What happens to your online accounts when you die?

What happens to your online accounts when you die?

BSides Manchester What happens to the numerous user logins you’ve accumulated after you die or become too infirm to manipulate a keyboard?

Some people have a plan, the digital equivalent of living will, or have chosen “family” option in a password management package such as LastPass or have entrusted a book of passwords to a family member.

But the consequences of doing nothing are not as neutral as some might expect and were spelled out during an informative presentation by Chris Boyd of Malwarebyes at BSides in Manchester on Thursday. The presentation, cheerily titled “The digital entropy of death”, covered what could happen to your carefully curated online presence after you log off.

Chris Boyd at BSides - Pic by John Leyden
The dormant accounts of the deceased can be abused, warns Malwarebytes’ Chris Boyd. Pic: John Leyden

Miscreants are already targeting obviously abandoned profiles. Boyd explained that in some cases it’s easier for fraudsters to gain hold of these accounts than the account-holders’ relatives, because crooks know the systems better and controls – although present – are often deeply embedded on the sites such as Facebook, Twitter et al.

Alongside regular postings asking for help on Facebook due to compromise of dead people’s logins (examples here and here) there’s also the problem of “cloning”.

“Facebook users have reported receiving friend requests from accounts associated with dead friends and family members,” The Independent reports. “Such requests appear to be the result of cloning or hacking scams that see criminals try [to] add people on the site, and then use that friendship as a way of stealing money from them or running other cons.”

Social media accounts are, of course, just the tip of the iceberg. Most people these days run 100+ accounts, as figures from password management software apps show. These figures are only increasing over time. Some sites are managing the inevitability of their users shuffling off this mortal coil with features designed to deactivate accounts after months of inactivity or other features, Boyd explained in a recent blog post:

Many sites now offer a way for relatives and executors to memorialise, or just delete, an account. In other circumstances, services would rather you ‘self-manage’ and plan ahead for your own demise (cheerful!) by setting a ticking timer. If the account is inactive for the specified length of time, then into the great digital ether it goes.

While a lot of services don’t openly advertise what to do in the event of a death on their website, they will give advice should you contact them, whether social network, email service, or web host. When there’s no option available, though, people will forge their own path and take care of their so-called ‘digital estate planning’ themselves.

Users would be ill-advised to leave everything to their next of kin. “Do some pre-handover diligence, and take some time to ensure everything is locked down tight,” Boyd explained. “If there’s anything hugely important you need them to know, tell them in advance.”

People may have bought digital purchases tied to certain platforms. Games on Steam, or music on iTunes or Spotify.

“Legally, when you go, so do your files (in as much as anything you can’t download and keep locally is gone forever),” Boyd explained. “That’s because you’re buying into a licence to use a thing, as opposed to buying the thing itself.”

Here’s a video of his presentation, if you want to see more…

There’s nothing stopping someone from passing on a login to a family member so they can continue to make use of all the purchased content, at least for now. Boyd predicted that at some point, all of our digital accounts tied to financial purchases will have some sort of average human lifespan timer attached to them.

Millennials mark the first generation not to know life before an always-on, everywhere internet, which will become the norm from now on. “Younger generations absolutely will demand reforms to the way we think about digital content, ownership, and inheritance,” Boyd concluded. ®

As well as the inevitable rise and fall of social media site (e.g. MySpace), and web 2.0 services there is also the issue of link rot, the phenomenon of more and more URLs not working over time. This issue is covered by Boyd in another recent blog post here.

Is It Safe To Share The Password To Your Bank Account With An App?

Digital Death Clean: How To Wipe Your Ex Out Of Your Life

I have a bit of a slash-and-burn preference when it comes to managing recent exes; as in, I try to push them far away from my eyes, ears, screens, and general orbit. Breakup etiquette varies by the individual, of course, but I’m a big believer in ceasing Facebook friendship (or, at the very least, unfollowing). It’s weird to feel nostalgic for the time when that was enough to banish an ex from your pixelated portals—now, the measure is only one facet in a series of controlled burn tactics.

Even after unfriending, then unfollowing on Instagram and Twitter, there’s still work to be done to scrub all those timelines of your ex. Enter: the Digital Death Clean. It sounds metal because it is—and it works. Let’s look at how to rid your internet and phone of crummy former flings once and for all.

