What to Do With a Loved One’s Phone After They Die

September 30, 2026 · 9 min read

Somewhere in the first week, usually while looking for a phone number or an insurance document, someone picks up the phone. It is the most personal object left behind and, increasingly, the only place a lot of a life was kept. Then the lock screen appears, and a question that felt administrative becomes something else entirely.

This guide is about that object specifically — not accounts in the abstract, but the physical phone sitting on the table. What you can get into, what is genuinely unreachable, and the order to try things in so you do not accidentally destroy what you were trying to save.

Before anything else: do not keep guessing the passcode

This is the one mistake that is hard to undo. Repeated wrong passcode attempts escalate the lockout — first minutes, then hours — and if the device has the setting enabled that erases after ten failed attempts, you can wipe the thing you were trying to open. Two or three considered guesses is reasonable. Fifteen is not.

The second thing to do immediately is plug it in and keep it charged. A phone that stays powered on and connected keeps receiving messages, keeps its authentication sessions alive, and — crucially — can still receive the two-factor codes that other accounts will ask for. A phone that goes flat and stays flat in a drawer for three weeks is a much harder problem than a phone that never turned off.

If you have the passcode

If the passcode was written down, shared, or is guessable in one or two tries, you have almost everything, and the job becomes deciding what to preserve before anything changes. In rough priority order: photos and videos, messages, notes, the contact list, and any authenticator app.

Get the photos off the device itself rather than relying on the cloud account, because cloud access is the part most likely to be cut off later. Connect the phone to a computer and copy the camera roll across as files. Do the same for voice memos and voice notes, which are the recordings people most regret losing and the ones least likely to have been backed up anywhere sensible.

Do not delete anything, do not sign out of anything, and do not factory reset the phone — not for months. The number of things that turn out to have been reachable only through that device is consistently surprising: a bank’s app-based approval, a utility account, a subscription nobody knew about.

If you do not have the passcode

Here is the honest answer, and it is worth knowing early so you do not spend a fortnight chasing it. Modern phones tie device encryption to the passcode itself. Apple states plainly that it cannot remove a passcode lock without erasing the device, and Apple’s Digital Legacy programme explicitly does not recover device passcodes — it is about data held in the account, not about getting into the handset. Android full-disk and file-based encryption works on the same principle. No support call, death certificate or court order changes the mathematics.

That sounds like a dead end, and for the device it largely is. But it is not a dead end for the data, because most of what mattered is not only on the phone.

The account is the way in, not the handset

The route that actually works runs through the cloud account rather than the hardware. If the person set up a Legacy Contact on their Apple account, that contact has an access key and, with a death certificate, can request the data held in the account — photos, messages in iCloud, notes, files. Google’s equivalent, Inactive Account Manager, works on a timer rather than a key: if it was configured, it releases selected data to named people after a set period of inactivity.

If neither was configured — which is the common case — there is still a legal route. Apple accepts requests for access to a deceased person’s account data with legal documentation, generally a death certificate and in many cases a court order naming the applicant as the rightful inheritor of the personal information. It is slower and more paperwork-heavy than anyone wants in the first month, but it exists.

We have written the step-by-step version of both of these elsewhere: setting up a legacy contact on Google, Apple and Facebook and Google Inactive Account Manager setup. Read them in the direction that applies — for your own account, so nobody has to do this for you.

A practical order of operations

1. Charge the phone and leave it powered on and connected. Do not reset it.
2. Stop guessing the passcode after two or three attempts.
3. If you can get in: copy photos, videos and voice notes off the device as files, to a computer or external drive.
4. Write down every app on the home screen. This list is the closest thing you will get to an inventory of accounts, subscriptions and financial relationships.
5. Check for an authenticator app and, if you can, note the codes or move them before device access is lost.
6. Ask whoever handles the estate whether a Legacy Contact access key or Inactive Account Manager arrangement exists.
7. Only then start the account-recovery route with the platform, with a death certificate in hand.

The messages question

Almost everyone eventually asks whether they should read the messages. There is no correct answer and nobody else’s opinion is worth much here. What is worth saying is that it does not have to be decided now. A phone in a drawer, charged occasionally, is a decision deferred rather than a decision made — and grief six months on is a different thing from grief in week one.

If the messaging account itself is the immediate problem — the account still active, the profile picture still appearing in groups — handling a loved one’s WhatsApp after death deals with that separately.

The uncomfortable conclusion

Every family that goes through this arrives at the same realisation: the difference between a difficult week and an impossible year was one thing, set up in ten minutes, years earlier. A legacy contact. A passcode in a sealed envelope with the will. An emergency-access nomination in a password manager.

If you are reading this because it has just happened to you, none of that helps now, and we are sorry. If you are reading it because it might, the digital legacy planning checklist is the short version, and password manager emergency access is the single highest-value item on it. The phone will outlive the person. Whether anyone can open it is decided long before that.