How to Find a Deceased Person’s Online Accounts
When someone dies, their financial and personal life rarely lives in a filing cabinet anymore. It lives in an inbox, a phone, a password manager, a brokerage app, a half-forgotten PayPal balance, and a dozen subscriptions that keep quietly charging a card. As the executor or surviving family member, you are expected to find, secure, and close all of it, often without a single password and without any list of what existed in the first place. This guide walks through the two problems nobody separates for you: the discovery problem of finding accounts you did not know existed, and the access problem of proving you have the legal right to act on them. It covers the lawful order of operations, the documents each provider demands, the federal law that governs the whole thing, and where careful public-records research and skip tracing close the gaps that the platforms cannot.
The Short Version
Settling a digital estate is two jobs, not one. First, prove your authority: get certified death certificates and, through probate, the letters testamentary or letters of administration that name you as the personal representative, because almost no provider will talk to you without them. Second, discover what exists: secure the person’s phone and computer, work the email inbox as the master key (welcome messages, receipts, and login alerts reveal nearly every account they ever opened), check for a password manager or a digital legacy contact, then pull public records to surface accounts and assets that never sent paper mail. Use each provider’s official deceased-user process to close, memorialize, or request content, and never attempt to log in, guess passwords, or break a provider’s terms. Where the trail goes cold, on an unknown asset, a co-owner you cannot locate, or an heir the estate must reach, lawful public-records research and skip tracing pick up where the platforms stop. This is general information, not legal advice; complex estates warrant a probate attorney.
Watch: Finding a Digital Estate
Discovery, authority, and where research fills the gaps.
Watch Overview
Why This Is Two Problems, Not One
Every other guide blurs them together. Separating them is what makes the job tractable.
Most articles on this topic answer a single question, which is how to close a Facebook or a Gmail account once you already know it exists and you already have authority. That is the easy half. The hard half, the half that keeps executors awake, is everything they cannot see. A modern adult might hold scores of online accounts: a primary email, two or three old ones, banking and brokerage apps, a crypto exchange, payment apps, a cloud-storage locker full of photos, recurring subscriptions, loyalty and airline-miles programs with real cash value, a small side business, and social profiles scattered across a decade. No paper statement ever arrives for most of them. If you do not know an account is there, you cannot close it, claim it, or stop it from billing.
Problem one is discovery: building a complete inventory of what the person actually had. Problem two is authority: proving to each provider that you are the legally appointed person allowed to act, because no reputable company simply takes your word that a customer has died and that you are entitled to their data. The two problems interlock. Authority without discovery means you have the legal right to act on accounts you will never find. Discovery without authority means you can see what exists but cannot lawfully touch it. The order of operations in this guide tackles both, in the sequence that keeps you inside the law the entire way.
First, Establish Your Legal Authority
This is the credential every provider, bank, and court will ask for. Get it before you reach out to anyone.
Before you contact a single platform, assemble the documents that prove you are entitled to act. Order several certified copies of the death certificate from the county or state vital-records office, typically through the funeral home in the first weeks; you will mail or upload one to nearly every provider, and originals get consumed quickly. Then, through the probate court in the county where the person lived, obtain your letters testamentary if there is a will naming you executor, or letters of administration if there is no will and the court appoints you administrator. These court documents are the master credential: they are what a bank, a brokerage, or a major tech company means when it asks for proof that you are the authorized personal representative of the estate.
One critical nuance trips up almost everyone: being named executor does not automatically grant you the right to read someone’s private messages. The federal Stored Communications Act and providers’ own confidentiality policies mean a company like Google or Yahoo will often close an account or release limited content with proof of death and authority, but will not hand over a password or let you log in as the deceased. The framework that governs all of this is the Revised Uniform Fiduciary Access to Digital Assets Act, covered next. For now, the rule is simple: gather death certificates and court letters first, and treat them as the keys that open every lawful door ahead.
The Law That Governs It: RUFADAA
Almost every state has adopted it. It decides what you can and cannot access.
