Preparing a digital legacy is one of those things most people know they should do and very few people actually get around to. It is easy to push it down the to-do list because it feels like something for later, when things are more settled, when you have more time. But the right time to do it is always now, while everything is normal, while you have the information in your head, and while doing it properly is still an option.
Your digital legacy is the sum of everything you leave behind in the online world. Email accounts, banking portals, investment platforms, cloud photo libraries, social media profiles, subscriptions, websites, cryptocurrency, domain names, and more. Without a plan, most of this gets locked away, lost, or left in limbo. The people you love are left to deal with it at the worst possible time, often without any of the information they need.
This guide walks through the whole process, step by step. It is not complicated, but it does require being deliberate about it. Set aside a few hours, work through this in order, and you will have something genuinely protective in place.
What a Digital Legacy Actually Is
A digital legacy is not just a list of passwords. It is everything your family needs to manage, protect, and inherit your digital life if you are no longer able to do it yourself. That includes credentials, yes, but also documents, instructions, context, and a mechanism for your family to know when and how to access it.
Think of it like leaving a detailed handover for someone starting a new job. You would not just hand them a set of keys. You would explain what each key opens, what they need to do first, who they should call if something goes wrong, and what the most important things to look after are. A good digital legacy does the same thing for your online life.
It also covers more than just death. A digital legacy plan protects your family if you have a serious accident, a medical emergency, or any situation where you are temporarily unable to manage your own affairs. The same information that helps in those situations is also what your family needs if you are gone permanently.
Step 1: Build a Complete Digital Inventory
Start by listing everything you have online. This is the part most people underestimate. The average person has well over a hundred online accounts, and most of those accounts were set up and then half forgotten. Go through these categories and write down every account you can think of in each one.
- Email: Primary accounts, backup accounts, work email if self-employed
- Banking and finance: Current accounts, savings, ISAs, investments, pensions, crypto
- Insurance: Life, critical illness, income protection, home, car, travel
- Government: HMRC, DVLA, NHS, pension service, benefits
- Property: Mortgage portal, letting agent, energy suppliers, water, broadband
- Social media: Facebook, Instagram, LinkedIn, Twitter, YouTube
- Storage and photos: iCloud, Google Photos, Dropbox, OneDrive
- Shopping: Amazon, eBay, ASOS, any accounts with stored payment details
- Subscriptions: Netflix, Spotify, Amazon Prime, software, news, memberships
- Work: Professional tools, freelance platforms, client portals, invoicing systems
- Domains and hosting: Any websites, registrar accounts, hosting panels
- Health: GP online access, pharmacy, NHS app, private healthcare
You do not need to add all of these to your family emergency vault. But you do need to know what exists so you can decide what matters most.
Create Your Account Inventory
Spend one hour going through your email sent folder, your password manager, your bank statements, and your browser saved passwords. Write down every account you find. You will almost certainly discover accounts you had forgotten about.
Step 2: Decide What Your Family Actually Needs
Once you have a full inventory, go through it and mark each account with one of three labels. Keep, meaning your family should have access to it. Close, meaning it should be shut down when the time comes. And irrelevant, meaning it does not matter either way.
The Keep accounts are the ones that go into your emergency vault. Focus on the ones that have financial value, legal importance, or that would cause immediate practical problems if they were inaccessible.
Your primary email is the most important of all. Almost every other account recovery process goes through it. If your family can get into your email, they have a realistic chance of managing everything else. If they cannot, their options are much more limited.
After that, prioritise banking and financial accounts, insurance portals, government services, and property-related accounts. These are the ones with time-sensitive implications. Bills that need paying, claims that need making, notifications that need sending.
Mark Each Account: Keep, Close, or Irrelevant
Be ruthless. Only the accounts that would cause real problems if locked away need to go into your vault. A forgotten forum account from 2012 does not need to be there. Your pension portal does.
Step 3: Store Credentials Securely
For every account marked Keep, you need to store the following information somewhere encrypted and accessible to your designated family members.
- The email address or username used to log in
- The current password
- The 2FA method used, for example, SMS, authenticator app, or hardware key
- Any 2FA recovery codes, if they exist
- The account number or reference number, where relevant
- A short note explaining what the account is and what your family should do with it
This information must be stored in an encrypted vault, not a spreadsheet, not a text document, not a shared folder on cloud storage. The National Cyber Security Centre is clear that passwords should never be stored in plain text. This applies to your digital legacy as much as it applies to everyday password hygiene.
Williation uses end-to-end AES-256 encryption, which means your vault contents are scrambled before they leave your device and can only be read by people you have explicitly authorised. Not even Williation's own servers can read your data in plain text.
