Is a dead man's switch legal?

Is a dead man's switch legal to use?

A dead man's switch is scheduled delivery with a cancel button. You write something, pick recipients, and the service sends it unless you keep telling it not to. No jurisdiction we know of bans that idea, any more than it bans leaving a sealed envelope with a friend. If you are asking whether you can get in trouble just for having one, the short answer is no.

Where law does apply is the content and the consequences. Three questions cover most of it: Is the information yours to share? Does sharing it break a contract you agreed to, such as a platform's terms of service? And is anyone relying on the message as if it were a legal document? Everything below expands on those three. If you are new to the idea, what a dead man's switch is explains the mechanics first.

What a dead man's switch is, and what it isn't

Most legal confusion comes from expecting a dead man's switch to do more than it does. It is a delivery mechanism: a way to make sure certain words, credentials or files reach certain people at a certain moment.

• It is not a will

  A valid will directs who inherits your property and who administers your estate, and it needs formalities an app message does not have. If you want your wishes to bind anyone, you still need a proper will. Our guide to the digital will explains how the two fit together.

• It does not transfer ownership or authority

  Sending someone your login does not make them the owner of the account, the money in it or the photos stored there, and it does not make them your executor or representative. Ownership passes through your estate; authority comes from a will, a power of attorney or a court. The switch only moves information.

• It is a private instruction, not a public record

  Nobody files it anywhere. Good for privacy, but a recipient cannot show it to a bank or registry and expect it to be honoured on its own.

Is it legal to release passwords after death?

This is the question people actually worry about. The honest answer: it is rarely a criminal matter, but it often sits in tension with the contract you signed when you opened the account. Two layers apply.

The first is the platform's terms of service. Many services say your account is personal, that you should not share your password, and that your rights in it end at death. Apple's iCloud terms, for example, state that the account is non-transferable and that rights to it terminate on death except through Apple's own Digital Legacy process or where the law requires otherwise. Google says it can work with family members and representatives to close a deceased person's account and, in some circumstances, provide content from it. Breaking those terms is usually a contract issue, with the likely outcome being a locked or closed account, but it is worth knowing before you hand over a login.

The second is the law itself. In the United States, most states have adopted a version of the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), drafted by the Uniform Law Commission. Broadly, it lets an executor or other fiduciary ask a provider for access to a deceased person's digital assets, with the user's own instructions taking priority over the provider's default terms. In the European Union, the GDPR by its own text does not apply to deceased persons, leaving each member state to set its own post-mortem data rules. Elsewhere the picture ranges from detailed to silent. The upshot is the same everywhere: an official route exists for executors, it is slow, and it may not hand over everything.

A dead man's switch sits alongside that route rather than replacing it. Sharing your own credentials with someone you trust is generally lawful; the recipient then decides whether logging in is appropriate under the platform's terms and local law. For most families that means using the switch for what matters immediately, such as the phone passcode, the password manager and the email that receives reset codes, and the formal process for the rest. See passwords after death and our two-factor backup guide. This is general information, not legal advice.

Does a message delivered by a dead man's switch count as a will?

Almost always, no. Most places require a signed writing and witnesses, sometimes notarisation; a few recognise handwritten wills, and a small number now recognise electronic wills signed under strict conditions. A text message released by an app meets none of those tests on its own.

That does not make the message useless. A letter explaining your reasoning, listing where things are, or saying who you would like to have a particular item can guide your executor and reduce arguments, even though it binds no one. Keep it consistent with your actual will, because if the two conflict, the will wins and the family is left confused. If you have no will yet, fix that first; the switch can then carry a copy, or a note saying where the signed original is. Our guide to writing a legacy letter covers the personal message.

What are the legal risks of using a dead man's switch?

The risks are mostly about contents and people, not the tool.

• Release while you are still alive

  A switch responds to silence, which is the point: if you are in hospital, your family gets what they need. If it was a false alarm, you tell them and delete the box. Legally nothing has changed, because you still own everything and can revoke any access. Pick an interval you will keep and run a test first. What happens when you miss a check-in explains the reminders.

• Recipient misuse

  Once a password is out of your hands, a recipient could use it in ways you did not intend, or before an executor is appointed. Choose people you would trust with the same information today, and spell out what you want done and what you do not.

• Privileged or confidential information

  If you are bound by professional confidentiality, client and patient data does not belong in a personal dead man's switch. Professional rules usually require a formal succession plan for that material.

