Nine months after her husband died, Rita was still paying for his Spotify account.
Not because she wanted to. Because she couldn't get in to cancel it. The email was his. The password was in his head. The phone with the 2FA code had been wiped and sold. The credit card on file kept paying, month after month, and the subscription kept renewing, and she kept forgetting about it until the charge showed up on the joint statement and pulled the grief right back to the surface.
Spotify is the smallest example. She also couldn't access his primary email — which meant password resets for their shared streaming services, their utilities, their Amazon account, and two of his old investment accounts went nowhere. Two of his accounts got flagged for inactivity. One got frozen. One quietly absorbed a dormancy fee each quarter for three years before she thought to look.
She didn't want a password. She wanted her husband back. But since that wasn't on offer, what she needed — what every grieving family needs — was a folder.
What a Digital Legacy Folder Actually Is
A digital legacy folder is the single, findable place that tells the people you trust:
- Which accounts you have
- How to get into them (or at least who to contact)
- What you want done with each one
- Where the important documents live
It is not a will. A will moves legal ownership. This folder moves information — the thing that makes a will executable. A will can say "my investments go to my wife" but if your wife doesn't know which investments you have, or where the statements arrive, or which email the confirmations come to, she has a legal right to money she can't find.
Estate planners call this kind of document a "letter of instruction" or a "death binder." We think those names are a bit grim. The thing is warmer than that. It's a note to the people you love, written while you can still write it, that says: here is where everything is.
The Seven Things It Must Contain
Every digital legacy folder, no matter how simple, should cover these seven sections:
Primary identity accounts. Your main email address and phone carrier login. Almost every other account on earth resets through these two things. If your family has those, they can reach almost anything else.
Financial accounts. Every bank, every brokerage, every retirement account. Include the institution name, the account type, and the approximate value. Not the password — the existence. Half the battle is knowing the account is there.
Insurance and property. Life insurance policy numbers. Home insurance. Car titles. Deed location. Safe-deposit box keys and branch.
Recurring subscriptions. This is the Rita section. The quiet monthly charges — streaming, cloud storage, gym, software, subscription boxes. Even a rough list saves hours of forensic accounting later.
Digital assets with no physical form. Crypto wallets (seed phrases handled separately and carefully), domain names you own, any side-income platforms (Etsy, Patreon, ad accounts), loyalty points worth serious money (airline miles, hotel rewards).
Final-wishes note. Not a legal will — just a one-page note. Burial vs cremation. Who you want told first. What password-protected accounts you'd like closed vs preserved (some people want their Instagram memorialized; some want it deleted). A short paragraph on what you want at a service.
Trusted-person instructions. Who gets this folder. How they get access. Who the backup is if they can't. A sentence of context: "This is here because I love you and I wanted to make this easier."
That's it. Seven sections. Most people can inventory them in an evening.
Why Printing It on Paper Is a Mistake
The instinct for anything important is to print it and file it. For a digital legacy folder, paper fails four ways:
- It goes out of date. You change your email password, get a new credit card, open a new brokerage account — and your paper folder is now actively wrong.
- It isn't secure. A single sheet of paper with "Gmail password: ..." on it is a catastrophic home-invasion or house-fire risk.
- It isn't private from the wrong people. A folder labeled "Important — open if I die" sitting in a desk drawer is readable by the teenager who wanders in looking for a stapler.
- Your family can't find it. The whole point is findability, and a folder in a filing cabinet in a basement is not findable by a grief-stunned spouse at 2 a.m.
Paper works for one specific piece: the note that tells the trusted person where the digital folder is and how to unlock it. That note can live in a safe, with an attorney, or in a safe-deposit box. It's short, it doesn't change often, and it points to the real thing.
Where to Actually Store It
Three reasonable options, in order of fit:
Cloud documents (Google Drive, Dropbox, iCloud Notes). Easy. Familiar. Bad for this. Anything in your cloud account is behind your primary email password — which is one of the things your family is trying to get into. You've created a circular lock.
Password manager vault notes. Better. Most modern password managers support encrypted notes. The problem: they're built for your active use, not for posthumous handoff. Emergency access features exist (1Password, LastPass, Bitwarden all have them) but they're often bolted on and the handoff flow can surprise families under stress.
An encrypted local vault built for this purpose. Best fit. A dedicated vault app that lives on your device, encrypts everything with a master password you choose, and supports multi-vault structures where you can keep one vault specifically for a trusted person — your spouse, your adult child, your parent. SecureKeep was built around exactly this model: separate encrypted vaults for separate trusted people, each with their own master password, each containing everything that person would need. No cloud. No account. No server that could be breached or shut down or sold.
The principle is the same regardless of which tool you pick: the folder must be encrypted, must not depend on your primary email, and must be discoverable by a specific person you trust without being discoverable by anyone else.
The 60-Minute Setup
A Saturday morning, a coffee, and an hour. That's the real cost.
- Minutes 0–10: Inventory. Open your email inbox. Sort by sender. Scroll the last two years. Every sender that's a bank, a brokerage, an insurer, a subscription — write it down. This is the 80/20 of what you own.
- Minutes 10–25: Accounts. For each one, note: institution, account type, rough balance, the email it's tied to. Don't chase passwords yet — you can add those later.
- Minutes 25–40: Documents. Where is the will (if you have one)? The deed? The life insurance policy? Write down the physical or digital location of each.
- Minutes 40–50: Wishes. One page. Plain language. "If something happens, I'd like..." Doesn't need to be legally precise. It needs to be clear.
- Minutes 50–60: Handoff. Pick one trusted person. Tell them this folder exists and roughly how to get to it. Not the password itself — just the existence and the path. "If something happens, open [location]. My spouse knows the password." Or however your access chain works.
That's the first version. It's imperfect. It's enough.
Updating It Matters More Than Building It
A folder built once and forgotten is worse than no folder at all — it tells your family where to look, and then gives them wrong information when they get there.
The fix is boring: fifteen minutes, four times a year. Put it on your calendar — the first Saturday of each quarter, right after you check your investment statements. Update the account list. Note any new subscriptions. Check that your trusted person still has the access chain they need.
An annual deep review — one Saturday in January — catches the rest: changed phones, changed passwords, new insurance, new property, new people.
This Isn't Morbid. It's Love With Paperwork.
People avoid building this folder because they think it invites the thing they're preparing for. It doesn't. The people who never build one still die. Everyone dies. The only question is whether, on that day, the people they loved most spend the first three months overwhelmed and locked out — or whether they get to grieve.
Your folder is a small act. It takes an hour. It's the closest thing you have to being able to help the people you love on a day you can't be there.
SecureKeep is a $7.99 one-time-purchase encrypted vault built around exactly this problem — separate vaults for separate trusted people, everything stored locally on your device, no cloud, no accounts. Read more about how it works →