Add Each Keep Account to Your Encrypted Vault
Work through your list. For each account, add the login credentials, the 2FA recovery codes, and a brief note. Do not rush this part. Accuracy matters.
Step 4: Upload Your Important Documents
Alongside account credentials, your family will need access to certain physical documents in an emergency. Digitising them and storing them in your encrypted vault means they are accessible wherever your family is and cannot be lost or damaged.
Scan and upload copies of these documents as a priority.
- Your will, and the contact details of the solicitor who holds the original
- Any lasting power of attorney documents
- Life insurance policies, with policy numbers and insurer contact details
- Your most recent pension statements
- Property deeds or your mortgage agreement
- Birth and marriage certificates for yourself and your dependants
- Your passport scan and National Insurance number
- Any business agreements or contracts that would need managing
You do not need every document you have ever owned. Focus on the ones that would be genuinely hard to replace quickly and that have legal or financial significance.
For guidance on making a will if you do not already have one, the UK government's guide to making a will is a useful starting point. A digital legacy plan and a physical will work together, each covering what the other cannot.
Scan and Upload Priority Documents
A good phone camera is sufficient for most documents. Scan in good light, check the image is readable, and upload to your vault. Add a short label to each one so your family can find what they need quickly.
Step 5: Write Instructions for Each Account
This step is the one most people skip, and it is the one that makes the biggest difference to how useful your digital legacy actually is in a real emergency.
A password alone tells your family how to get in. Instructions tell them what to do once they are in. Those are two very different things.
For each account in your vault, write a short note covering the following.
- What the account is for, in plain language
- Whether it should be kept open, closed, or transferred
- Any recurring payments attached and how to cancel them
- Who to contact if there are complications, for example, a bank's bereavement team
- Any important context your family would not know without you
For example, a note on your mortgage account might read: "This is our Nationwide mortgage account. Monthly payment is taken on the 1st. Call the bereavement team on [number] to notify them of my death. They will freeze the joint account and move to a single name. Reference number is [X]."
That kind of note turns a stressful phone call into a manageable one.
Add Instructions to Every Account in Your Vault
Start with the most critical accounts: email, banking, insurance. Even a single sentence of context helps. A few sentences is even better.
Step 6: Designate Your Trusted Contacts
Your emergency vault is only useful if the right people can access it. Think carefully about who those people are, and what level of access each one should have.
Your spouse or partner likely needs full, immediate access. An adult child might need access after a short waiting period. A solicitor might only need to see specific legal documents. A business partner might only need the domain and hosting credentials.
Different people at different access levels is the right setup. It reflects the reality that different relationships have different needs, and it avoids over-sharing with people who only need a specific part of your digital life.
Add Emergency Contacts and Set Access Levels
Name your contacts, set their access permissions, and make sure they know they have been named. This last part is important. An emergency contact who does not know they are listed cannot act when the time comes.
Step 7: Enable Your Inactivity Alert
The final step is setting up the automatic trigger that activates your family's access. Without this, your family has to make a judgment call about when to look. With it, the system handles everything automatically.
Williation's Alive Check monitors your login activity. You choose a check-in period: 30, 60, or 90 days. Each time you log in, the clock resets. If you stop logging in and miss the window, Williation sends you a reminder first. If you still do not respond, your designated contacts are notified and given access to what you have prepared.
This feature alone is what separates a digital legacy vault from a simple password store. The vault is the information. The inactivity alert is the delivery mechanism. Together, they form a complete protection system for your family.
Configure Your Inactivity Alert Period
Choose a check-in period that makes sense for your lifestyle. If you travel a lot, 90 days gives you flexibility. If you are settled in regular routines, 30 days provides faster protection. Enable the alert and you are done.
Keeping Your Digital Legacy Current
A digital legacy that is six months out of date is still valuable. One that is three years out of date may cause more confusion than it prevents. Make a habit of updating it.
Update your vault any time you change an important password. Update it when you open or close a financial account. Update it after any significant life event, a new property, a new insurance policy, a new job. And set a calendar reminder to do a full review at least once a year.
Fifteen minutes of updating every quarter will keep your digital legacy accurate and genuinely useful for decades.
To understand more about the accounts that matter most, read our article on what happens to your online accounts after death. And to see why this kind of planning matters for your whole family, read our piece on why every family needs a digital legacy vault.
Useful External Resources
Start Your Digital Legacy Today
Williation gives your family a secure vault, a clear set of instructions, and an automatic trigger so they have everything they need when it matters most.
Start your secure vault