Protect what matters in your digital life
Make a plan that someone could actually follow
A useful digital plan is not a list of every app you have ever opened. It is a short explanation of what matters, where to begin and whom to contact when you cannot speak for yourself. Begin with the email address that carries important notices, one place holding memories and one payment that supports daily life. Those three choices often reveal the account, device or person on which other arrangements depend.
You can use the First-Step Planner on this page without registering. Choose whether you are arranging your own affairs or helping someone else, what situation you are preparing for, and the kind of problem you want to address first. It will give you a concrete next question, a small sequence of actions, a reason to be careful and a route to a relevant guide. It does not sign in to services, inspect personal records or make legal decisions.
Suppose your family uses a paid cloud library for decades of photographs. The immediate task is not to hand over a password. It is to identify the service, determine whether an independent copy exists, check any provider planning feature and record how a properly authorized person should begin. You can do that while keeping the actual photographs, verification codes and private conversations out of a planning worksheet.
Keep the map separate from the keys
An inventory is a map of responsibilities. It can name a service, explain what it is for, identify an expected renewal and say where official documents can be found. It does not need to contain passwords, recovery codes, account numbers, private messages, card details or an entire phone backup. A notebook or carefully stored private document can be useful without becoming a collection of secrets that would be damaging if lost.
Write entries in ordinary language. “Main email — receives household notices and resets for the photo library” tells someone much more than “Gmail.” “Phone — receives verification prompts for banking” records a dependency without disclosing the phone’s unlock code. Keep the full list where you can find it and give trusted people only the location and instructions that are appropriate for them.
If another person is involved, decide what they should know now, what may be disclosed only after an event, and what should remain private. People sharing a household, an address or a device may still have very different legal rights and personal boundaries. A useful plan reflects both.
Separate access, authority and preference
Being able to unlock a device is a technical fact. Being permitted to use its owner’s accounts is a different question. A partner, relative or colleague may know a password and still lack authority to enter private services or change financial arrangements. Conversely, an appropriately authorized representative may need to follow a provider’s documented process rather than using the person’s credentials.
During living incapacity, a person may retain decision-making rights, be able to express preferences or have appointed someone for defined tasks. After death, a different process can apply, including estate responsibilities, provider requirements and laws that vary by country or state. The same plan should not tell helpers to impersonate an account holder in both situations.
Record the name or role of the person who can help, the location of relevant formal documents and where to seek jurisdiction-specific advice when needed. Avoid presenting a family relationship or a general power of attorney as automatic access to every online service. Before handling regulated records, funds, health information or work accounts, check the relevant lawful authority and provider rules.
Protect the accounts that protect other accounts
An email inbox can receive password-reset links for several accounts; a phone may supply the verification step. Losing either can block services even when the records are intact. Choose the Accounts guide to map those dependencies, then check the recovery options for accounts you personally control. Do not collect another person’s verification codes as a shortcut.
Work and school accounts can follow different rules from personal accounts. Before placing an organizational login in a household plan, check what material belongs to the institution and what personal information you are allowed to keep.
Make a copy you can restore, not just one you can see
A synchronized photograph collection can look safely duplicated across devices while depending on one account. Choose one irreplaceable file you own and find out whether a separate copy can be opened without that account. Do not delete or alter the original to test it.
The Backup and Export guide explains where to put the copy, what to check after exporting and which provider settings may affect recovery. A copy you have opened and inspected is more dependable than an untested “backup completed” message.
Understand a continuing payment before changing it
Before changing a recurring charge, find out what the payment keeps running. A cloud plan may hold irreplaceable files, a phone line may receive account codes, and a utility may serve other residents. A bill’s importance does not always match its price.
Use the Subscriptions and Bills guide to sort the service’s purpose, urgency and the person authorized to act. Stopping a card charge and cancelling a contract may be different decisions; do not promise either will take effect without checking the provider’s instructions.
Use provider planning features for the purpose they actually serve
Provider features can sometimes carry a person’s advance instructions, but they answer different questions. A legacy-access contact may concern data after death; an inactivity setting depends on a period without account activity. Neither establishes universal ownership or the right to read all private records.
If you use a provider arrangement, check the current official instructions for the exact service and account type while you can still make choices. Record where your designated person can find those instructions. The relevant guide explains the limits in more detail.
Make the plan usable in difficult circumstances
Someone may be trying to help during grief, a medical crisis, an evacuation or a period without reliable internet. They may not use your language or have the same accessibility needs. Plain descriptions, a legible printed location note and an offline contact method can matter more than a highly detailed digital filing system. Avoid requiring a helper to install unfamiliar software before they can understand the first step.