• Business and employer accounts

  Work logins and anything under a non-disclosure agreement are usually the employer's property and often covered by policies that forbid sharing. Handing them to a family member can put you in conflict with your contract. Keep company credentials in the company's own system and tell colleagues what the succession plan is.

• Instructions that are illegal to carry out

  A message cannot authorise someone to move money out of your estate before probate, hide assets from creditors or tax authorities, or impersonate you to a bank. Writing it down does not make it lawful, and the recipient carries the risk. If you want money to go somewhere, use the will or a beneficiary designation.

• Financial accounts and crypto

  Sharing a bank login or seed phrase lets someone act, but does not change who legally owns the funds; the estate still has to account for them. For crypto, where there is no institution to appeal to, the switch may be the only practical route, so pair it with clear instructions. See our guide to crypto after death.

When should you involve a lawyer?

Most people can set up a dead man's switch sensibly without one. A short conversation with an estate professional is worth it when you own a business or hold accounts that belong partly to someone else; have significant assets, property in more than one country, or a family where disputes are plausible; hold crypto or other assets that exist only as credentials; are subject to professional confidentiality; or want a recipient to have genuine authority, which means a will, power of attorney or trust rather than a message. And if you have no valid will yet, the lawyer's first job is that.

Bring a list of your accounts and what is in them. A digital legacy checklist makes the meeting shorter.

How do you use a dead man's switch responsibly?

Used well, a dead man's switch spares people weeks of guessing. These habits keep it on the right side of both the law and your own intentions.

• Keep a real will, and name an executor

  The switch carries information; the will carries authority. Have both, and make sure the executor receives the switch's contents or knows who does.

• Describe, don't just dump

  Alongside each credential, say what the account is and what you would like done with it. A list of passwords with no context invites mistakes.

• Leave out what isn't yours

  Work systems, clients' data, accounts belonging to someone else and anything under an NDA stay out.

• Prefer official legacy tools where they exist

  Several large platforms offer a legacy contact or inactive-account setting. Set those up too; they are the route the platform's terms expect. Our Gmail, iCloud and Facebook guides cover each one.

• Review it yearly

  Passwords, relationships and laws change. Pair the review with updating your will and your wider digital legacy plan.

How PostMortem fits within the law

PostMortem is a free iOS and Android dead man's switch built so the service carries your information without being able to read it. Messages, passwords, file names and contents, and financial details are encrypted on your phone with AES-256 using a personal key only you hold, and decrypted in your recipient's browser from the access key card you gave them. The box name, recipient addresses and check-in schedule stay readable so reminders and delivery work. Managed protection is coming; today you hold the only key, which is also what keeps PostMortem out of your data.

You decide who receives each message box, you can change or delete a box while you are alive, and you choose whether recipients are told in advance. Check-ins are one tap in the app, with reminders by email and push before anything is released. What PostMortem is not: a will, a legal instrument or a substitute for an executor. It is the envelope, not the signature. Read more about how it works and the security model.

Frequently asked questions

• Is it illegal to set up a dead man's switch?

  No. Creating a scheduled, cancellable delivery of your own messages or files to people you choose is lawful in general. Legal questions arise only from what the message contains and how recipients use it. This is general information, not legal advice.

• Is it legal to give someone my passwords after I die?

  Sharing your own credentials with someone you trust is generally lawful, but many platforms' terms say accounts are personal and non-transferable, so the recipient's use of them may conflict with those terms. Laws such as RUFADAA in US states give executors an official route to request access; a dead man's switch works alongside that route rather than replacing it.

• Does a dead man's switch message count as a will?

  Almost never. Wills need formalities such as signatures and witnesses that an app message does not have. Treat the message as a letter of wishes and keep a properly executed will as well.

• What happens legally if my switch releases while I'm alive?

  Nothing changes: you still own everything and can revoke any access. Tell your recipients it was a false alarm, change any passwords you are uncomfortable having shared, and delete the box. Choosing a check-in interval you will keep, and using the test box first, makes this unlikely.

• Can I put work accounts or client data in a dead man's switch?

  Usually not. Employer systems and client or patient information belong to someone else and are often covered by confidentiality rules or security policies. Keep those in the organisation's own succession plan and use your personal switch for your own affairs.

• Does the GDPR protect my data after I die?

  The GDPR itself states that it does not apply to deceased persons and leaves post-mortem data rules to each EU member state, some of which have their own provisions. Elsewhere, rules range from detailed to nonexistent, which is one reason a dead man's switch is useful: it does not depend on a provider's policy to get information to your family.