The Drawer Nobody Can Open

There is a particular scene that plays out at the Genius Bar more often than anyone there would like. A daughter, a few weeks past the funeral, slides a folded death certificate across the counter. She is not asking for much. She wants the photos. The voice memos. The last few text threads, the ones that end mid-conversation. And the person behind the counter, kind as they are, has to explain that the certificate opens nothing. The phone is locked. It will stay locked.

For most of human history, the drawer nobody could open was a literal drawer in a desk, and you pried it apart after the funeral. Now the drawer is a glass rectangle, the lock is very good, and prying it open is no longer an option for anyone. Not the family. Not the company. Not a court, most of the time.

Pick up your phone right now. If you were gone tonight, who could open it? Name the person. If you can’t, that is the whole point of this letter.

The strange and slightly hopeful thing is that the only key that works is one you turn yourself, while you are alive and well and not thinking about any of this. There are four of them. Each takes about ten minutes. None of them require a lawyer. Here is what each one actually gives your people, and — just as important — what it withholds.

Apple hands over the memories, not the master keys.

Inside your iPhone settings, under your name, there is a feature called Digital Legacy. You name one or more Legacy Contacts and the phone generates an access key — a short code you save or print and tuck somewhere your person can find. When the day comes, that key plus a copy of your death certificate lets them retrieve an enormous amount: photos, messages, notes, mail, files, your device backups.

What it does not hand over is worth saying plainly. It will not surrender your iCloud Keychain — the saved passwords and passkeys living behind that lock. It will not pass along saved payment info or the movies and music you purchased. It is not a login to your account; it is a separate, read-only legacy account that Apple permanently deletes three years after the first approved request. This is Apple’s own policy, not a law, and the exact list of what’s included can shift, so it’s worth a glance at Apple’s support page when you set it up.

Google waits, watches for silence, then quietly steps aside.

Google’s version is called Inactive Account Manager, and it works on a timer. You choose how long Google should wait after your last sign-in — three, six, twelve, or eighteen months — and name up to ten trusted contacts. For each one you pick exactly which slices of your account they may download. Before it does anything, Google tries to warn you, by both text and email, about a month ahead, in case you’ve simply been off the grid.

Your contacts never log in as you. Your password, your two-step keys, your app passwords — none of that is ever shared. (This one is for personal accounts; a work or school Workspace account plays by its administrator’s rules instead.)

Facebook lets someone tend the page, never become you.

Buried in your Facebook settings, under Memorialization, you can name a Legacy Contact. Memorializing is the separate step where Facebook, after someone reports a death, freezes the account into a remembrance state — the word “Remembering” appears above the name and it stops surfacing in reminders and ads. Once that’s happened, your Legacy Contact can pin a tribute post to the top, respond to the new friend requests that arrive, update the profile photo, and download an archive if you’ve allowed it.

What they cannot do is log in as you, read your private messages, or post as you. There is a quiet trap here, too: if you name no one, a memorialized account can never be changed by anyone. The page simply freezes, mid-sentence, forever.

Your password manager is the master ring — and it has its own door.

The first three settings hand over the memories. Your password manager holds the keys — to the bank, the brokerage, the email that resets everything else — and it deliberately keeps itself outside the reach of the others. So it needs its own arrangement.

Bitwarden offers Emergency Access: a trusted contact can request your vault, and after a waiting period you set, they get it automatically — unless you’re still around to decline. One door, opens on a timer. 1Password takes the older, paper route: an Emergency Kit PDF that holds your account details with a deliberate blank where your master password goes. You print it, write the password in by hand, and store it somewhere safe — a fireproof box, a folder, beside the will. One automated, one analog. (Both vary by plan and change over time, so check yours.)

A setting you tap today outranks your own will.

Here is the part that surprises almost everyone, including people who paid a lawyer for a careful will. There is a law — adopted by nearly every state — called RUFADAA, the Revised Uniform Fiduciary Access to Digital Assets Act. A fiduciary is simply the person legally trusted to act for you when you can’t: your executor, the person named to settle your affairs. RUFADAA sets the order of who that person can reach your accounts, and the order is not the one you’d guess.

It puts the online tool first. Apple’s Legacy Contact, Google’s Inactive Account Manager — whatever you set inside the account wins. Then your will or power of attorney, but only if it explicitly mentions digital assets. Then the platform’s terms of service, which frequently just say no. So the ten-minute setting you tap tonight legally outranks the document you signed in a lawyer’s office. Nearly every state has adopted this; Louisiana is the one usually named as the holdout, so check your own.

The one door no key can ever open.

There is a single asset where none of this helps, and honesty requires naming it. Cryptocurrency isn’t held by a company that can be shown a death certificate. Ownership is control of a private key — a seed phrase, a string of words. Lose it and the coins are gone. No reset, no help line, no judge who can order them back. Industry estimates put the bitcoin lost this way in the tens of billions of dollars — treat that as a rough estimate, not a precise figure, but the direction is not in dispute.

The fix is almost comically low-tech: write the seed phrase on paper and seal it with your estate papers. Cold math, humble paper.

What’s still missing — and what to do tonight.

Switch on all four and you’ve done something real. But notice what no single place does: hold the keys and the meaning together. Your Legacy Contact gets the photos but not a word about which ones mattered. Your executor gets the logins but not the why. Nobody has solved that gap well yet — that’s just an observation, not a promise from anyone.

What you can do tonight is the analog thing. Turn on the four settings. Then write the seed phrase, and the one page your family will actually go looking for — the companion to this is The Folder Your Family Looks For First. The keys open the drawer. The story is what’s worth keeping inside it.

Sources

Apple Support — How to add a Legacy Contact for your Apple Account — https://support.apple.com/en-us/102631
Apple Support — How to access the Apple Account of a deceased family member — https://support.apple.com/en-us/102431
Google Account Help — About Inactive Account Manager — https://support.google.com/accounts/answer/3036546
Facebook Help Center — What will happen to my Facebook account if I pass away? — https://www.facebook.com/help/1568013990080948
Bitwarden — Emergency Access — https://bitwarden.com/help/emergency-access/
1Password Support — Get a copy of your Emergency Kit — https://support.1password.com/emergency-kit/
Trust & Will — What is RUFADAA? — https://trustandwill.com/learn/what-is-rufadaa