Digital Assets in Your Colorado Estate Plan

Man reviewing digital assets and online accounts on futuristic displays

Permission Is Not a Password

Can my family access my online accounts after I die? Only if you arranged it. Colorado's RUFADAA, C.R.S. § 15-1-1501 et seq., sets a three-tier priority: the provider's own online tool (like Google's Inactive Account Manager or Apple's Legacy Contact) controls first, then your will, trust, or power of attorney, then the platform's terms of service. Without express consent in one of those layers, your family may get an inventory of your accounts but not the contents, and no statute can recover a password or a crypto seed phrase nobody wrote down.

Think about what actually lives behind your screens. Twenty years of family photos on a cloud account. The email address every bank notice goes to. A PayPal balance, frequent flyer miles, a small business's Instagram, maybe a Coinbase account that has quietly become one of the larger assets you own. Now imagine your spouse, the week after your funeral, trying to get into any of it with no password, no plan, and a customer service line that is legally barred from helping.

Colorado solved part of this problem by statute in 2016. The rest of it can only be solved by you, in advance. Here is how the law works and what a practical digital plan looks like.

The Law: Colorado's RUFADAA and Its Three Tiers

Colorado adopted the Revised Uniform Fiduciary Access to Digital Assets Act, effective August 10, 2016, at C.R.S. § 15-1-1501 and following. RUFADAA tells custodians, Google, Apple, Meta, banks, exchanges, when they may disclose a deceased or incapacitated person's digital assets to a fiduciary: the personal representative of an estate, a trustee, an agent under a power of attorney, or a conservator.

The statute resolves conflicts with a strict priority ladder:

"A user may use an online tool to direct the custodian to disclose to a designated recipient or not to disclose some or all of the user's digital assets, including the content of electronic communications. If the online tool allows the user to modify or delete a direction at all times, a direction regarding disclosure using an online tool overrides a contrary direction by the user in a will, trust, power of attorney, or other record." (C.R.S. § 15-1-1504)

Tier one: the provider's own online tool. Google's Inactive Account Manager, Apple's Legacy Contact, Facebook's Legacy Contact. Whatever you set there beats everything else, including your will. Tier two: your estate planning documents, a will, trust, or POA that expressly addresses digital assets. Tier three, when you did nothing: the platform's terms of service, which usually means minimal access and sometimes deletion. Statute text at leg.colorado.gov.

One distinction in the statute matters enormously in practice. RUFADAA separates the catalogue of communications (the existence of accounts, sender and recipient logs) from the content (the actual emails and messages). A fiduciary can often obtain the catalogue, but content requires the user's express consent, in an online tool or estate document. A will that never mentions digital assets leaves your personal representative reading a list of your accounts without being allowed inside any of them.

Modern legal concept representing digital asset law

What the Law Cannot Do

RUFADAA grants permission. It does not produce access, and the gap between those two is where families actually get stuck. A court order does not defeat two-factor authentication pointed at a dead person's phone. A statute cannot reset a password manager's master password. And nothing in Title 15 can regenerate a crypto seed phrase; coins whose keys die with their owner are simply gone, an outcome that has erased fortunes and has no legal remedy at all.

So a digital estate plan has two halves. The legal half: documents and online tools granting consent. The practical half: making credentials reachable. Neither works alone. Consent without credentials produces lawful frustration; credentials without consent can put a well-meaning spouse in violation of federal computer access laws and the platform's terms. Logging into a dead person's account with their password is, formally, unauthorized access; RUFADAA exists precisely so families do not have to do that.

Your family’s protection should not wait for someday.

Flat-fee options and fast timelines. Talk to a Colorado estate planning attorney today.

Call (720) 499-0000 Now

Building the Plan: Five Steps

First, inventory. List your accounts: email, cloud storage, photos, banking and investment portals, subscriptions, social media, domains, loyalty programs, crypto wallets and exchanges. The inventory itself is an estate document your family will use; keep it current and keep it findable.

Second, set the online tools. The big providers' legacy settings are tier one under Colorado law, so make them match your plan rather than override it: name your spouse or personal representative, not whichever child helped you set up the phone in 2019.

Third, put digital asset language in your documents. Your will, trust, and financial power of attorney should expressly grant your fiduciaries authority over digital assets, including the content of electronic communications. The POA matters as much as the will: during incapacity, someone needs lawful authority to reach your email, where every reset link and account notice lands.

Fourth, solve the credential problem once, with a password manager. One strong master credential, shared by a mechanism you control: an emergency access feature, a sealed letter with your estate documents, a safe deposit box. Update one place instead of eighty.

Fifth, treat crypto as its own category. Self-custodied assets need seed phrase storage that survives you, metal backup, safe, or splitting arrangements, plus written instructions a non-technical spouse can follow. Exchange accounts at least sit with a custodian RUFADAA can reach, but withdrawal still requires planning. The asset class with no recovery department deserves the most redundancy.

A Castle Rock household that does these five things has converted a legal dead end into a checklist, and the whole exercise usually takes an afternoon plus one conversation with the people you have named.

Frequently Asked Questions

Can my family access my online accounts after I die?

Only with authority arranged in advance. Colorado's RUFADAA gives first priority to the provider's online tool settings, then to express consent in your will, trust, or POA, then to the platform's terms of service. Without consent in one of those layers, your family may learn what accounts exist without ever seeing their contents.

What is RUFADAA?

The Revised Uniform Fiduciary Access to Digital Assets Act, Colorado's version effective August 10, 2016 at C.R.S. § 15-1-1501 et seq. It governs when online custodians may disclose digital assets to personal representatives, trustees, agents under a POA, and conservators, balancing fiduciary access against user privacy.

Does my will override my Google or Apple legacy settings?

No, the reverse. Under C.R.S. § 15-1-1504, a direction in a provider's online tool overrides a contrary direction in your will, trust, or POA. Legacy contact settings should be reviewed alongside your estate documents so the layers agree.

Is it legal for my spouse to just use my passwords after I die?

It is risky. Accessing another person's account without authorization can violate federal computer access law and the platform's terms, even for a spouse with good intentions. RUFADAA consent in your documents and online tools gives your family a lawful path instead.

What happens to cryptocurrency when someone dies without sharing the keys?

Self-custodied crypto without a recoverable seed phrase is permanently lost; no court order or statute can regenerate keys. Crypto plans require secure, survivable key storage and instructions a non-technical heir can follow. Exchange-held accounts are reachable through RUFADAA but still need consent language and beneficiary planning.

What should a digital asset inventory include?

Email and cloud accounts, financial portals, social media, subscriptions, domains, loyalty points, photo libraries, password manager details, and crypto holdings with their custody arrangements, plus where the credentials live. Store it with your estate documents and update it yearly; an outdated inventory fails quietly.

Not sure where to start? Start with a conversation.

Get clear answers on wills, trusts, and probate in one free consultation.

Call (720) 499-0000 Now

Your Online Life Needs an Offline Plan

Digital assets are now standard estate planning, and the documents only work when the online settings and credentials line up with them. Tactical Lawyers builds estate plans with full digital asset provisions for clients across Douglas County and the Denver metro, on transparent flat fees explained in writing. Call (720) 499-0000 or request a free consultation. We answer within 24 hours, and usually much sooner.

This article is for informational purposes only and is not legal advice. Digital asset outcomes turn on specific facts and platform terms; consult a licensed Colorado attorney about your situation.