied to estate administration. Avoid forwarding entire mailboxes to relatives. Secure any exported material, preserve metadata when evidentiary value matters, and define a retention and deletion decision.

Devices and data are different assets

Title to a phone or computer does not guarantee access to encrypted content. A provider may be able to reset or erase a device without decrypting local data. Conversely, data stored in a cloud account may be available through a legacy process even when a device remains locked.

Inventory device ownership, purchase records, employer management, encryption, backups, and cloud synchronization separately. A business-owned device may contain company information the estate cannot treat as personal property. If the device might contain a wallet key, original creative work, litigation evidence, or regulated client data, use qualified legal and forensic help before altering it.

Cryptocurrency needs a custody map

“Crypto” may mean assets held by a regulated broker or exchange, assets in a self-hosted wallet, interests controlled by a multisignature arrangement, or tokens locked in a protocol. The recovery path depends on custody. An institution may have a formal estate process; a self-hosted wallet may require possession of keys or a recovery phrase. No provider can necessarily recreate a lost private key.

Do not type a recovery phrase into a website, send it by email, photograph it to a cloud account, or give it to an unsolicited “recovery expert.” Document the wallet type, public address where appropriate, custody arrangement, devices, known transactions, and tax records without exposing the secret. For material value, use counsel and a vetted digital-asset specialist operating under a written scope, confidentiality terms, dual-control procedures, and a fee arrangement that does not require surrendering assets.

Digital assets can create tax work

The IRS uses “digital asset” in a narrower tax sense for representations of value recorded on cryptographically secured distributed ledgers or similar technology. It treats those assets as property for federal income-tax purposes. Current Form 706 instructions also identify digital assets as property potentially included in the gross estate and listed on Schedule F when the return applies.

Preserve acquisition dates, units, wallet and exchange records, transaction identifiers, basis information, fair-market-value support at death, and later estate transactions. A transfer between wallets controlled by the same owner is different from a sale or exchange, but fees and subsequent dispositions still need records. Valuation can be difficult for illiquid, restricted, or thinly traded tokens. Coordinate the estate return, fiduciary income-tax return, and beneficiary basis reporting with a professional familiar with current digital-asset rules.

Domains and websites are operating assets

A domain registration is a contractual right that can expire. ICANN explains that a registrant generally has rights to use, renew, restore, or transfer a registered domain; the registrar controls the customer process. Record the registrar, registrant, expiration date, auto-renewal method, registry lock, nameservers, privacy service, recovery contacts, and connected hosting.

Keep a revenue-producing website functioning while ownership and management are resolved. Inventory advertising, affiliate, subscription, ecommerce, analytics, content-management, email, and payment accounts. Separate ownership of the domain from ownership of the site’s code, database, customer information, trademarks, and copyrighted content. If the site belongs to a company, it may not be an individual estate asset even if the deceased administered it personally.

Copyright is distinct from possession of a file

Owning a photograph file, manuscript, video, or hard drive is not automatically the same as owning its copyright. U.S. copyright law states that copyright ownership can be bequeathed by will or pass under intestacy law, and that ownership of copyright is distinct from ownership of the material object containing the work.

For writers, photographers, designers, musicians, software developers, and online creators, inventory registrations, licenses, publishing contracts, royalty statements, assignments, source files, and works in progress. Determine whether rights were personally owned, assigned to a company, licensed, created as work made for hire, or shared with collaborators. Do not publish private or unfinished material merely because the estate possesses a copy.

NFTs may involve several different rights

Ownership of a token does not necessarily convey copyright in the associated image, commercial-use rights, control of an external file, or a promise that the hosting will continue. Review the smart contract where appropriate, marketplace terms, project license, linked storage, and any separate written agreement.

Inventory the token and the underlying rights independently. Preserve evidence of provenance and acquisition cost. Avoid describing an NFT valuation as the value of “the artwork” until an appraiser and counsel have identified exactly what the estate owns.

Loyalty points and media libraries depend on contracts

Airline miles, hotel points, credit-card rewards, game items, gift balances, ebooks, music, and video libraries do not share one inheritance rule. Some programs allow a transfer after death, some permit discretionary accommodation, some charge fees, and some treat benefits as personal or licensed. Program terms and the account’s circumstances matter.

Record the balance and current terms before contacting the provider. Do not create a market value simply by multiplying points by a blog’s estimate. If a transferable balance is material, obtain the provider’s written process and account for fees, expiration, restrictions, and possible tax treatment.

Social accounts require a purpose decision

Choose among preservation, memorialization, limited management, archive, business continuity, and deletion. Consider the deceased person’s recorded wishes, family needs, harassment risk, intellectual-property value, and messages involving other people. A memorialized profile and a downloaded archive serve different purposes.

