What Happens to Your Email When You Die?

Email providers hold a great deal of personal and sensitive information, from financial correspondence to private messages, and they generally treat access requests with considerable caution regardless of who is asking. The terms of service that every user agrees to, usually without reading in detail, set out what happens to an account after death, and these terms vary noticeably between providers and can change over time.

Most major providers will not simply disable security and hand over a password to a grieving relative. Instead, they typically ask for a death certificate, some proof of the requester's relationship or legal standing, and sometimes a court order or grant of probate, particularly if the request is for the full contents of the inbox rather than simply closing the account down.

There are usually two different requests a family might want to make. One is to close the account down, which tends to be the simpler request and often requires only a death certificate. The other is to obtain a copy of the emails or the account's content, which is a more sensitive request and is scrutinised more carefully, sometimes requiring formal legal authority.

Because processes and requirements are updated by providers periodically, it is best to search the specific provider's current help pages for deceased user accounts rather than relying on general assumptions, since a process that worked for one email service will not necessarily work the same way with another.

An email address is frequently the master key to a person's digital life, because most other services use it to verify identity and to send password reset links. This means that whoever can access the deceased's email, either legitimately through the provider's process or because they already knew the password, effectively holds the means to gain entry to many of the other accounts linked to that address.

This is precisely why access to an inbox needs to be handled carefully and through proper channels. It also means that a family dealing with an estate should think early about which services were linked to the deceased's main email address, since this affects the order in which accounts might need to be closed, transferred, or investigated for outstanding value.

Where a password happens to be known, perhaps because it was shared during the deceased's lifetime for a legitimate reason, using it to access the account after death is not automatically safe from a legal point of view. Accessing a computer system without proper authorisation can potentially fall foul of the Computer Misuse Act 1990, and death does not automatically transfer the authority to use someone's private accounts to a family member.

This does not mean families are left helpless. It means the safer and more reliable route is to go through the provider's official bereavement or deceased user process, even if it takes longer than simply typing in a known password, because it protects both the provider's data protection obligations and the family from any question about how access was obtained.

The most effective way to make this easier for whoever deals with your affairs is to set out, in a secure document kept separately from your will, which email accounts you hold and any instructions about what should happen to them. Some providers offer a feature that lets you nominate someone to receive limited access after a period of inactivity, and setting this up in advance removes much of the uncertainty.

A will is still the right place to record who should deal with your estate generally, through your named executors, but it is not the right place to store account passwords, since it becomes a public document once probate has been granted. Keeping a password manager, or a written note stored securely and told to a trusted person, works far better in practice.