Your Passwords Aren't Your Plan. Here’s What Your Family Needs.
"Mom, where do I find that?"
It's a simple question, until you're the one who can't answer it. Picture your partner, your sister, or your grown child at the kitchen table with your laptop open, a past-due bill in hand, and no idea which email address unlocks which account.
If you suddenly couldn't manage things yourself, the people you love would feel it fast. The mortgage still needs paying. The insurance portal still wants a login. Your business still has clients. I want to talk about that gap, not to scare you, but because it's one of the easiest parts of planning to put off- and one of the kindest to take care of.
Start with what your family would need first
You don't need to catalog every app on your phone. Start with the accounts tied to your family's real, everyday life: email, banking and bill pay, cloud storage, your phone account, insurance, retirement accounts, digital photos, and anything connected to a business you run.
When I sit down with clients, I'm not asking them to become cybersecurity experts. I ask one question: if you couldn't respond tomorrow, what would the person stepping in need to find first?
A password on a sticky note doesn't answer that. It doesn't tell anyone which accounts exist, what they're for, or what you'd want done with them.
Knowing your password isn't the same as having permission
I hear this one a lot: "My husband knows all my passwords, so we're fine." I understand why it feels that way. But every provider has its own terms and security rules, and logging in as you isn't the same as having legal authority to act for you.
California does have rules about who can access digital accounts and when — but they're narrower than most people expect, especially when you're still living but can't manage your own affairs. Email and private messages are often treated differently from a bank balance or a stored file.
So here's what I recommend. Pair your account list with a current estate plan, the right people named in it, and clear instructions for the accounts that matter most. Then check whether each important provider offers its own emergency-access, legacy, or authorized-user option, and note which ones you've set up.
The settings inside your accounts are part of your plan too
Your plan doesn't only live in the binder on your shelf. Some of it lives inside the apps themselves.
Google, Apple, banks, and other providers have tools that let you name someone in advance. Depending on the account, a choice you make in one of those tools can carry more weight than what your will or trust says. That surprises a lot of people.
Here's a real-world example. Apple's Legacy Contact feature gives a person you choose access to certain data after you die — but Apple says that person can't see passwords, passkeys, or payment information stored in iCloud Keychain. Even Apple is telling you: passwords aren't the plan.
Incapacity is its own question. If you want the person named in your power of attorney to handle online accounts while you're alive but unable to act, the wording of that document matters. A generic, fill-in-the-blank power of attorney may not do the job. A few questions worth asking now:
Does my power of attorney specifically address digital assets and electronic communications?
Does the person I chose know which provider tools I've already set up?
Do they know where my secure account list lives?
You don't have to solve every tech issue to answer those. You just need the legal role and the practical system to work together.
Please don't put your passwords in your will
After death, a will can become part of a public court record. That makes it exactly the wrong place for passwords, recovery codes, or security questions.
Instead, keep a secure inventory separate from your will — a reputable password manager or another protected system. It can be simple: the type of account, where it's held, why it matters, and who should be contacted. Keep the login details protected, and update the list when you switch phones, change providers, or your family situation shifts.
The goal is to make important information findable without making it vulnerable.
Start small. Really.
I know this topic can feel endless. Hundreds of accounts, constant password resets, and a nagging sense that you'll deal with it "someday."
Please don't let perfectionism be the reason nothing happens. Start with the five accounts that would cause the most trouble if no one could find them. Then tell one trusted person where your list lives. That's a real first step.
Your one-hour assignment
Pick one hour this week. Choose one category- household bills, insurance, or family records- and jot down the online accounts your family would need if you couldn't manage them. Tell one person you trust where you keep that list. Then bring it to your next planning conversation with me.
