The accounts that connect your digital life

One account can have several jobs

Think about a familiar email address. It may be the name you type into a shopping website, the inbox where a bank sends notices, and the place another provider sends a link when you forget a password. Those are three different jobs. A shopping service might still recognize the address as a login even if you cannot open its mailbox; an existing session on a phone might still work when new sign-ins do not. Knowing the address alone gives you none of these permissions.

A phone number can be just as important. It may receive calls, identify you to a service, or receive a one-time sign-in code. Some people also use an authenticator app or a security key, which supplies additional proof during sign-in. Losing the phone can therefore affect several unrelated services at once. The problem is not that all those accounts belong to the same provider; it is that they depend on one recovery route.

A password manager adds another connection. It can keep different passwords or passkeys organized, but the manager itself needs a secure way to be opened and recovered. A passkey is a sign-in method backed by cryptographic keys, often unlocked using a device or account you control; it is not necessarily a password another person can simply read. These choices can improve security while making recovery planning more important.

What a lost phone can reveal

Imagine that Amara pays the family electricity bill online. She signs in using an email address, and the provider sometimes asks for a code sent to her phone. Her family photographs are in a separate cloud account, but that account uses the same phone for account recovery. When the phone stops working, the electricity account and photograph library become harder to manage for different reasons. Replacing the handset might restore the phone number, but it would not necessarily recover a separate authenticator app or unlock a cloud account.

While Amara can still make decisions, she can check which recovery methods each service actually offers, update an outdated phone number, and make an independent copy of photographs she would want preserved. If a relative later helps her because of impaired vision or illness, she can choose the task and the permitted access where she has capacity to do so. The relative may be able to pay a bill through an authorized arrangement without opening her private messages. If Amara dies, the relative should instead identify the appropriate account or estate procedure, because ordinary account recovery and post-death disclosure are not the same process.

This example is hypothetical. Its purpose is to separate a service that needs attention from the device used to reach it. You do not need to recreate a lost-phone emergency to learn from it.

The four roles worth checking

First is the sign-in identity: the username, email address or provider button used to tell a service which account to open. An option such as “Continue with Google” may make access to a different service depend on the Google account used to establish that sign-in. Record the existence of such a connection in your private plan without copying tokens, passwords or sign-in codes.

Second is the place that receives information. A mailbox can hold bills, appointments, recovery notices and private conversations. The address written on an account and the inbox that currently receives mail are not always the same thing. A forwarding rule or an old address may make the relationship less obvious.

Third is the additional proof requested at sign-in: a phone, a verification app, a security key, a passkey or another approved method. Providers use different combinations and may change their procedures. Fourth is the recovery path the account holder has set up for the day when a usual method is unavailable. Some services offer backup codes or a recovery contact, but these are not a general right for relatives to enter someone else's account. Google says its recovery-contact feature helps the account holder regain sign-in access; Google Workspace, Advanced Protection and child accounts cannot add recovery contacts. The contact must be configured before the account holder is locked out, and there are acceptance and activation waiting periods. Google's separate Inactive Account Manager concerns selected information shared after inactivity. Check your own provider's eligibility and options while you can still sign in.

Check one account connection

You can test the strength of a recovery plan without attempting a risky sign-out. Choose the general role that one important account plays, the method you normally rely on, and whether you know of another legitimate way to recover access. The short account-connection check below offers a next question to investigate. It asks for categories, not account names, passwords, codes or personal documents.

A useful result is a specific question you can answer from the provider's own settings: If this phone were unavailable, which other verified method could I use? If my email address stopped receiving messages, how would I be contacted? If a second person has to perform a task, is there an approved way to give them only that responsibility? You can write down the provider and where secure instructions are stored in a separate private place. Avoid writing the secret itself on a shared form.

The check does not test a real account or claim that a recovery method will succeed. It helps you notice a dependency before you need it. If you do not have a second device, reliable internet or access to advanced security tools, a paper note describing official recovery channels and a trusted place for legitimate instructions may be more useful than a complicated system.

Help while the account holder is alive

A person who needs assistance may still be able to explain what they want and consent to particular help. Start with the task: paying a household bill, changing an appointment or saving a personal photograph. The smallest appropriate arrangement is often better than asking for unrestricted access. Depending on the service, that may mean an authorized delegate, a permitted shared-payment function, accessibility support or instructions from a representative who already has authority.

Illness, disability and age do not, by themselves, remove control of an account. A temporary hospital stay is different from a legal determination that another person may act. If permission or decision-making authority is uncertain, pause before opening private material or changing recovery settings. Providers and jurisdictions apply different requirements, and an arrangement accepted by one service may not work for another.

Shared devices deserve special care. A tablet may display several people's messages, and a family email account may hold confidences not needed for the task at hand. Use a separate legitimate account or limited-access feature when available; do not assume that possession of the screen amounts to permission to read everything visible on it.

What changes after a death

A surviving partner, relative or executor may need to preserve records, handle legitimate financial obligations or request closure of an account. But knowing a password, owning a device, or being related to the account holder does not automatically establish legal authority to access private services. The appropriate process depends on what is requested—records, preservation, data export, an account closure or a subscription change—and who has authority to make the request.

There are useful differences among provider arrangements. Apple's Legacy Contact setting can allow a person selected in advance to request certain Apple Account data after death using an access key and required documentation. It does not open the deceased person's iCloud Keychain passwords or every device locked by a passcode. Microsoft's OneDrive Digital legacy is a separate service-specific read-only arrangement; it should not be mistaken for general access to Outlook mail or every Microsoft account. Google offers an Inactive Account Manager through which eligible account holders can plan certain notifications or data sharing after inactivity. Inactivity arrangements are not universal statements about death, and none of these features substitutes for a lawful process where one is required.

Keep the distinction between keeping a service running and accessing its private content. Essential utilities, housing-related payments or urgent care arrangements may need immediate attention, while a private inbox may need to remain undisturbed. Before cancelling, deleting, resetting or transferring anything, establish which obligations and records might be affected. A helper should use current official provider guidance and seek appropriate professional advice where rights are disputed.

A practical plan that does not expose your secrets

Begin with one important service and record what it does. Name the provider only in a place you control. Note whether it supports payments, communication, personal memories, account recovery or work. Then identify the types of recovery methods you have configured and where an authorized person could find instructions. There is no need to paste account numbers or credentials into this website or its worksheets.

Next, ask what you would want to happen if you were alive but unable to manage that service, and what you would want after death. Those answers may differ. Someone might be authorized to maintain a utility payment while being asked not to read unrelated messages; a family photo collection may be shared while other notes remain private. Record those choices only where they can be stored and communicated safely.

Finally, make one low-risk check while you are able to act. Confirm that a recovery email you control is current, that a documented alternative sign-in method is available where supported, or that a trusted contact has genuinely received the appropriate non-secret instructions. Do not log out deliberately to see what breaks, hand over a recovery code, or deactivate a working phone line as an experiment. Revisit the plan when you change devices, phone numbers, providers or trusted helpers.

Personal accounts are different from work and school access

An employer or school may administer the account you use there. The organization can control retention, offboarding, authorized access and what information belongs to it rather than to the individual user. A staff member's files might contain colleagues' messages, client information or other records governed by workplace obligations. A family member should not assume an old work password can be used to collect them.

Before leaving an institution, check whether personal material may be exported under its rules and whether it is available elsewhere. Ask the administrator about permitted records requests and account closure if you are handling a legitimate request after someone dies. Students and workers who use only shared or public devices should prefer official account-support channels over copying personal recovery data onto machines they cannot control.