The FIRM Guide

The Digital Legacy Module

The standing orders and per-account dispositions for a person's digital life — what to keep, transfer, memorialize, or delete, and who carries it out.

Where this Module fits

A-04 Module 4 of 8 in the At-Home area — step 2 of 4 on the dependency ladder (System → At-Home → Financial → Estate).

Third of the trio — what happens to it all? Disposition decisions that reference everything the first two modules documented.

Part 3 of 3 in the connected At-Home trio — work Identities, then Subscriptions and Memberships, then Digital Legacy, in that order. See The Connected Trio for the worked example.

Adds to The Secure Guide: General orders per person plus per-account dispositions, sunset plan, digital executor.

Adds to The Family Guide: The crisis-window rule: act only from the plan, verify through the executor.

Every Module adds one section to each guide — that is how the two guides assemble as you work. See what you're building.

Download Text File Nothing is entered on this page — you fill the template in privately.

Text file — the flexible one. Use it as-is, paste it into a spreadsheet, open it in any editor, or paste it into an AI tool to reshape the blank form to fit your family: rename a field, add a row, drop one you don't need.

Print / PDF — the ready-to-use one. Print it and fill it in by hand, or choose Save as PDF and complete it in your own offline PDF app. Either way it stays with you — the finished Secure Guide template goes inside your Vault.

One rule: only ever give an AI tool the blank template. Never paste your real information — passwords, account numbers, anything you'd keep secret — into an AI tool, an online service, or anywhere outside your own Vault. Customizing an empty form is fine; filling it in happens privately, offline. That's the same rule this site follows: nothing sensitive ever leaves your hands.

Secure Guide Starter Template — Digital Legacy

Store this inside your Vault. One general-orders entry per person — children's accounts and footprints count too — plus per-account disposition rows. Update at the annual review.

Third of the trio, and the one the other two were building toward: identities say who has authority, subscriptions say what needs addressing — this record says what happens to each. You are not deciding everything today. A basic preference per major account is enough to start.

Two rules run through every row. First: no legitimate process — platform, exchange, attorney, executor — ever needs a recovery phrase typed into a website, read over a phone, or sent in a message. Anyone asking, however convincing, is the attack. Second: prefer disposition mechanisms that work through a platform's authenticated process rather than through anyone's judgment of a convincing request — activating a legacy tool is a security act, not just an administrative one.

The standing instructions (e.g., personal accounts reviewed by the digital executor before deletion or memorialization; photo and document archives transferred to heirs before any closure; creative work preserved).
Primary and alternate, with formal-vs-informal status noted (see the Estate Plan Module for legal appointment). Pick for trust and technical comfort — the role takes real hours, spread over months.
Per-Account Dispositions
Account / ServiceDispositionTimelineNotes

Delete / transfer / memorialize / archive — reference the Identities and Subscriptions entries rather than re-entering them. The Transferable? column of the Subscriptions catalog feeds this table.

Access method → review window → close connected services → archive → delete, with day counts. Ninety days suits most families — thirty is usually too short for the notices that trail a death. An auto-responder during the review spares senders from writing to the deceased.
Which are on, who is designated, and what each actually grants — read the terms yourself; most exclude stored passwords, private messages, or licensed media. Access keys and credentials go in your password manager.
The digital things kept for meaning and continuity — platform identities, photo and video libraries, creative work, personal-use domains — location and access by reference. Anything that holds or produces monetary value — cryptocurrency, income-generating domains or content — belongs to the Digital Financial Assets Module (Financial area), not here. For photo libraries, name the bulk-export tool and warn that big downloads take days. Recovery phrases, wherever they live: physical Vault only, never digital, never shared on request.
Where downloaded archives land — two places, ideally (see the Backup and Synchronize Module).
Annual — platform features, terms, and designated contacts all change.
Digital Legacy; secure-guide; family-guide; At-Home

Family Guide Starter Template — Digital Legacy

This template contains no sensitive information. It can be stored with household documents.

In the matching Secure Guide section: general orders per person plus per-account dispositions, sunset plan, digital executor.

That detail is what makes recovery possible — and it is protected in the Vault, which opens with The Vault Key. The key is never written here, by design. The people listed on this page know how it is kept, and the steward's job is to keep that path current, so this page never leads to a locked door.

In plain terms: every online account and digital thing the family keeps has a written plan — what gets kept, transferred, memorialized, or deleted, and who carries it out. Nothing has to be figured out from scratch on a hard day.
Two breadcrumbs, no secrets: WHERE THE INVENTORY LIVES (the Digital Legacy section of The Secure Guide — the per-account plan) and WHERE THE PASSWORDS LIVE (the password manager; the executor's first step is its emergency-access procedure, noted in the same section).
Steward + designated digital executor; reviewed annually.
The crisis-window rule, plainly: after a death, act only from the documented plan. Verify any account notice or access request through the executor — never from the message itself. If you cannot reach the password manager, contact the backup executor, who holds emergency access.