The Revised Uniform Fiduciary Access to Digital Assets Act, known as RUFADAA, is the model law adopted in nearly every state that spells out how an executor, trustee, or agent may access a deceased or incapacitated person’s digital assets. Understanding its priority order saves enormous frustration, because it explains why some accounts open easily and others stay sealed no matter what paperwork you send.
RUFADAA sets a tiered system. At the top sits any online tool the provider offers for naming who gets access after death, such as Google’s Inactive Account Manager or Facebook’s legacy contact. If the person used one of these, that choice controls and overrides everything else, including the will. If no such tool was used, the next authority is the person’s will, trust, or power of attorney, if it expressly grants access to digital assets and electronic communications. If neither exists, the provider’s terms of service govern, and those terms frequently restrict access to the content of private communications. A crucial distinction runs through the whole law: a fiduciary can far more readily obtain a catalogue of communications, meaning the metadata of who contacted whom and when, than the actual content of emails and messages, which the law shields unless the deceased clearly consented. Knowing this in advance keeps you from burning weeks demanding content a provider is legally barred from releasing, and points you toward what you can lawfully get: account closure, asset information, and, where authorized, the catalogue that helps you map the estate.
How to Discover Accounts You Don’t Know About
The inbox is the master key. Work outward from there in this order.
Secure the Devices
Before anything else, locate and physically secure the person’s phone, laptop, and tablet, and do not let them power down into a locked state if they are still open. A logged-in device is the single richest map of a digital life, and many accounts can be recovered through it lawfully once you hold authority over the estate.
Work the Email Inbox
The primary inbox is the master key to the entire estate. Search it for welcome messages, monthly statements, receipts, renewal notices, and login alerts. Nearly every account a person ever opened announced itself by email, so a methodical inbox sweep surfaces banks, brokerages, subscriptions, and apps you would never have guessed existed.
Find the Password Manager
Check whether the person used a password manager such as a browser’s saved-logins vault or a standalone app, and whether it offers an emergency-access or legacy feature. If one exists, it may be the cleanest, most complete inventory of accounts in existence, far better than any list you could reconstruct by hand.
Read the Browser and Bank Trail
Saved bookmarks, autofill entries, and browser history reveal the sites the person used most. In parallel, the last paper or online bank and card statements expose recurring charges, transfers, and merchants that point straight to active subscriptions and financial accounts still drawing money.
Check for a Legacy Contact
Some platforms let users pre-designate who manages their account after death. Apple’s Legacy Contact, Google’s Inactive Account Manager, and Facebook’s legacy contact are the common ones. If the person set one up, that designation may already grant the right person lawful, structured access without any further fight.
Pull Public Records
For accounts that never emailed and never mailed, public records fill the gap. Property, business-registration, court, and UCC lien filings, an obituary’s surfaced details, and lawful reverse research on a known email or phone number can surface an undisclosed brokerage, a side business, or an asset the family never knew was there.
Notice the throughline: every method above is lawful, and none of it involves guessing passwords or impersonating the deceased. You are reading what the estate already left behind and what the public record already holds. When the email trail and the saved logins run out, the public-records layer is where a deceased person’s footprint keeps showing up, and it is the layer most families never think to work. The same reverse-research techniques that help people trace an account tied to an email address apply directly to mapping which platforms a person belonged to.
What Each Major Provider Actually Allows
Every platform handles death differently. Here is the realistic picture.
