$0 Digital Legacy Kit Quick Start Checklist

How to Make a Digital Asset Inventory for Aging Parents (Step-by-Step)

Most families don't discover the full scope of a parent's digital life until after a health crisis hits. That's when you find out Dad has a Fidelity account you didn't know about, Mom's email password is written on a sticky note that fell behind the desk, and nobody knows whether there's a crypto wallet anywhere.

Building a digital asset inventory — a structured record of every account, device, and digital holding — is one of the most concrete, useful things you can do for your family right now. It doesn't require legal expertise. It doesn't require your parent to be tech-savvy. It requires about two to four hours of focused effort, spread across a few sessions, and a willingness to start.

This guide walks you through exactly how to do it.

What "digital assets" actually means

The legal definition of a digital asset varies by state, but for practical purposes: a digital asset is anything of value that exists online or is accessed through a digital device. That's broader than most people expect.

Digital assets include:

  • Financial accounts — banking portals, brokerage accounts, PayPal, Venmo, cryptocurrency wallets
  • Email accounts — Gmail, Yahoo, Outlook, iCloud Mail (these are arguably the most important because they unlock everything else)
  • Social media — Facebook, Instagram, LinkedIn, Twitter/X, YouTube
  • Subscriptions — Netflix, Spotify, Amazon Prime, Microsoft 365, cloud storage, newspapers
  • Government portals — ssa.gov, Medicare, IRS online account, VA benefits
  • Insurance and medical — health insurance portals, MyChart, pharmacy accounts
  • Digital photos and memories — Google Photos, iCloud Photos, Flickr, Dropbox
  • Domain names and websites — blogs, small business sites, hosted content
  • Devices — iPhones, tablets, laptops, external hard drives (including the passcodes and PINs to access them)
  • Loyalty programs — airline miles, hotel points, grocery rewards

The average person over 65 has between 50 and 100 accounts. Most of them know about maybe 20.

Why this matters more than most families realize

When an account holder dies or becomes unable to manage their affairs, each platform applies its own rules — not your family's wishes, not the will. Facebook won't give a family member access just because they ask. Gmail won't reset a password for a deceased person's account without going through a formal (and often slow) process.

More immediately: if your parent ends up in the hospital tomorrow and you need to pay their electric bill or cancel their prescriptions, you'll need access to their accounts. Not someday — immediately.

Three things make this especially urgent:

  1. Email is the master key. Nearly every other account can be recovered through email — if you have access to the email. If you don't, recovering everything else becomes exponentially harder.
  2. Subscriptions keep billing. The average household spends $273 per month on subscriptions while thinking they spend $111. Without knowing what subscriptions exist, they keep charging a dead person's credit card for months.
  3. Some losses are permanent. A locked iPhone with no backup and no one who knows the passcode cannot be unlocked — not even with a court order. Photos stored only on that device are gone forever.

Before you start: what you need

  • 90 minutes for your first session (you won't finish in one sitting — that's fine)
  • A secure place to record what you find — a password manager is ideal; a handwritten notebook in a fireproof safe is acceptable; a Google Doc is not secure enough
  • Your parent's cooperation — this works best done together, not done for them without their knowledge
  • A patient mindset — the goal is progress, not perfection

If your parent is resistant, try framing it as: "I just want to be able to help you if you're ever in the hospital and can't get to your computer. This isn't about anything morbid — it's just practical."

Free Download

Get the Digital Legacy Kit Quick Start Checklist

Everything in this article as a printable checklist — plus action plans and reference guides you can start using today.

Step 1: Start with email

Email is both the highest priority and the best starting point, because email inboxes reveal almost everything else.

Ask your parent to open their email inbox. Then:

  1. Search for terms like "welcome," "subscription," "receipt," "your account," and "verify"
  2. Make a list of every service that shows up in results
  3. Record the email address and password for the email account itself — this goes on a separate emergency sheet that stays with physical documents, not in a digital file

Your parent may have more than one email address. Check for old Yahoo, AOL, Hotmail, and Comcast accounts in addition to Gmail or iCloud Mail.

Step 2: Financial accounts

Work through each category systematically. For each account, record:

  • Institution name
  • Website URL
  • Username/login email
  • Where the password is stored (in the password manager, written in the notebook, etc.)
  • 2FA method (text message, authenticator app, backup codes)

Banking: Ask your parent to log into their bank's website. Note every account — checking, savings, CDs. If they have accounts at multiple banks, get all of them. Also check for credit union accounts, which are easy to forget.

Investment and retirement: Brokerage accounts (Fidelity, Schwab, Vanguard), 401(k) portals, IRAs. These often have different login systems than the financial institution's main bank site.

Payment apps: PayPal, Venmo, Zelle, Apple Pay, Google Pay, CashApp. Even small balances matter; PayPal accounts often hold dormant funds.

