Among the first things that surface after a death are the devices and accounts the person left behind. A phone lights up with a text. An email arrives confirming a subscription renewal. A notification says someone tagged them in a memory. These small moments arrive without warning, and they carry a particular kind of weight.
What to do with a phone and email in the first 48 hours is not obvious. There is no standard instruction. And yet the decisions made in these early hours, including what to leave alone and what to secure right away, can have real consequences for the weeks of practical work ahead.
This guide is not about grief. It is about giving the people managing these first days a clear picture of what is at stake, and a calm order of steps to follow.
Why the first 48 hours matter for devices
A phone and an email account are not just communication tools. For most people, they are the master keys to nearly everything else in a digital life. Banking portals, government accounts, insurance logins, cloud storage, subscriptions, and social media accounts all rely on them in one way or another.
Access to many digital assets is now protected by two-factor authentication, which is often tied to a specific phone number. The deceased's cell phone service may be a critical recovery tool for accessing parts of their digital life.
Cancelling the phone too soon, or leaving the email account open and unmonitored, can create problems that are difficult and time-consuming to fix. The first 48 hours are not the time to close or delete. They are the time to secure and observe.
Step one: find and secure the physical device
The first step is straightforward. Locate the phone, make sure it is charged, and keep it somewhere safe and accessible. Do not factory reset it. Do not attempt to access it through unofficial methods. Do not pass it around among family members.
Do not close the phone number or primary inbox before understanding what else depends on them. That single principle covers a surprising amount of the risk in the first 48 hours.
If the phone is locked and the passcode is not known, note that and set it aside. There is a process for requesting access, but it takes time and documentation. If your loved one set up Apple Legacy Contact in advance, that is the best-case scenario. Apple explains that once a Legacy Contact request is approved, the Legacy Contact can access the deceased person's Apple Account data for a limited period, and Activation Lock is removed on devices using that Apple Account.
For Android devices, the most reliable next step is usually Google's account-level process rather than device-level guessing. Google provides a formal pathway to submit a request regarding a deceased user's account.
If the phone is unlocked, or if someone knows the passcode, the priority is not to explore it but to protect it. Set it aside in a secure place and return to it once there is clarity about what is needed.
Step two: do not cancel the phone plan yet
This is the step most people get wrong, and it is an easy mistake to make. Cancelling the phone plan feels like a sensible early task: one less bill, one clear action. But it can inadvertently lock the estate out of accounts that depend on that phone number for verification.
A phone number can still control two-factor authentication codes, password resets, bank alerts, cloud logins, and calls from relatives, doctors, or service providers. If the number is released too early, a family can create avoidable lockouts right in the middle of estate work.
It can be safer to keep the phone active for a few weeks or even a couple of months while key accounts are accessed and data is retrieved. In some cases, it may be possible to work with the phone service provider to transfer the account to the estate's management, giving the executor time to complete essential tasks.
Contacting the carrier to understand the options, including whether the line can be transferred to another account holder rather than cancelled, is a useful early call. Bring the SIN of the deceased, a proof of death, and any account information available. But make the call to explore, not to cancel.
Step three: locate the primary email account
The email account is often where the most useful information lives in the first 48 hours. Subscription confirmations, bank statements, service receipts, and government notices all tend to flow there. It is also the recovery method for most other accounts.
If the email address and password are known, and access is possible without triggering a two-factor authentication prompt, document what is there without making changes. Look for:
Recurring charges or subscription emails. These reveal what accounts exist and what may need to be cancelled in the coming weeks. Bank and financial institution notifications, which help identify which institutions hold accounts. Any government correspondence, including notices from Service Canada, the CRA, or provincial agencies. Contact names and information for people who may need to be notified of the death.
If access to the email is blocked by a two-factor code sent to the phone, having the physical device available and charged is what makes that code receivable.
Step four: do not delete, close, or memorialize yet
In the first 48 hours, the single most important rule is to observe without taking irreversible action. Deleting an email account, requesting that a social media profile be removed, or resetting a device to factory settings can close doors that are very difficult to reopen.
Families who skip straight to deletion or memorialization sometimes remove the evidence they needed to understand the rest of the digital estate.
