Her account is personal, so I can't independently verify it. The planning lessons she draws are practical, though, and most can be checked against what the providers themselves say. Some of her claims hold up. At least one is out of date. This piece covers both.
Why a death certificate isn't a master key
The most useful point in Yee's story is that a death certificate opens fewer doors than most people assume. Her friend's mother could close his phone account with one, but couldn't recover the number. His billing was month to month, and the cards were cancelled once the banks saw the certificate. His Final Fantasy XIV subscription lapsed, and his decorated in-game home was reclaimed. His photos stayed out of reach.
Providers set their own rules. Some offer a pre-arranged legacy route. Others say no unless a court orders otherwise. The planning has to happen while you're alive.
Step 1: Give someone a route into your password manager
Yee's friend used Apple Passwords, so nobody could reach his credentials without his Apple account password. She says several password managers, including LastPass, Bitwarden, NordPass, RoboForm and Proton Pass, offer emergency access, and that some of them reserve it for paid plans. I checked the two I could verify:
- LastPass: You invite a trusted person by email and set a wait time. That is the window between their access request and approval, and access is granted if the request isn't denied within it. Wait times are the account holder's choice, so the contact can have access immediately or after a delay.
- Dashlane: Yee says it has no formal emergency feature and tells users to share their vault password. Dashlane's current support page describes something different. It walks you through exporting an encrypted DASH file protected by a separate password you create. It says that password should differ from your Master Password, so your contact can't get into the account before an emergency. The page was updated October 9, 2026. The file doesn't update itself, so you have to re-export it whenever your logins change.
- 1Password: The Emergency Kit is a PDF with your sign-in address, email, Secret Key and a place to write your account password. 1Password suggests keeping a printed copy in a safe place and giving a copy to someone you trust, such as someone named in your will. If your administrator has turned off Emergency Kits, or you unlock with SSO, you can't save one.
The takeaway: pick a method on purpose, tell your contact it exists, and test it. A handed-over master password exposes the whole vault, and a written copy goes stale when you change it. If you'd like some accounts to stay private, Yee's suggestion of a smaller, maintained set of essential credentials is sensible.
Step 2: Set up legacy access for your email and cloud
Yee calls the primary email account the "linchpin" of a life. It held the trail to banking, medical records, deliveries and subscriptions. What each provider offers differs.
Google
Inactive Account Manager lets you pick up to 10 people to receive data, share all or only specific data types, and give different people different data. Google judges inactivity from sign-ins, My Activity, Gmail usage and Android check-ins. If you set no plan, Google reserves the right to delete an account that has been inactive across Google for at least two years.
Apple
Apple's Legacy Contact requires the access key generated when you chose the contact, plus a death certificate. The contact doesn't need an Apple Account or device. You do need iOS 15.2, iPadOS 15.2 or macOS Monterey 12.1 or later to set it up. Shareable data can include photos, messages, notes, files and device backups. It excludes iCloud Keychain data (payment information, passwords and passkeys) and purchased media and subscriptions. Yee also says contacts get access for up to three years. I couldn't confirm that figure in Apple's documentation, so treat it as unverified.
Microsoft
This is the section where Yee's story is dated. She writes that Microsoft lacks a comprehensive legacy contact policy and offers OneDrive legacy access only. Microsoft's current documentation does describe a first-party OneDrive feature, Digital legacy, though it covers files and photos only, not the account itself.
To set it up:
- Sign in at onedrive.com, then go to Settings > Digital legacy.
- Enter your trusted contact's email and select Invite.
- The contact opens the invitation, signs in, goes to Digital legacy and selects Accept.
- You select Get code and share it securely.
- When the time comes, the contact selects Request access, enters the code and waits 72 hours.
The contact must have a Microsoft account. Files are read-only, though downloaded copies can be edited. The code doesn't change or expire, so Microsoft says you can share it straight away, write it in your will, or give it to a lawyer or executor. You'll be copied on the emails to your contact, but you don't have to respond.
If you skip this, the outcome is stark. Microsoft says it is generally unable to provide information to non-account holders. Accessing personal email or OneDrive content requires a valid subpoena or court order served on Microsoft first, and even that doesn't guarantee release. Germany and China have separate documentation routes.
