Digital assets rarely appear in an old Last Will and Testament, yet they now sit at the center of most estates: a Coinbase balance, a hardware wallet, years of photos in iCloud, a Gmail account that quietly holds the keys to everything else. Many people assume one federal law now sweeps all of this into the will automatically. It does not. The rules that decide whether your executor can reach your crypto and online accounts come from a state-level statute called RUFADAA, and they work only if your will says the right things. This guide explains what actually governs digital assets at death in the United States, why the SECURE Act is a different subject entirely, and how to write a will that gives the right person the right access.
What counts as a digital asset in your estate
A digital asset is any electronic record in which you hold a right or interest. That definition is broad on purpose. It covers email and social media, cloud-stored photos and documents, domain names, loyalty points, PayPal and Venmo balances, cryptocurrency held on an exchange, self-custodied crypto in a hardware wallet, and non-fungible tokens. It does not, as a rule, cover the underlying money or securities held at a bank or brokerage: those pass through the same probate channels as any other financial account, and the digital-asset rules govern access to the record, not ownership of the funds behind it.
The distinction that trips up most families is between the account and its contents. Your executor stepping into your shoes for a checking account is routine. Your executor reading the actual text of your emails or direct messages is not, because a separate layer of federal privacy law sits on top. An online account you can open in thirty seconds can take your estate months to unlock if the will is silent. This is why a modern will treats digital assets as their own category rather than folding them into a generic clause about "all my property, real and personal."
Legal framework: RUFADAA, not the SECURE Act
The governing law is the Revised Uniform Fiduciary Access to Digital Assets Act, known as RUFADAA. It is a model statute drafted by the Uniform Law Commission in 2015, and more than forty states plus the District of Columbia have enacted a version of it, each codified in that state's own probate or estates code. Because it is state law, the section numbers differ from one state to the next, but the architecture is remarkably consistent nationwide. You can read the model text and its official comments through the Uniform Law Commission, which maintains the drafting history and adoption status of RUFADAA.
RUFADAA sets a strict order of priority that decides which instruction controls. At the top sit the platform's own online tools: Google's Inactive Account Manager, Apple's Legacy Contact, Facebook's legacy contact setting. If you have used one of these, that choice overrides everything else, including your will. Next come your estate planning documents: your will, a trust, or a power of attorney that specifically grants access. Only if you have used neither does the provider's terms-of-service agreement decide the outcome by default, and those agreements frequently declare accounts non-transferable and closed on death. A legacy-contact setting you clicked years ago silently outranks the will you signed last month.
Layered over RUFADAA is the federal Stored Communications Act (18 U.S.C. § 2701 and following), which bars providers from disclosing the content of communications without lawful consent. RUFADAA supplies the mechanism for that consent, but here is the catch practitioners watch for: even with valid authorization, a provider is permitted to release content, not compelled to. That gap is exactly why the language in your will matters more than families expect.
The content versus catalogue trap
RUFADAA draws a line that decides how much your executor actually sees. Think of the outside of an envelope against the letter inside. The catalogue is the metadata: who you exchanged messages with, and the date and time. The content is the substance, the words of the email, the photo attached, the direct message. Your personal representative can generally obtain the catalogue with the right paperwork. Reaching the content is far harder, and it turns entirely on consent you gave while alive.
If your will stays silent on this point, your executor is often limited to the catalogue and to non-communication assets like files and financial records. To unlock the actual content of emails and messages, the will, trust, or power of attorney must say so in plain terms. The phrase "all my property" does not clear this bar; courts and providers want a specific grant of authority over the content of electronic communications. A well-drafted Last Will and Testament now includes exactly that grant, and lets you cherry-pick: full access to the financial accounts, catalogue-only or no access to a private inbox, deletion of a dating profile. RUFADAA lets a user hand different keys to different rooms, but only if the will is written to do it.
Cryptocurrency: where a will alone runs out
Crypto exposes the limits of any statute. For coins held on an exchange like Coinbase or Kraken, RUFADAA behaves much as it does for other accounts: with authority in your will, the executor can request statements, transaction history, and a transfer, though without that authority the exchange may demand a court order and freeze the balance during probate. Self-custodied crypto is a different animal. A hardware wallet holds no customer-service line and no custodian to petition. If the seed phrase dies with you, the coins are gone, and no will, court, or law can recover them. The blockchain does not care who your executor is.
That is why crypto needs a two-part plan. Your will supplies the legal authority to take possession and directs who inherits, ideally naming a digital executor comfortable with wallets and two-factor recovery. Separately, and never inside the will itself, you leave the practical means of access. This matters because a will becomes a public record once it enters probate, so a seed phrase or password written into it is exposed to anyone who pulls the file. The credentials belong in a sealed, secured location, referenced by the will but stored apart from it, with your executor told where to find them. The same discipline protects a business interest held partly in digital form, which is often documented alongside a business purchase or transfer agreement rather than in the will alone.
Building the digital-asset clauses into your will on Captain.Legal
Putting this into practice starts with the document itself. The Last Will and Testament template on Captain.Legal is built to be state-aware across all fifty states, and it lets you add the digital-asset authority that a generic form leaves out. As you work through it, you identify your personal representative, then grant explicit authority over digital assets, including, where you want it, the content of electronic communications rather than metadata alone. You decide which accounts get full access, which stay catalogue-only, and which should simply be closed.