The email account and the phone number are part of the first layer of the digital estate. This first layer, which includes the primary email, phone number, password manager, and the main trusted devices, often decides whether the second and third layers are recoverable at all.
Social media decisions, account closures, and memorialization requests all belong to later conversations, once the estate representative has a clearer picture of what exists and what matters.
Step five: look for any written instructions
Before attempting to access anything through formal channels, check whether the person left instructions. Families sometimes spend days in difficult conversations with service providers before realizing the person left a usable instruction sheet at home.
This might be a notebook with passwords, a note in a filing cabinet, a password manager with an emergency access feature, or instructions attached to the will or estate documents. A digital estate plan, even a simple one, can save considerable time.
If the person had an Apple device, check whether a Legacy Contact was designated. If the person used Google, check whether an Inactive Account Manager was set up. These built-in features, when they exist, are the cleanest path to access.
What the email can tell you in the first 48 hours
If access to the email is available, it is worth spending a short, focused period reviewing recent messages before doing anything else. The inbox can reveal:
Which financial institutions hold accounts, based on statements or alerts. Which subscriptions are active and billing regularly. Whether any important processes are in progress, such as a pending insurance claim, a government benefit renewal, or a mortgage payment. Contact information for people the deceased was in regular communication with. Any pre-arranged services or plans the deceased may have set up.
This is observational work. The goal is not to act on everything immediately but to build a picture that will guide the estate work ahead. Making a written list of what is found is more useful than trying to manage it all at once.
What to leave for later
Several things related to the phone and email can wait beyond the first 48 hours:
Closing or memorializing social media accounts. Requesting data from Apple, Google, or other platforms through formal bereavement processes. Cancelling the phone plan. Deleting or archiving the email account. Responding to or unsubscribing from every notification that arrives.
These are meaningful steps, but they belong to the days and weeks ahead. Taking them too early, before the estate representative has legal authority or before the full picture of digital accounts is clear, can create complications that are difficult to undo.
A simple checklist to follow
In the first 48 hours, this sequence covers the most important ground:
- Locate the phone, charge it, and keep it somewhere secure
- Do not cancel the phone plan, and do not factory reset the device
- If the phone is unlocked, note the passcode in a secure place
- Contact the carrier to understand whether the line can be transferred rather than cancelled, if relevant
- Identify the primary email address
- If access to the email is available without requiring a two-factor code, review recent messages and make a written note of key subscriptions, financial institutions, and contacts
- Check whether any legacy contact or digital estate instructions were left
- Do not delete, close, memorialize, or reset any account or device in these first 48 hours
Frequently asked questions
Should the phone plan be cancelled right away?
Not yet. For most families, the safest first move is to keep control of the number until every important login and contact path has been checked. Cancelling too early can lock the estate out of accounts that depend on that number for verification.
What if the phone is locked and the passcode is unknown?
Keep the device safe and charged, and do not attempt to force access through unofficial methods. Apple and Google both have formal processes for requesting access to a deceased person's account with proper documentation. These take time, and having the official death certificate ready is a prerequisite.
Is it legal to access a deceased person's email or phone?
In Canada, the answer depends on the circumstances and who is accessing the account. The executor or liquidator of an estate generally has authority to manage digital assets as part of estate administration, but this authority is stronger when backed by legal documentation. Accessing accounts informally, without proper authority, can raise legal and privacy concerns. When in doubt, taking the slower, documented route is safer.
Can the email account just be left alone for now?
For the first 48 hours, yes. Leaving it active and undeleted while the estate takes shape is reasonable. The risk in leaving it too long, however, is ongoing charges, potential fraud, or important messages being missed. Setting a reminder to return to it within the first two weeks is a sensible middle ground.
What if there are important photos on the phone?
If the phone is accessible, photos may also be backed up to iCloud or Google Photos. Checking whether a cloud backup exists, before attempting to transfer anything directly from the device, is often the easier path and avoids potential complications with device encryption.
Sources
This article is based on publicly available guidance from Apple, Google, and Canadian legal and estate resources regarding digital asset management after death. Policies for platform access and bereavement requests change over time. This article is for informational purposes and does not constitute legal advice. Consulting a notary, lawyer, or the applicable platform's official support process is recommended for specific situations.