The clock matters too. According to Microsoft:
- Outlook.com and OneDrive accounts are frozen after one year, and email and files are deleted shortly after.
- Microsoft accounts expire after two years of inactivity.
- Microsoft says you can stop subscriptions by closing the customer's bank account or credit card.
These are provider policies and can change, so check them directly.
Step 3: Make the phone and carrier reachable
Yee's friend's phone held his contacts, which would have made notifying people far simpler. It also held two-factor codes. She recommends making two things accessible: the phone passcode and the password for the carrier account. With the carrier login, loved ones can change the billing and keep the number alive while they wrap up affairs.
This is a planning choice, not an entitlement. Carrier policies and account authorization rules vary, and I haven't verified any one carrier's process. Don't use a single phone number as the only recovery path for critical accounts. If you want something kept private, name one person to handle it, as Yee's friend informally did.
Step 4: Plan for the PC, and the BitLocker problem
This is the Windows part. Yee's friend had a MacBook and a gaming PC, and she was locked out of both. She suspects he'd turned on BitLocker, which would block pulling data straight off the drive.
Microsoft's documentation says Device Encryption turns on automatically when a supported device is set up with a Microsoft or work/school account, and ties the recovery key to that account. A local-account setup doesn't enable it automatically. You can check at Settings > Privacy & security > Device encryption.
Where the recovery key might be
The key is a 48-digit number, and where it lives depends on how the PC was set up:
- Personal Microsoft account: Sign in from another device and check the account's BitLocker recovery key page. The list shows a device name and a Key ID, and the 8-character ID shown on the recovery screen tells you which key to use.
- Work or school account: An organization may hold the key. The employer's IT team, or the Intune Company Portal on managed devices, is the route.
- Printed or saved copies: Check for a printout among important papers, or a text file on a USB drive.
- Someone else's account: If another user set up the device or activated BitLocker, the key may be in that user's Microsoft account.
There is no back door. Microsoft Support cannot retrieve, provide or recreate a lost BitLocker recovery key. The key is tied to the account that was used when encryption was enabled, which is not necessarily the one signed in today. If it can't be found, the data stays locked.
A note for corporate hardware
Yee mentions dealing with her friend's corporate equipment. Treat a work laptop as the employer's property. Its recovery key and contents may be controlled by the company's admins, and getting in on your own is the wrong move. Call the employer's IT department.
What to leave behind
Yee's two items are the computer's sign-in password and a copy of the encryption recovery key. Add the Microsoft account route too. Even without a clean way into the files, she notes that a PC where someone is still logged in can be an alternate way into other accounts. That's a fragile way to depend on getting in, so plan for it rather than hoping for it.
Bonus: the paperwork
Yee's last section is the least techy and arguably the most important. Leave a will, scan it to a shared cloud folder, and print a copy somewhere obvious. Write last directions covering what to keep, what to hide from relatives, and what to give to friends. Include pets, plants and commitments. Save and print those as well. She adds that a short note saying you're sorry you're gone would be a kind touch.
This is her advice, not legal guidance. A digital setting or a note should complement a valid will, not replace it. Consider an estate attorney, particularly because laws on access to a dead person's accounts vary by place.
One caution on "put it in a shared cloud folder": a will is fine there, but passwords and recovery keys are not. Share credentials through a controlled method, such as a password manager's emergency feature, a sealed printout, or a safe-deposit box.
A quick checklist
- Choose your password-manager emergency route and tell your contact.
- Set Google Inactive Account Manager, Apple Legacy Contact and OneDrive Digital legacy as relevant.
- Record your phone passcode and carrier account login securely.
- Store your PC sign-in details and BitLocker recovery key somewhere a trusted person can reach.
- Write a will and last directions, and put copies where they'll be found.
- Revisit it all yearly, because stale credentials strand your people.
None of this is glamorous, and the cost is an afternoon. The alternative, as Yee's story shows, is a grieving family guessing at passwords.
A note on sourcing: PCWorld's article carries a Keeper Password Manager promotion. That promotional material isn't evidence for any advice here. The provider details above come from the companies' own support pages and may change.