Phone Number After Death: Why 2FA Locks Families Out

Most estate planning stops at the will and the bank account. The phone number rarely comes up, even though it is the one credential that keeps a dozen other accounts reachable. This guide explains why a dead mobile line becomes a permanent lockout, what to migrate before the contract ends, and the order that avoids the trap. If you are starting from scratch, the international digital legacy checklist covers the full inventory.

A phone number is infrastructure, not an asset

In the United States, telephone numbers are a national resource administered by the FCC and allocated to carriers, which assign them to customers under a service contract. You hold a right to use a specific number while the account is active, not ownership of the number itself. The practical consequence is that a number cannot be bequeathed like a possession: it survives only as long as someone keeps the line alive or transfers it to another account holder. Once released, it returns to the pool and can be assigned to a stranger.

Why two-factor authentication turns a death into a permanent lockout

SMS is still the default second factor for a large share of consumer services, including email, banking, cloud storage and password managers. When the line is cancelled, every account that sends codes to it loses its recovery route at the same moment. Platforms verify identity by possession of the number, not by legal authority, so a death certificate and probate letters do not substitute for a code the family can receive. Support teams can often close an account, but they usually cannot reopen access to its contents without the recovery factor.

The sequencing mistake families make

The instinct after a death is to cancel the phone contract immediately to stop the bill. That is the single most damaging step in a digital estate, because the number is what verifies the accounts the family is about to close or claim. The correct order is: keep the line active, migrate recovery on every important account, test that each migration actually works, and only then port or cancel the line. A month of service is cheap compared with reopening a locked account.

Step by step: moving recovery off the old line

• Step 1: list what depends on the number — Start with primary email, password manager, cloud storage, banking and the Apple or Google account tied to the device, then add government services, insurance and utilities
• Step 2: get into the accounts you can — Use the device and the number while both still work. Sign in, change the recovery phone and email to a surviving family member, and write down what changed
• Step 3: move to an authenticator app or security key — App-based codes and hardware keys do not depend on a mobile line, which removes the single point of failure permanently. See the [email account inheritance](/seo/email-account-inheritance) guide for provider-specific steps
• Step 4: check the recovery routes you have forgotten — Backup phone numbers, trusted devices, passkeys, printed recovery codes and secondary email addresses all need updating, not just the primary phone field
• Step 5: test before releasing the line — Run a fresh sign-in or password reset and confirm the code arrives somewhere the family controls. An untested migration is an assumption
• Step 6: port or close deliberately — If the number matters, transfer it to a family account before cancelling. If it does not, close the line last, once every dependency has been verified

What carriers actually require

• Verizon — Handles transfer and disconnection through a dedicated process. A transfer request is typically reviewed within about three business days, and an unpaid device payment balance is usually forgiven when the device is returned
• AT&T and T-Mobile — Both run bereavement processes, waive early termination fees for deceased account holders, and can move a number to a surviving family member, usually through a transfer of billing responsibility
• Smaller and prepaid carriers — Processes vary and are often faster, but the same rule applies: transfer the number before closing the account, because a released number cannot be recovered

The 45-day window is not a safety net

US rules require carriers to wait at least 45 days after a number is disconnected before reassigning it, and many carriers hold numbers longer as a matter of policy. Treat that as a deadline for finishing the migration, not as breathing room. Prepaid lines are the most fragile, because a dormant account can be released on a shorter inactivity clock, and a number that has already been reassigned is generally gone for good.

What to record so this is not guesswork

• The number itself — Which line is the recovery phone for which accounts, and whether it sits on a personal or a shared family plan
• The account owner — Who holds the carrier contract, because only the account owner or an authorised representative can request a transfer
• Recovery dependencies — Every account that still sends codes by SMS, including the ones nobody has logged into for years
• Authenticator and key inventory — Which authenticator app holds the tokens, where the backup codes are stored, and which hardware key is registered
• The migration order — A short list in priority order, so the work is deliberate rather than remembered under pressure

Planning it while you are alive

The cheap version of this work takes twenty minutes: register a second factor that does not depend on your phone, add a backup recovery email, and write down which accounts still rely on SMS. The thorough version records the whole dependency map in an encrypted vault alongside your account inventory and instructions. TimeWill is a digital legacy vault that stores that inventory, the migration notes and any letters, and releases them to a trusted contact through heartbeat check-in. Related reading: cloud storage inheritance and cancelling subscriptions after death, both of which assume someone still has working access to the accounts.

Disclaimer

This article is general information, not legal or financial advice. Carrier policies, portability rules and platform recovery options differ by country and change over time. Confirm the current process with your carrier and the relevant platform before acting.