Do not let multiple relatives issue conflicting requests. Name one authorized contact, keep the provider correspondence, and document the decision. Before deletion, determine whether the account is the only administrator for a business page, advertising account, creator income stream, or community group.

Preserve records needed for ordinary estate work

Digital files may prove title, debt, tax basis, insurance, beneficiary designations, contracts, and business obligations. Prioritize exports of tax returns and workpapers, statements, deeds, loan records, insurance policies, invoices, bookkeeping data, payroll, and correspondence supporting a claim.

Maintain original file formats when possible, note the source and export date, and use read-only copies for working review. A screenshot may be useful but can omit metadata and attachments. If authenticity might be challenged, ask counsel or a forensic professional how to preserve the original and document chain of custody.

Value assets without confusing sentiment and market price

Use separate columns for financial value, replacement cost, operational importance, evidentiary value, and sentimental importance. Family photographs may have little market value but deserve the highest preservation priority. A short domain name may have market value but also be essential to a business. A large follower count may not be transferable or monetizable under the platform contract.

For a material asset, obtain a qualified valuation matched to what is actually owned. Record the valuation date, market or methodology, restrictions, fees, and source data. Do not let a speculative asking price become an estate inventory value without support.

Protect the estate from identity theft and fraud

Death notices and inactive accounts can attract impersonation, account takeover, fraudulent recovery services, and payment redirection. Limit public personal details, secure mail, monitor estate and business accounts, and verify requests through independently obtained contact information. The FTC maintains current identity-theft reporting and recovery guidance.

Change administrative access only under established authority. Use unique credentials for the fiduciary’s new accounts, hardware-based multifactor authentication where appropriate, and separate administrator roles rather than shared passwords. Escalate unexplained transfers, recovery notices, or new-credit activity promptly to the relevant institution, counsel, and law enforcement or reporting channel as appropriate.

Create a controlled decision register

For each item, maintain a row containing:

• asset or account name and category;
• owner and governing contract or document;
• fiduciary authority and state-law question;
• provider contact and case number;
• preservation action and current custodian;
• access requested and access received;
• estimated value and valuation evidence;
• tax records and reporting owner;
• transfer, memorialization, closure, or retention decision; and
• completion evidence and review date.

Do not place passwords, private keys, recovery phrases, full account numbers, or copies of identity documents in the general register. Link to a restricted location instead.

Questions for the estate lawyer and providers

Ask the estate lawyer:

• Which state’s fiduciary-access law applies, and what version is in force?
• Did the deceased give express consent for disclosure of communication content?
• Which items are personal assets, company assets, joint property, licenses, or contracts?
• What authority do the executor, trustee, agent, or beneficiary each have?
• Is a preservation hold or forensic copy needed?
• How should valuable digital assets be appraised and reported?

Ask each provider:

• What official deceased-user or fiduciary process applies?
• What documents and certifications are required?
• Can the account be preserved while the request is reviewed?
• Will you disclose a catalogue, content, an export, or only account status?
• Can an asset or administrator role be transferred?
• What will be deleted, retained, or made inaccessible after the action?

Save the response and the policy version relied on.

Close only after reconciliation

Before closing an account, confirm that valuable content and records were exported lawfully, automatic payments were redirected or ended, administrator roles were transferred, refunds or balances were resolved, tax evidence was preserved, and connected accounts no longer depend on it. Obtain written confirmation of closure or memorialization.

Reconcile the final inventory to the estate accounting. Record items determined to have no transferable value as well as assets distributed or sold. For abandoned or inaccessible property, document the investigation, professional advice, and reason for the conclusion rather than silently omitting it.

The practical standard

A well-run digital estate leaves an audit trail. It shows what existed, who owned it, who had authority, what was preserved, how value was established, which provider process was used, what tax records were retained, and how each item was transferred or closed.

The durable rule is simple: preserve before changing, classify before claiming, and verify authority before accessing. Digital property can disappear through expiration, deletion, or lost keys, but rushed access can create privacy, evidence, security, and fiduciary problems of its own.

Primary sources and further help

• Uniform Law Commission: Revised Uniform Fiduciary Access to Digital Assets Act
• IRS: Instructions for Form 706
• IRS: Digital assets
• U.S. Copyright Office: Copyright ownership and transfer
• ICANN: About lost domain names
• Apple Support: Add a Legacy Contact
• Google Account Help: About Inactive Account Manager
• Facebook Help Center: Legacy contacts
• FTC: Identity theft
• Legal Services Corporation: Find legal help