State what should not be disturbed. For example, “Please do not delete the family photo account until an authorized person has checked the backup” is clearer than an unexplained account name. If a shared device also holds a child’s, patient’s or colleague’s information, record the privacy boundary. A shared device may be accessible to someone you would not choose to see your instructions, so keep sensitive directions elsewhere if necessary. People affected by your arrangements deserve consideration even when they did not choose the system.
Your practical plan can be as simple as three entries and a date. It might say where official documents are kept, which provider to approach first and who should be contacted. It should not promise that every platform will preserve an account or recognize the same documents. The aim is to make the first responsible decision easier.
Keep it current without turning it into a chore
Review the plan when a phone changes, an email address is retired, a household service moves, a new caregiver is appointed or a backup method changes. Those events matter more than repeatedly copying unchanged lists. Test one recovery step or one backed-up file during a review. An inventory that nobody can interpret is less helpful than a smaller one that has actually been checked.
If you have not prepared anything, use the planner below to select one subject and write down just the first task. If you are helping another person, involve them as much as possible and keep the work within their wishes and your lawful authority. After a death, use the plan to identify what must be preserved and which official process comes next, not as permission to sign in as the person who died.
If it helps, print the first-step worksheet and keep it where you control access. Include a date and one ordinary action someone could actually check. Leave out passwords, account numbers, recovery keys and private health or financial details; the worksheet is not a secure vault.
Questions people ask
What is the fastest useful thing I can do today?
Choose one item that would cause a real problem if nobody knew where to begin: the main contact email, a family photo collection or a recurring essential bill. Note what it is for, where official information is stored and one lawful next step. You can make a larger inventory later.
Should I print my passwords for my family?
A general planning sheet is not an appropriate place for passwords, one-time codes or recovery keys. It is safer to record service purposes and the location of legitimate recovery or estate-planning arrangements. If you use a password manager or provider-designated contact feature, review its current security and access procedures rather than assuming someone may sign in as you.
Can a spouse, child or caregiver use an account after the owner dies?
Not automatically. Access can depend on the provider, the account type, local law, the owner’s instructions and the helper’s legal role. Physical possession of a phone or knowledge of a password does not settle the question. Start with official provider and representative procedures.
What should change if the person is alive but unable to manage things?
The person’s present wishes and capacity are central. They may still direct some decisions, and an appointed helper may have authority only for specific tasks. Preserve privacy and essential services while you confirm appropriate permission. Do not treat living incapacity as death or assume all digital accounts pass to the same person.
Is cloud synchronization enough to protect our photographs?
It may help keep copies available across devices, but a change or deletion can synchronize too. Check whether you have an independent, restorable copy of important originals and whether you have actually opened files from that copy. Provider backup and synchronization coverage differ.
Could stopping a subscription delete something important?
Potentially. The service may store files or supply a phone line or email address used for recovery. First identify what relies on the payment and the provider’s retention rules. A payment instruction, a contract and access to stored information are separate issues.
Will the First-Step Planner save or share what I choose?
The planner asks about broad types of accounts or records; it is not a secure place to store a personal inventory. Do not enter names, passwords, account identifiers or other confidential details. Keep anything you decide to write down in your own private notes or paper worksheet.
Does a provider legacy contact replace a will or other formal arrangements?
No. It addresses only the data and conditions covered by that provider’s feature. Property, accounts, contractual obligations and authority to act may require other arrangements under applicable law. Consider appropriate professional advice for complex estates, contested wishes or regulated records.
What if there is no internet or I cannot print?
The complete explanatory steps are readable in ordinary page text. You can write the three essential fields on paper: what the item is for, where the official records are located and who can properly take the next step. A downloadable or printable worksheet is an optional convenience, not a requirement.
General educational guidance. Provider procedures and legal authority vary by jurisdiction; the planner does not provide legal advice or access accounts.
Further reading and source scope
These references explain the evidence and its limits. Inclusion here does not verify current provider procedures or establish authority in your circumstances.
- Secure Our World — protect accounts and devices — CISA
- How to protect data stored on your devices — CISA
- Add a Legacy Contact for your Apple Account — Apple Support
- About Inactive Account Manager — Google Account Help
- Backup methods for iPhone or iPad — Apple Support
- How do I stop automatic payments from my bank account? — CFPB
- Use Two-Factor Authentication to Protect Your Accounts — FTC Consumer Advice