Anything this page's reader should know that the sections above didn't ask for — the exceptions, the house quirks, the thing you would say out loud while handing this page over.

Worked example — Frank's family

A colleague of Frank's died suddenly, and Frank watched the widow spend months fighting for email access, canceling subscriptions she discovered one statement at a time, and pleading with customer-service departments that had no process for grief. Frank had the first two trio records done — who they are, what they belong to. Six weeks later he had the answer to the third question: what happens to it all.

All details are fictional and illustrative. The assembled example guides live at the example Secure Guide and the example Family Guide.

Secure Guide — Frank's entry

Frank's general-orders entry, in the At-Home folder of his encrypted Secure Guide volume. Sarah's own entry follows the same shape.

Personal accounts are reviewed by the digital executor before anything is deleted or memorialized. Photo and document archives transfer to the family before any closure. The freelance writing is preserved. And nothing is ever handled from a message: every account notice or access request during the estate is verified through the executor and this plan — never answered directly.
Sarah (primary — informal designation here; formal appointment on the estate-attorney agenda, see Estate Plan Module). Backup: Tom Mercer, Frank's brother — holds password-manager emergency access and can run the same playbook.
Per-Account Dispositions (excerpt)
Account / ServiceDispositionTimelineNotes
Gmail (see Identities: Frank)Transfer to Sarah, then delete90-day review, archive, deleteThe master key — the sunset plan below is this row in detail
Facebook profileMemorializeAt deathLegacy contact designated: Sarah — can pin a post and manage the tribute page, cannot read messages
Streaming + subscriptionsCancelFirst monthWork straight down the Subscriptions catalog — renewal column names the card each one charges
mercerfamily.net (registered 15 years)Transfer to Sarah — keepBefore first renewalNameHarbor registrar — unlock steps and transfer-code procedure documented; the family website rides on it
Photo libraryArchive + transferWithin 90 daysBulk export takes days at this size — start early; two copies per the Backup Module
Work emailArchive then closeEmployer retention periodEmployer-owned; nothing personal rides on it (kept that way on purpose — see Identities)
Money-valued digital assetsSee the Digital Financial Assets ModuleDocumented and dispositioned there, not here — including the crypto position closed in 2026
(1) Sarah takes the Gmail through password-manager emergency access — not by guessing. (2) Review inbox for urgent matters: banking alerts, legal notices, medical bills. (3) Use the account to close connected services, working from the Subscriptions catalog. (4) Auto-responder on, brief and dated. (5) At 90 days: full archive via the platform's export tool, then permanent deletion.
Google Inactive Account Manager — Sarah, 3-month trigger, the backup path if emergency access fails (read the terms: it can't be faster than 3 months). Facebook Legacy Contact — Sarah (memorialization only; no message access). Bitwarden emergency access — Sarah, exercised end to end once already (see Passwords and Passkeys). Each transfers access through the platform's authenticated process — no one has to judge a convincing request.
mercerfamily.net (NameHarbor, personal-use — transfer procedure on file). The photo library (export tool named; days-long download warned). The freelance pieces (in cloud docs; sentimental first). Money-valued assets live in the Digital Financial Assets Module, not here — the closed crypto position is documented there.
Fire-safe drive + the encrypted cloud copy (see Backup and Synchronize)
2026-01 — tools re-checked annually; terms change quietly
Digital Legacy; secure-guide; family-guide; At-Home

A living document, not a monument: when the crypto position moved to the Digital Financial Assets Module's books, this table's row updated the same day. When Lily asked what happens to the family photos, the answer was a walk-through of the archive row — not a promise to figure it out someday.

Family Guide — Frank's entry

This entry sits in the household reference binder. It holds the one rule the family must know without opening anything.

Every online account and digital thing this family keeps has a written plan — what gets kept, transferred, memorialized, or deleted, and who does it. Nobody has to figure anything out from scratch on a hard day.
Two breadcrumbs: the INVENTORY (the per-account plan) is the Digital Legacy section of The Secure Guide; the PASSWORDS are in the password manager — and the executor's first step is its emergency-access procedure, noted in that same section.
Frank maintains the plan; Sarah is the designated digital executor. Reviewed every January.
After a death: act only from the documented plan. Verify any account notice or access request through Sarah — never from the message itself. If the password manager can't be reached, Tom Mercer (Frank's brother, 555-0119) holds backup emergency access.