| Provider | What You Can Get | What You’ll Need |
|---|---|---|
| Google / Gmail | Account closure, and in limited cases some content, but never a password or login. Inactive Account Manager controls if it was set. | Death certificate, proof of authority, a formal request |
| Apple | Access to stored data if a Legacy Contact was named; otherwise a court order is usually required for the Apple Account. | Legacy Contact key, or court order plus death certificate |
| Facebook / Instagram | Memorialize or remove the account. A legacy contact can manage a memorialized Facebook profile within limits. | Proof of death, proof of authority to act |
| Yahoo | Account closure only. Yahoo treats accounts as non-transferable and will not release content or passwords. | Death certificate and a closure request |
| PayPal / Payment apps | Closure and, where a balance exists, release of funds to the estate after review. | Death certificate, letters, estate banking details |
| Banks / Brokerages | Full account information and transfer to the estate. No automated portal; handled by an estate or probate unit. | Certified death certificate, letters testamentary or administration |
Two patterns are worth internalizing. First, communications providers guard the content of private messages tightly, so plan to close or memorialize rather than to read the inbox in full. Second, financial institutions are the opposite: they hold no automated death process, but with proper court letters they will fully cooperate to identify holdings and move them into the estate. Document every contact as you go, noting the date, the channel, the name of the agent, what you sent, and what they promised to review, because you will repeat this dozens of times and a clean log is your proof that the estate was handled diligently.
Where the Search Gets Stuck
These are the dead ends that send families looking for help. Each has a lawful path forward.
No Phone, No Passwords
The device is locked, the inbox is unreachable, and no password manager turns up. The estate has to be reconstructed from the outside, through statements and public records.
A Hidden or Side Account
A brokerage, a crypto exchange, or a small business the family never knew about. Often it surfaces only through a stray charge, a tax document, or a public filing.
A Co-Owner You Can’t Reach
A joint account, a business partner, or a beneficiary listed by name only. The estate cannot settle until that person is located.
A Missing Heir
Probate requires notifying heirs, and one of them moved years ago with no forwarding address. The case stalls until they are found.
Signs of Account Misuse
A login alert dated after the death, a strange transfer, or a new account opened in the person’s name suggests identity theft of the deceased and needs reporting.
An Identity That Won’t Confirm
An account or an asset that may belong to the deceased, but the name, age, or address never quite lines up. It has to be confirmed before the estate can claim it.
How a Lawful Research Request Works
When the platforms stop, this is the work our investigation team does to close the gaps.
People Locator Skip Tracing does not log into accounts, recover passwords, or pull private content; none of that is lawful and none of it is what we do. Our work is the public-records and skip-tracing layer that surfaces accounts, confirms identities, and locates the people an estate has to reach. Here is how a typical request unfolds for an executor or family member.
Confirm the Purpose
You tell us what the estate needs and your role in it. We work only lawful, permissible-purpose matters, so estate administration, locating an heir, or verifying an asset all qualify when you have standing to ask.
Map the Footprint
From whatever you have, a name, an old address, an email, or a phone number, we research the public record to surface associated accounts, businesses, properties, and the identifiers that point to where the person was active online.
Confirm or Locate the People
If an heir, co-owner, or beneficiary must be found, we trace a current, verified location. If an account or asset’s owner is in doubt, we confirm whether it truly belongs to the deceased.
Deliver a Usable Report
You receive an organized, documented summary you can hand to the probate court, the estate attorney, or the provider, so the estate moves forward on solid, verifiable ground.
After You Find an Account: Secure, Don’t Snoop
What to do, and what never to do, once an account turns up.
Discovering an account is not permission to roam through it. Stay inside the lawful lane: with your authority documented, your job is to secure, inventory, and resolve each account, not to read private correspondence the law protects. For financial accounts, notify the institution, freeze further activity, and move the holdings into the estate through its probate process. For subscriptions and recurring charges, cancel them promptly, because a forgotten streaming, cloud, or app subscription can quietly drain the estate for months. For social and email accounts, use the provider’s official process to close or memorialize, following the deceased’s own wishes where a legacy tool recorded them.
Guard against two specific risks. The first is the identity theft of the deceased, sometimes called ghosting, where criminals harvest a death notice and open credit or drain accounts in the person’s name; if you see a login or a new account dated after the death, report it to the credit bureaus and to the FTC right away. You can build a recovery plan at the federal identity theft reporting site, and report broader online fraud against the estate at the FBI’s Internet Crime Complaint Center. The second risk is overreach by you: never use a found password to log in as the deceased, never share account access with people who have no right to it, and when in doubt, ask the probate attorney before you act. The general consumer-protection guidance at the federal consumer information site is a useful reference for families navigating this for the first time.