Yes, in theory, simply ending a Facebook friendship should mean you never have to see said unfriended person on your feed ever again. And yet! It’s not exhaustive; namely, your search history never forgets. Until you tell it to. Clear your Facebook search history by clicking into the search bar. From there, hit edit, and clear searches. Gone! This is a good option if you don’t want to be so extreme as to full-on block them from ever viewing your profile (and you theirs).

Again, blocking is always an option, but the mute button is a little less visceral. Fam, this function has been around since 2014. Head to their account (which you perhaps have already unfollowed), click the three dots next to the follow button, and select mute. From there, you shouldn’t see any interactions they have had with your mutuals. Tight.

You got options here: As with Twitter, you can mute their account (toggle to their account, hit the three dots in the top right corner, mash mute). Or, as with Facebook, you can reset your search history back to a clean slate—which, TBH, doesn’t seem like a bad idea every now and then regardless of recent heartbreak. To do the latter: Go to your profile, hit the gear icon on an iPhone or the three dots on an Android (both in the top right corner, aka “settings”), tap search history, and then clear.

In case you have a momentary lapse and want to “check in” on their account, know that this will intro their handle back into your search history. Throw some proverbial Clorox on any possibility of that by permanently hiding their handle. Visit the search page, hit the search bar, tap top or people, tap and hold the account(s) you want to avoid, and then mash “hide.”

And, assuming you want to avoid any future orbiting instances, block them from viewing your Insta stories like so: Pull up any of your existing stories, hit the “more” option in the bottom right corner, select story settings from the pop-up menu, then “hide story from” and select their account. That golden content is a privilege, not a right. (Note: If they don’t follow you, this option won’t work. Perhaps consider going private for a spell or something? Remember that public profiles—including stories—are public to, uh, the public.)

Knock that baby outta your friends list first, then—you might not like this one—change your story setting to friends-only. Unfortunately, if you keep that and your contact settings open to everyone, that means even non-friends can pay you a virtual visit—including someone who possibly did you pretty dirty in the past (I mean your ex[es]).

It should be illegal that unfriending someone on Facebook doesn’t automatically abolish them from your Venmo as well. Alas. Visit their profile, hit the three dots in the top right corner (noticing a trend now, eh?), select block. You have absolutely no need to keep up with their paying a roommate for electricity each month—let alone any current or future transactions with A Hot Person. Life is hard enough; don’t add in the extra energy suck of paranoia regarding who “Katie N.” is and what the hell all those random emojis mean.

Is your old bae jamming hot, new, very clear sex bangers now? Ones you don’t recall them ever enjoying before? You’ll feel crummy. Is old bae jamming old songs that y’all used to call “ours”? You’ll feel crummy then, too. There is no winning. Unfortunately, Spotify does not offer blocking functionality, so you will just have to unfollow (go to their profile, hit the button that says “following” till it confirms by reading “follow”) until the app remedies that oversight—which, hopefully, Spotify will be pressured to do soon. In some troubling stalking scenarios, some users have reported people monitoring their song listening to further harass them. At least Spotify ended its inbox feature?

iPhone contact
Something sorta fun is that Apple has made it a headache to swiftly and fully delete a contact from its memory. I have anecdotal evidence that just because you delete a contact does not mean it is actually gone; as such, sometimes as little as three letters (combined with three margs) can resurrect a phone number from the dead. No, thank you! Also, heaven forbid you date two Chrises in a row (but really). Click through recent calls or text messages till you land on their number. Tap their number and scroll through options like call, FaceTime, etc., until you land on “remove from recents.” SMASH IT. (Bonus: From here, you can also permanently remove their birthday from your calendars.)

Android user? No worries—look for info on how to do the same on your device here.

iMessage predictive text
Talk about new beginnings. Kinda sucks how radical your only option is here—but not as much as every time you start to type “whatever,” and the word quickly rearranges to form a loathsome ex’s last name. You need to reset your keyboard dictionary, bb. To do this: Go into your iPhone settings, hit general, then reset, and—finally—”reset keyboard dictionary.” Most phones prompt your passcode before allowing such a nuclear blast. Yes, you will have to manually re-enter the “shrug” to “¯\_(ツ)_/¯” but, on the bright side, you are now free to “whatever” your brains out without reliving the time dude left skid marks on your sheets yet refused to accept blame.

And that, friend, is true freedom.



How to Handle Digital Assets of the Deceased

Criminals have perfected the art of taking over dead peoples’ online accounts

When you die, your relatives will be sad and (depending on the circumstances of your death) possibly left scrambling to make arrangements for your remains, effects, and estate.

