Somewhere in your phone's settings, buried two or three menus deep, there is a switch that decides what your family gets when you die. There is another one in your Google account, and a third on Facebook. The largest technology companies in the world spent the last decade quietly building death infrastructure — real, functioning mechanisms for handing something to the people you leave behind. Almost nobody flips them.
This is worth fixing today, because each switch takes about five minutes. It is also worth understanding precisely, because the three switches do very different things, trigger in very different ways, and all of them stop well short of what a family actually needs.
The switch Apple built: a key and a death certificate
Apple calls it Digital Legacy, and it has shipped with every iPhone since iOS 15.2. In Settings, under your name, then Sign-In & Security, you can name a Legacy Contact. Apple generates an access key — a long code your contact stores, or that lives quietly in their own Apple account if they have one.
When you die, your legacy contact presents two things: that key, and a death certificate. Apple reviews the request, and if it checks out, your contact gets access to your iCloud data — photos, notes, mail, contacts, calendars, files, messages backed up to iCloud. They get roughly three years of access before the account is deleted.
Notice what's excluded, because the exclusions are the point. Your legacy contact does not get your purchased movies, music, or books — those were licenses to you personally, and they die with you. They do not get your payment information. And they do not get anything in iCloud Keychain, which means they do not get a single saved password. Apple will hand your family your camera roll and withhold the keys to everything else, by design.
The switch Google built: silence as a trigger
Google's version, the Inactive Account Manager, has existed since 2013 and works on an entirely different principle. Apple waits for proof of death. Google waits for silence.
You choose an inactivity window — three to eighteen months. If you stop signing in, Google first tries to warn you, by email and text. If the silence continues, it notifies up to ten people you chose in advance and shares whatever slices of your data you pre-selected: Gmail, Drive, Photos, your choice. You can also tell Google to delete the account entirely once that process finishes.
The philosophical difference matters more than it first appears. Apple's switch requires someone to know it exists, hold the key, and act. Google's switch fires on its own — a genuine dead man's switch, useful precisely because death is rarely announced to the companies that need to know. If nobody in your life knows to file a request, Apple's mechanism sits inert forever. Google's eventually goes off regardless.
The switch Facebook built: a caretaker, not an heir
Facebook's legacy contact is the narrowest of the three. When your profile is memorialized, the person you named can pin a tribute post, update the profile photo, respond to new friend requests, and request that the account be deleted. They cannot log in as you, cannot read your messages, cannot edit or remove what you posted while alive. The role is closer to groundskeeper than executor — someone to tend the memorial, not inherit the estate. If you'd rather not have a memorial at all, you can instruct Facebook in advance to delete the account permanently instead.
What all three switches have in common
Line them up and a pattern emerges: every built-in death tool is designed for grief, not continuity. Photos for the family album. An archive of old email. A tended memorial page. These are genuinely humane features — and they are consumer features, built to solve the platform's problem: what is a lawful, terms-of-service-compatible way to dispose of a dead user's data?
None of them hands over a password. None of them will renew a domain, answer a customer, transfer money, or keep a server running. They deliver the sentimental layer of a digital life and carefully quarantine the operational one. For most people that gap is tolerable. For anyone running something — a business, a client roster, a product with paying users — the gap is the whole problem.
Why five minutes succeeds where estate planning fails
Here is the honest reason to set these up anyway, and to do it today rather than someday: the psychology is on your side for once.
Decades of research on goal pursuit, much of it by the psychologist Peter Gollwitzer, distinguishes between goal intentions — "I should get my affairs in order" — and implementation intentions, which bind a specific action to a specific cue: when X happens, I will do Y. Vague goals fail at spectacular rates because they never specify a moment to act; the mind files them under "eventually" and eventually never arrives. Implementation intentions work because they pre-decide the moment, and pre-decided actions tend to execute almost automatically.
"Estate planning" is the ultimate goal intention: enormous, fuzzy, emotionally aversive, with no obvious first step. "Open Settings, tap your name, add a legacy contact" is an implementation intention with the first step built in. The platforms have accidentally atomized a dreaded life task into three settings toggles. Take the win. Do all three before you close this tab.
The trap waiting on the other side
There is one caution, and it comes from the same literature. Psychologists studying moral licensing have repeatedly observed that completing a small virtuous act can quietly reduce the drive to complete the larger one it stands in for — the salad ordered at lunch that licenses the dessert. Setting a legacy contact feels like estate planning. It produces the same small exhale, the same sense of a box ticked.
But look again at what you actually handed your family: a camera roll, an email archive, a memorial page with a well-chosen photo. Meanwhile the registrar that holds your domain has no legacy contact. Stripe has no legacy contact. Your cloud provider, your bank's app, your accounting software, your customer database — no switch in any settings menu, nobody watching for silence. A few outliers exist — GitHub lets you name an account successor, and some password managers offer an emergency-access grant — but the coverage is patchwork, each with its own trigger, scope, and waiting period, and none of it adds up to a plan.
The five-minute switches are real and worth flipping. They are the perimeter fence, not the house.
Finish the job the platforms started
The deeper lesson of Digital Legacy and Inactive Account Manager is that handoff infrastructure works when it exists before the death — named people, pre-authorized access, a trigger that doesn't depend on the deceased announcing anything. The platforms built that for photos. Nobody builds it for the operational core of a one-person business, because no single platform owns it. That layer — which accounts exist, who steps in, what they'll need, how they get it — has to be assembled deliberately, by you, while assembling it is still possible.
That assembled layer is exactly what Heirloom is for. It's a death binder for solo founders: a vault for the credentials and instructions no legacy contact will ever receive, beneficiary and handoff details in one place, built on the same principle that makes the platform switches work — decide everything in advance, so the people you love inherit a map instead of a locked building. If you've just flipped the three switches above, you've done the first five minutes; Heirloom is for the rest.