Cryptocurrency: If your parent holds any crypto, this is the highest-stakes category. You need the exchange account credentials (Coinbase, Kraken, Binance) AND — for any self-custody wallets — the seed phrase: a 12- to 24-word recovery phrase that must be written down and stored separately from everything else. Without the seed phrase, crypto in a hardware wallet is permanently irrecoverable.

Step 3: Subscriptions and recurring charges

Open your parent's credit card or bank statement and look for recurring charges. For each one that isn't immediately obvious, identify what it is and whether it should continue after death.

Common subscriptions that are easy to miss:

  • Streaming: Netflix, Hulu, Disney+, Peacock, Paramount+, Apple TV+, Amazon Prime Video
  • Music: Spotify, Apple Music, Pandora
  • Cloud storage: iCloud+, Google One, Dropbox, OneDrive
  • Software: Microsoft 365, Adobe, antivirus programs
  • News: New York Times, Wall Street Journal, local newspaper
  • Magazines, meal kits, supplements on auto-ship
  • Gym or senior fitness programs

Make a note of which ones should be cancelled immediately upon death versus which the family might want to keep temporarily (Amazon Prime, for example, if there are pending deliveries to settle).

Step 4: Government and medical portals

These matter both for managing affairs during incapacity and for notifying agencies after death.

  • Social Security (ssa.gov account) — monthly benefit amount, bank account on file for direct deposit
  • Medicare — plan details, Part D prescription coverage, login for medicare.gov
  • IRS — irs.gov account for tax records and refund status
  • VA benefits — if your parent is a veteran, login for va.gov
  • Patient portal — MyChart or Epic login used by their doctors
  • Pharmacy — Walgreens, CVS, or mail-order pharmacy account with prescription history

Step 5: Social media and communication

For each social media account, record the login credentials and note your parent's wishes: do they want the account deleted after death, or memorialized?

Also note whether legacy/memorialization settings have been configured. This is separate from the inventory — see our guides on Apple Legacy Contact and Google Inactive Account Manager for setup instructions.

Don't overlook:

  • Facebook (the most critical for most seniors — often where memorial posts are shared)
  • Email-based accounts that also function as social networks (LinkedIn)
  • YouTube channels if your parent has uploaded videos
  • Any community forums or niche platforms they participate in

Step 6: Devices and physical access

Accounts without device access can still often be recovered through email. But devices with local-only data — photos not backed up to the cloud, documents saved only to the desktop, voicemails — can be permanently lost if no one knows the passcode.

For every device your parent owns:

  • iPhone/iPad: Note the 6-digit passcode. Verify iCloud Backup is on (Settings → their name → iCloud → iCloud Backup). Set up a Legacy Contact if not already done.
  • Android phone/tablet: Note the PIN or pattern. Verify Google Photos backup is enabled.
  • Computer: Note the login password. Check whether FileVault (Mac) or BitLocker (Windows) encryption is active — if so, note the recovery key location.
  • External hard drives and USB drives: List what's on them and where they're stored.

Write device passcodes on a physical emergency sheet, not in a digital document. If someone needs that passcode in an emergency, they probably don't have access to your digital systems.

How to store what you've collected

This is the point where most families make a mistake — they put everything in an unsecured Google Doc or email it to themselves, creating a new security risk in the process of solving an old one.

Recommended storage approach:

  1. Primary: A family password manager (1Password Families or Bitwarden Families) with emergency access enabled for a trusted family member. This is the most secure and most accessible option.
  2. Printed backup: A physical copy of the most critical information — email credentials, bank account list, device passcodes — stored in a fireproof safe at home.
  3. Secondary physical copy: A sealed envelope with a trusted family member or estate attorney.

What not to do:

  • Don't email the inventory to anyone
  • Don't store it in a regular (non-encrypted) cloud document
  • Don't keep only one copy
  • Don't put the master password for your password manager in the password manager

Keep it current

A digital asset inventory completed once and never updated is better than nothing — but it will be significantly incomplete within two years. Set a calendar reminder to review it annually (tax season works well as a trigger) and update it after any of these events:

  • A new account is created
  • An account is closed
  • Your parent gets a new device
  • They move to a new state (digital estate laws differ by state)
  • There's a security breach or password change

The Digital Legacy Kit

If you want a structured system for this process — printable worksheets, a step-by-step inventory template organized by category, a platform legacy settings checklist, and an "If Something Happens" letter template your parent can complete — the Digital Legacy Kit was built exactly for this situation.

It's designed for adult children who want to do this right, not just throw something together. The printed worksheets are meant to be filled in by hand and stored with physical documents — keeping sensitive information off screens entirely.

The families who navigate a parent's death or incapacity with the least chaos aren't the ones with the most technical knowledge. They're the ones who did this work in advance, when there was no pressure and plenty of time to think clearly.

That's exactly what you're doing right now.

Get Your Free Digital Legacy Kit Quick Start Checklist

Download the Digital Legacy Kit Quick Start Checklist — a printable guide with checklists, scripts, and action plans you can start using today.

Learn More →