Who We Help Settle a Digital Estate
Lawful research and skip tracing, for the people responsible for winding up an estate.
Executors
Inventory a full digital estate
Surviving Family
Find accounts no one knew about
Probate Attorneys
Locate heirs and confirm assets
Trustees
Trace beneficiaries to notify
Heir Finders
Verify and locate next of kin
Estate Administrators
Surface undisclosed holdings
Whatever your role, the research is the same: lawful public-records work to find accounts, confirm identities, and locate people. Send us what you have, even if it feels thin, such as a name, a last-known address, an email, or a phone number, and we will tell you honestly what the records can and cannot show. Settling a digital estate often overlaps with our broader skip tracing services, and locating a person frequently starts with the same techniques behind a current-address search. If an account or identity may have been used to deceive or impersonate the deceased, the methods in our guide to confirming whether someone is lying about their identity apply as well. For a legitimate estate matter, an initial locate typically comes back within 24 hours.
Our Commitment
We never log into accounts, crack passwords, or pull private content. We do the lawful research most families never think to use: public records and skip tracing to surface accounts, confirm identities, and locate the heirs and co-owners an estate must reach. Honest, permissible-purpose skip tracing since 2004.
Frequently Asked Questions
How do I find online accounts when I don’t have any passwords?
Work from the email inbox outward. Search it for welcome messages, receipts, and login alerts, which announce nearly every account the person opened. Then check for a password manager, read bank and card statements for recurring charges, and pull public records for accounts and assets that never sent mail. None of this requires guessing a password.
Can I just log in to their accounts if I find the password?
No. Logging in as the deceased can violate provider terms and federal computer and communications law, even if you are the executor. The lawful path is to use each provider’s official deceased-user process with proof of death and your court authority, and to ask the probate attorney before acting when you are unsure.
What documents do providers actually require?
Almost always a certified copy of the death certificate plus proof of your legal authority, which means letters testamentary if there is a will or letters of administration if there is not. Order several certified death certificates early, because each provider, bank, and court consumes one.
What is RUFADAA and why does it matter?
The Revised Uniform Fiduciary Access to Digital Assets Act is the model law adopted in nearly every state that governs how a fiduciary accesses digital assets. It sets a priority order: a provider’s online legacy tool first, then the will or trust, then the terms of service. It also makes a catalogue of communications easier to obtain than the private content of messages.
Will Google or Yahoo give me access to the emails?
Generally not the full inbox. Google may close an account and in limited cases release some content but never a password, while Yahoo will only close the account and releases no content. Plan to close or memorialize communications accounts rather than read them in full, and rely on financial institutions, which cooperate fully with court letters, for asset details.
How do I find a hidden brokerage or crypto account?
These rarely send paper mail, so they surface through indirect signals: a stray charge or transfer on a statement, a tax document, a confirmation email, or a public filing. Where those run out, lawful public-records research can surface an undisclosed business or asset tied to the person, which is the gap our investigation team closes.
Someone may be misusing the deceased’s identity. What do I do?
Act fast. A login or a new account dated after the death can signal identity theft of the deceased. Notify the credit bureaus to place a deceased-person flag, report it at the FTC’s identity theft site, and report online fraud against the estate to the FBI’s Internet Crime Complaint Center. Then secure or close the affected accounts.
What does People Locator Skip Tracing actually do here?
We work the lawful public-records and skip-tracing layer, not the accounts themselves. We help surface accounts, businesses, and assets tied to the deceased, confirm uncertain identities, and locate heirs, co-owners, and beneficiaries an estate must reach. We never log in, recover passwords, or access private content, and we work only legitimate, permissible-purpose matters.
Related Guides
More ways our investigation team can help.
Settling a Digital Estate? Let Us Help You Find It.
We do the lawful research that surfaces hidden accounts, confirms identities, and locates the heirs and co-owners an estate must reach, typically with an initial locate within 24 hours. Contact us to get started.
Start Your Request →
