Finding Passwords for Deceased Accounts

It started with a frantic call from Emily. Her father, Raymond, had passed unexpectedly, leaving behind a complex digital life – dozens of accounts, most of which she knew nothing about. She needed access to his online banking to pay his medical bills, but she couldn’t find the passwords anywhere. The cost? Not just the immediate bills piling up, but a potential $1,000 penalty for late payments, plus the escalating stress of a probate court demanding a full accounting.

This is a shockingly common situation. People accumulate digital assets – bank accounts, social media, email, investment platforms, cryptocurrency, subscription services – and rarely leave clear instructions for accessing them after death. Unlike a physical key to a safe deposit box, passwords are inherently ephemeral and prone to being lost or forgotten. As an Estate Planning Attorney and CPA with over 35 years of experience, I’ve seen this create significant hurdles for executors and administrators. The problem isn’t just the lack of access; it’s the legal and financial exposure that can arise.

What Legal Authority Do I Have to Access These Accounts?

This is the first question every executor asks. Simply wanting access isn’t enough. You need legal authority granted by the court. Generally, this means being appointed as the Personal Representative through the probate process. Once Letters Testamentary (or Letters of Administration if there was no Will) are issued, you have the legal power to manage the decedent’s assets, including their digital ones. However, this authority doesn’t automatically grant you a free pass to hack into accounts. The law expects you to act reasonably and ethically.

What Steps Can I Take to Gain Access?

Begin with what Raymond did leave behind. Look for password managers (LastPass, 1Password, Dashlane), notes on a computer or phone, or even a physical notebook. Check common places: a labeled envelope, a trusted friend or family member he may have confided in. If you find a password list, proceed cautiously. Don’t assume it’s complete or current.

If a straightforward list isn’t available, you need to contact the service providers directly. Each platform (Google, Facebook, banks, investment firms) has its own procedures for dealing with deceased account holders. Most will require a copy of the Letters Testamentary, a death certificate, and a formal request. Be prepared for a lengthy verification process, often involving multiple forms and notarized documents. As a CPA, I strongly advise creating a spreadsheet to track these requests, dates of contact, and response times. This becomes critical for your eventual estate accounting.

How Does the Notice of Proposed Action (NOPA) Apply Here?

If you have full authority under the Iowa Estate Administration Code (IAEA), you can often take actions without a court hearing, but you MUST mail a ‘Notice of Proposed Action’ to all interested parties 15 days before taking the action. If no one objects, you are protected from future liability. In the context of digital assets, this means notifying beneficiaries that you are attempting to access and manage these accounts. This is especially important if the accounts contain personal information or potentially sensitive data.

What About Accounts with Two-Factor Authentication?

Two-factor authentication (2FA) adds an extra layer of security, making access even more difficult. If Raymond used an authenticator app (Google Authenticator, Authy), you’ll likely need access to his smartphone or a backup recovery code. If the phone is inaccessible, many providers offer account recovery options, but these usually require proving identity and answering security questions. Some platforms may allow you to designate a recovery contact, which could streamline the process, but this is rare.

What if I Simply Can’t Recover Access?

Sometimes, despite your best efforts, access remains impossible. This is where things get tricky. You have a fiduciary duty to account for all of Raymond’s assets, even those you can’t access. In these situations, document your attempts thoroughly. Include screenshots of failed login attempts, copies of correspondence with service providers, and a detailed explanation of why access was denied. You may need to petition the court for guidance.

What Happens with the Cash in These Accounts?

Probate Code § 9700 states that estate funds must be kept in insured accounts (FDIC) within California. You generally cannot invest in risky assets or commingle estate money with personal funds. Doing so is a breach of fiduciary duty. Once you gain access, immediately transfer the funds into a designated estate checking account. Avoid using these funds for personal expenses, even temporarily.

How Long Do I Have to Close the Estate?

Probate Code § 12200 states that an executor has one year (12 months) from the date Letters are issued to close the estate. If a federal estate tax return is required (rare under the 2026 OBBBA $15M exemption), this extends to 18 months. If you cannot close by then, you MUST file a Status Report to explain the delay. Failing to close in a timely manner can result in court sanctions and potential removal as executor.

What Information Should I Keep Confidential?

The Confidential Supplement (Form DE-147S) states that social security numbers and birth dates should never be placed in the public court file. They belong on the Confidential Supplement to Duties and Liabilities, which is seen only by the court clerk and judge. Protect Raymond’s privacy by redacting sensitive information from any publicly filed documents.

What determines whether a California probate estate closes smoothly or turns into litigation?

Success in probate court depends less on the size of the estate and more on the accuracy of the petition and the behavior of the fiduciary. Whether the issue is a forgotten asset, a contested creditor claim, or a disagreement among siblings, understanding the procedural triggers for court intervention is the best defense against prolonged administration.

A stable probate administration outcome usually follows from clarity, consistency, and readiness for court review, especially when multiple stakeholders and competing interpretations are involved. When documentation supports enforcement and timelines are respected, families are less likely to face preventable escalation.

Verified Authority on Probate Case Management

• Mandatory Closing Timeline: California Probate Code § 12200 (Time for Closing)
  The clock starts ticking the day Letters are issued. You have 12 months to close the estate (or 18 months if filing a federal tax return). If you miss this deadline, you must file a Status Report of Administration to explain the delay to the judge, or face potential sanctions.
• Notice of Proposed Action (NOPA): California Probate Code § 10580 (IAEA Powers)
  This is the executor’s most powerful case management tool. It allows you to sell cars, abandon worthless property, or compromise claims without a court hearing, provided you give beneficiaries 15 days’ notice and receive no written objections.
• Inventory & Appraisal: California Probate Code § 8800 (Filing Deadline)
  Effective case management relies on knowing what you have. The law requires the Inventory and Appraisal to be filed within 4 months of appointment. This document lists every asset and its value as of the date of death, serving as the baseline for all accounting.
• Duty to Deposit Money: California Probate Code § 9700 (Estate Funds)
  The Personal Representative has a strict fiduciary duty to keep estate cash safe. Funds must be deposited in insured accounts (banks or trust companies authorized in California). Keeping cash in a personal safe or a non-interest-bearing checking account for too long can result in a surcharge.
• Change of Address: California Rules of Court 2.200
  A simple but critical management task. If the administrator, executor, or attorney changes their mailing address or email, they must file a Notice of Change of Address (Form MC-040) immediately. The court sends hearing notices by mail; “I didn’t get the letter” is not a valid defense in probate court.
• Duties & Liabilities Form: Judicial Council Form DE-147
  Before Letters are issued, every personal representative must sign this form acknowledging they understand their duties. It serves as a permanent record that you were warned about commingling funds, tax deadlines, and the requirement to keep accurate records.