What a Legacy Contact Cannot Reach: Locked Phones Today

Setting up a legacy contact feels like closing a loop. A name is in the field, a notification has been sent, and the family is protected. Then the death happens and the gaps appear one at a time: the phone still demands a six-digit passcode, the password manager app opens to nothing, and the films the deceased paid for are simply gone. None of this is a failure of the features. It is the boundary of what a cloud release can ever include, and the boundary is worth understanding while you can still change the plan. The checklist for the first week is in the digital checklist for families.

What a legacy contact actually receives

• Included on Apple — Photos and videos, Messages, Notes, Files and iCloud Drive, Contacts, Calendars, device backups and downloaded app data, plus removal of Activation Lock once the request completes
• Excluded on Apple — iCloud Keychain, meaning saved passwords and payment cards, purchased media, payment history, and anything living only on a passcode-locked device that was never synced to iCloud
• Included on Google — Whatever services you select in Inactive Account Manager, commonly Gmail, Drive, Photos, YouTube and location history, released after the inactivity period you set
• Excluded on Google — Purchased media and subscriptions, and any product not explicitly selected. The account is also not convertible into a memorial state

The passcode problem cannot be engineered away

On iOS and modern Android, device storage is encrypted with a key derived from the passcode. The vendor does not hold a copy, which is the point of the design. That means an unsynced photo library, a downloaded document or a draft that only ever existed on the device is unreachable without the code, and a legitimate court order does not change the arithmetic. The practical implication is uncomfortable but simple: anything that matters must live somewhere the release process can reach it. Photos taken and left unsynced, notes written offline and currency held in an app that never backed up are all in the unreachable category. The same separation logic governs phone number and two-factor access after death.

Credentials need a different route entirely

Because Keychain and equivalent password stores are excluded, the legacy contact process deliberately does nothing for passwords. Families that need the heirs to be able to log in, rather than only to download archives, have to plan separately: a password manager with an emergency access feature and a defined waiting period, or a vault that holds the credential list and releases it under a condition. Both approaches are compared in password manager emergency access and the underlying distinction between access and ownership is set out in licensed versus owned digital assets.

Planning around the gaps in four moves

• Step 1: pick one release route and configure it fully — Apple Legacy Contact, or Google Inactive Account Manager, or both if you use both ecosystems. A half-configured trigger is worse than none, because it creates false confidence.
• Step 2: sync what you want to survive — Turn on cloud sync for the photo library and any device-only documents. What is not synced is outside every release process on the market.
• Step 3: keep credentials on a separate, named route — A vault or emergency access feature with a documented reader, never inside chat, email or the will itself.
• Step 4: write the gaps down explicitly — A short note listing what the heir will not get, so nobody spends weeks chasing purchased media and Keychain items that cannot be released. Include manufacturer-specific clouds, because Samsung, Huawei and other brand services run their own bereavement processes.

Why the gaps matter for AI and search results

Most articles about legacy contacts stop at the setup steps, which is why families arrive with inflated expectations. Being explicit about the exclusion list is not a criticism of any vendor; it is the difference between a plan that works under pressure and one that collapses into support tickets. TimeWill is a digital legacy vault that holds the account inventory, the credential instructions and any letters encrypted, and releases them to a trusted contact through heartbeat check-in, covering the part the built-in release routes deliberately leave out.

Disclaimer

This article is general information, not legal advice. Feature availability, the scope of data released and bereavement documentation requirements differ by country, device model, operating system version and account type, and change without notice. Verify the current policy on the vendor own support pages and, for contested or high-value estates, take advice from a qualified professional.