The digital afterlife of your online accounts has gotten less fraught since I wrote about it six years ago, with digital platforms and login managers adding in tools and policies to preserve or manage online accounts after your death.

But chances are that when your loved ones are trying to figure out what to do with you and all you leave behind, they’re not going to be skilled operators of these digital memorial systems. They will be slow to adopt them and will struggle to use them.

But criminals have had plenty of dead people to practice on, and have become virtuoso hijackers of the internet of the dead. They’ve also figured out that duplicating the accounts of dead people is an excellent way to make plausible seeming fakes that are likely to last longer than hijacked identities of the living.

Chris Boyd’s Manchester B-Sides presentation on The Digital Entropy of Death builds on his recent written work on the subject. It’s an eye-opening look into the possible security risks of digital death, along with some practical advice for “taking ownership of your digital accounts before somebody else does.”

The manner in which they hand over the password manager account is incredibly important, too. Is it a physical thing? A login written on paper? Something digital? Is it secure? Maybe it’s a hard drive. Is it encrypted? How will it be updated with new logins/ changes to passwords? Does the relative live nearby if it’s physical? If they live far away, would something purely online make more sense?

These are all important questions that need to be thrashed out long before handing account information over, and it’s probably a bit much to put the onus on the recipient to start bolting security gates you may have left wide open. Do some pre-handover diligence, and make some time to ensure everything is locked down tight. If there’s anything hugely important you need them to know, tell them in advance—don’t hand over a hard drive and ask them why they didn’t make a backup two months after the thing has fallen into the bathtub.



Benefits of a Digital Legacy

Benefits of a Digital Legacy

What is a Digital Legacy? A Digital Legacy is your virtual, secure, safe deposit box. It contains your key information, wishes and life documents in a centralized online portal.

This is your tool for managing all of your life documents and leaving your legacy organized for your heirs.

Benefits of a Digital Legacy

  • At the click of a mouse, you have a customized, easy solution that will help you and your family manage personal data.
  • Eliminate time and worry locating important information.
  • Prepare caretakers for an emergency with important contact information and personal family data.
  • Store immediate as well as extended family member’s personal information.
  • Upload and store images of key documents, i.e. Driver’s License, Social Security Card, Birth Certificate, Will, Trust, etc. to reduce time finalizing estate paperwork and related costs with easy retrieval when you need them.
  • Designate contacts & meeting locations

Find out more >> https://uniquelyyoursdigitalsolutions.com/digital-legacy/


Go Paperless with Your Digital Legacy! A Digital Legacy is your virtual, secure, safe deposit box. It contains your key information, wishes and life documents in a centralized online portal. This is your tool for managing all your life documents, leaving your legacy organized for your heirs. I’m offering a 10% discount for any bookings confirmed by August 30, 2018. Contact me via phone at 925-206-0103 or by email uniquelyyours@outlook.com to schedule your inventory today.

Have a say in your digital legacy by writing down instructions today

Have a say in your digital legacy by writing down instructions today

Most people are reluctant to think about their own death and what happens to their estate, but in terms of their digital legacy, it’s essential to do so if they want to spare their family problems.

Without the right data, it’ll be difficult or even impossible for them to gain access to a deceased relative’s Internet accounts.

Here are some tips from Germany’s Federal Association of Consumer Organizations on how best to take care of your digital legacy.

Write it down: It’s important to write down all login data for your Internet accounts and place the information somewhere relatives can find it. The easiest way is to write your usernames and passwords down on a piece of paper and keep them in an envelope in a safe place. It’s important to remember to update them as required.

Get a password manager: This is a programme that saves all your access data in one place and in encrypted form. Then all you have to remember is one password, the master password. You’ll have to let relatives know what this is so that they can have access if needed.

Choose a confidante: Users need to name a trusted person who’ll take care of any rights and obligations arising from contracts with online service providers if they die. The decision to give someone power of attorney needs to written down, dated and signed in a document.

Leave instructions: Users need to set down in writing what exactly they want done with their digital estate post-mortem. The consumer association advises giving a confidante detailed instructions for each service – for example, should the Facebook profile be deleted or left as a memorial? Instructions should also include directions on what to do with data on your computer, smartphone, tablet and so on.

Avoid service providers: There are companies that will, for a fee, handle a person’s digital legacy. However, the German association advises against using such services as it’s very difficult to judge their security and trustworthiness. Certainly in no circumstances should such a company be entrusted with your password information. – dpa