Digital Accounts & Passwords During an Estate Cleanout: What Executors Need to Know

What New Jersey's Digital Assets Law Actually Covers

New Jersey has adopted the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), which governs whether an executor, trustee, or agent under a power of attorney can access a deceased person's online accounts. It defines "digital assets" broadly — email, social media profiles, cloud storage, domain names, blogs, photos and videos posted online, music and media libraries, and virtual currency accounts are all covered.

The Limitation Most Families Don't Expect

Being named executor doesn't automatically open every account, and this is where the law surprises people:

• Explicit authorization is required for a fiduciary to access digital assets — through the platform's own online tool, language in a will or estate plan, or a power of attorney that specifically addresses digital access
• Without that authorization already in place, an executor's access can be legally limited even with a valid court order
• The content of actual electronic communications — the body of emails, chat logs, private messages — has an even higher bar: providers generally only have to disclose that content if the deceased explicitly consented to it in advance
• What's usually easier to obtain, even without prior authorization, is a catalog of an account's existence and basic account information — not necessarily its contents

Platform Tools That Matter More Than People Realize

Because the law leans so heavily on prior authorization, the tools built into major platforms end up mattering more than most estate planning conversations account for:

• Google's Inactive Account Manager lets someone designate a trusted contact and set what happens to their data after a period of inactivity — but only if it was configured before death
• Facebook and Instagram allow a Legacy Contact to be named in advance, which can memorialize or manage a profile afterward within Meta's own rules
• Apple's Digital Legacy program lets someone name Legacy Contacts who can request access to account data with a death certificate and an access key generated in advance
• None of these can be set up retroactively — if a person didn't configure them while alive, an executor is left relying on the estate-law process instead, which is slower and doesn't guarantee full access

A Practical Approach for the Cleanout

Given the legal limits, the realistic goal during a cleanout is usually damage control and closure, not full access to everything:

• Start with financial and utility accounts — banking, credit cards, subscriptions charging a card, utilities tied to the home — since those have the most immediate practical impact on the estate
• Check for a password manager on the deceased's computer or phone; if one exists and is accessible, it can save enormous time compared to resetting access account by account
• Cancel recurring subscriptions early to stop ongoing charges to the estate, even before full account access is sorted out — most providers have a straightforward "account holder is deceased" cancellation path that doesn't require full login access
• For social media, most platforms let a family member request memorialization or removal with a death certificate, without needing full account access first
• Don't assume you're legally entitled to log in and read someone's email or private messages just because you're the executor — that's exactly the piece RUFADAA restricts most tightly

When to Loop In an Estate Attorney

If a meaningful asset lives inside a digital account — cryptocurrency, a monetized YouTube channel or blog, a domain name with commercial value, or funds in an online-only bank — that's worth handling with an estate attorney rather than trying to sort out informally. The stakes and the legal requirements are higher than a typical email or social media account, and the consequences of getting the transfer wrong can be harder to undo than a missed subscription cancellation.