From there the estate plan extends naturally. Because RUFADAA also governs access during incapacity, not only after death, a matching power of attorney should carry the same digital-asset language so your agent can manage accounts if you are alive but unable to act. Many people pair both with a living will and advance directive to round out the incapacity side of the plan. Every document downloads in Word and PDF, so you can review the wording, adjust it, and sign under your state's execution rules without drafting the clauses from scratch. The value is a will that names the right people and speaks the language RUFADAA and the providers are looking for.
Common mistakes that lock families out
The most frequent error is silence. A will that never mentions digital property leaves the executor stuck with catalogue-only access and a stack of terms-of-service refusals, and the fix costs nothing but a few sentences added while you are alive. Close behind is the opposite error of oversharing: pasting passwords, PINs, or a crypto seed phrase directly into the will, forgetting that probate makes the document public and hands those credentials to strangers. A third mistake is ignoring the platform tools entirely, then being surprised when a long-forgotten Facebook legacy-contact setting overrides the carefully drafted will, because that setting sits higher in RUFADAA's priority order.
Two more surface constantly in practice. People confuse the SECURE Act with digital-asset law and assume updating one covers the other; it does not, because the SECURE Act governs the timeline for withdrawing inherited retirement accounts and says nothing about email, crypto, or online access. And couples who own crypto rarely tell anyone the wallet even exists, so the estate never learns to look for a device that holds real value. If no one knows the asset is there, no legal document can rescue it. A brief, updated inventory, kept separate from the public will, closes that gap. The same care applies when your affairs cross into family arrangements, where a prenuptial agreement may also need to address who controls digital and crypto holdings.
Frequently asked questions
Is a will made online legally valid for digital assets in the US?
Yes, a will created from a properly drafted template is valid as long as you meet your state's execution formalities, which generally means signing the document in the presence of the required number of adult witnesses, and in some states a notarized self-proving affidavit. The medium does not decide validity; the signing does. For digital assets specifically, the will must go one step further and include explicit authority over them, ideally covering the content of electronic communications, so your personal representative is not left with catalogue-only access under RUFADAA's default rules. A generic clause about "all property" is not enough for the content of online accounts.
Does the SECURE Act control what happens to my crypto and online accounts?
No, and this is a common mix-up. The SECURE Act and its 2022 update are retirement-account laws: they changed how quickly beneficiaries must withdraw an inherited IRA or 401(k), generally requiring most non-spouse heirs to empty the account within ten years. They say nothing about email, social media, cloud files, or cryptocurrency, and updating a will for the SECURE Act does nothing for digital access. Digital assets are governed instead by RUFADAA at the state level, layered with the federal Stored Communications Act. If crypto or online accounts are your concern, the will language that matters is the RUFADAA authority, not anything in the SECURE Act.
Can my executor access my email and social media after I die?
It depends on what you authorized. With proper documentation, your executor can usually obtain the catalogue of communications, meaning who you messaged and when, without express prior consent. Reaching the actual content of emails or messages is far more restricted under the Stored Communications Act: the provider will look for explicit permission you granted in a will, trust, power of attorney, or the platform's own legacy tool. Even then the provider is permitted, not required, to release content. So the honest answer is that access is possible but never automatic, and the outcome is set by planning you do while alive, not by your executor's persistence afterward.
What happens to my cryptocurrency if I don't leave the wallet keys?
For crypto held on an exchange, your executor can petition the platform with letters testamentary and the authority granted in your will, though the process can be slow and may require a court order. Self-custodied crypto in a hardware wallet is unforgiving: without the seed phrase or private key, the holdings are permanently unrecoverable, because no custodian and no court can regenerate it. The blockchain recognizes the key, not your estate documents. This is why crypto needs both legal authority in the will and a separate, secured record of the recovery method, stored apart from the public will and pointed to by your executor.
Should I write my passwords directly into my will?
No. A will becomes a public record once it is admitted to probate, so any password, PIN, or seed phrase written into it is exposed to anyone who requests the file. Instead, the will should grant legal authority over your digital assets and name who inherits them, while the actual credentials live in a separate, secured place, a sealed document, a password manager with an emergency-access contact, or a note held with your attorney. The will can reference where that information is kept without reproducing it. Keeping the authority and the credentials in separate places is the standard practice for good reason.
In what format can I download my will and power of attorney?
Both documents are available in Word and PDF. The Word version lets you fine-tune wording, add or adjust the digital-asset clauses, and tailor the document to your circumstances before printing. The PDF gives you a clean, print-ready copy for signing. Because valid execution still requires signing under your state's witnessing rules, you will print and sign the final version rather than relying on the file alone, but having both formats means you can review the language carefully and keep an editable copy for future updates as your accounts and holdings change.
How often should I update the digital-asset parts of my will?
Review them after any significant change to your online life or family situation: a new crypto holding, a switched primary email, marriage or divorce, the arrival of children, or a move to another state, since RUFADAA is enacted state by state and the details vary. Platform legacy-tool settings deserve the same periodic check, because they outrank your will and a stale designation can quietly undo your intentions. A practical rhythm is a light review every couple of years and an immediate one whenever you acquire a digital asset with real financial or sentimental value, so the will keeps pace with what you actually own.