Apple's Digital Legacy program lets you name people who can access your Apple ID data after you die. It's free, built into iOS and macOS, and takes about two minutes to set up — but almost nobody has done it, and most people don't understand what it actually covers. This is a step-by-step walkthrough, plus an honest look at where it stops and why a broader tool like HeirLock picks up.
1. What an Apple Legacy Contact actually is
A Legacy Contact is a person you designate to request access to your Apple ID data after your death. When you name them, Apple generates a unique access key — a QR code and short alphanumeric string — that they'll later submit along with your death certificate to unlock the account.
It requires iOS 15.2 or later, iPadOS 15.2, or macOS Monterey 12.1. You can add up to five Legacy Contacts per Apple ID. They don't need to have an Apple device themselves, but the flow is a lot smoother if they do.
2. Set it up on iPhone or iPad
- 1. Open Settings and tap your name at the top.
- 2. Tap Sign-In & Security → Legacy Contact.
- 3. Tap Add Legacy Contact, authenticate with Face ID / Touch ID / passcode. If you're in a Family Sharing group you can pick a member; otherwise tap Choose Someone Else.
- 4. Pick the contact and confirm.
- 5. Choose how to share the access key: Send a Message (best if they use iMessage — the key is stored in their Apple ID settings automatically) or Print a Copy.
If you sent it over iMessage, the recipient sees a prompt to accept. Once they do, the key lives in their Settings → Apple ID → Sign-In & Security → Legacy Contact list under your name. If they lose their phone later, it's still there.
3. Set it up on a Mac
- 1. Open System Settings (or System Preferences on older macOS) and click your name.
- 2. Click Sign-In & Security → Legacy Contact → Add.
- 3. Authenticate, pick a contact, and share the access key by Messages or print.
The Mac flow is functionally identical to iPhone. If you're managing this for a parent or partner who doesn't use Settings often, doing it on a Mac with a larger screen is usually easier.
4. The access key — don't skip this
The access key is the single point of failure in this whole system. Without it, your Legacy Contact cannot unlock your account — even with a death certificate, even if they're your spouse.
- If you sent it over iMessage, verify the recipient sees it under Settings → Apple ID → Legacy Contact.
- Also print a copy and store it with your will or in a safe. Not in an email — email accounts get compromised.
- Tell them where the printed copy is. A locked safe with no known combination is the same as no safe.
5. What it covers (and what it doesn't)
Once approved, a Legacy Contact gets access — for a limited window of three years — to most of your Apple-hosted data:
- iCloud Photos and videos
- iCloud Drive files and Notes
- Mail, Contacts, Calendars, Reminders
- Messages history and voice memos
- Device backups and Safari history
What it explicitly does not cover:
- —iCloud Keychain passwords. The passwords you've saved to autofill on every site are excluded. Your Legacy Contact cannot log into your bank, brokerage, or email through this.
- —In-app purchases, subscriptions, or licensed media. Movies, books, apps — all lost.
- —Payment information stored in Apple Pay or Apple Cash.
- —Anything outside Apple's ecosystem. Google Drive, Dropbox, crypto wallets, work accounts, social media — none of it.
6. Apple Legacy Contact vs HeirLock
Apple Legacy Contact is a good baseline for one specific problem: giving family access to your photos and files on iCloud after you die. If that's your whole digital life, you're covered. Set it up today.
For most people it isn't. The passwords Keychain deliberately excludes are the ones that unlock everything else — the email your bank uses for password resets, the brokerage login, the crypto exchange. And your Google account, work accounts, and non-Apple subscriptions aren't visible to Apple at all.
HeirLock complements Apple's system rather than replacing it. It's a cross-platform encrypted vault for the things Apple can't touch: credentials, wallet seed phrases, documents, and personal messages — released to the beneficiaries you name if you stop checking in.
Recommended setup
- Add an Apple Legacy Contact for photos, messages, and iCloud files.
- Add a Google Inactive Account Manager if you use Gmail or Google Drive.
- Use HeirLock for everything the platform-native tools miss — especially passwords, crypto, and instructions.
7. FAQ
Does my Legacy Contact need an Apple device?
No, but it's easier if they do. Without an Apple device they'll need the printed access key and will submit their request through Apple's digital legacy website.
How long does it take Apple to grant access?
Once your Legacy Contact submits the access key and a valid death certificate, Apple typically takes a few business days to a couple of weeks to verify. Access lasts three years, after which the account is permanently deleted.
Can I remove or change a Legacy Contact later?
Yes. Go back to Settings → Apple ID → Sign-In & Security → Legacy Contact and remove them. Their access key is invalidated immediately. Generate a new one for the replacement contact and share it the same way.
Is the access key sensitive while I'm alive?
No — it's only usable together with a death certificate submitted to Apple. It doesn't grant any access to your live account. Still, don't post it publicly.
Cover the parts Apple can't
Passwords, crypto, work accounts, and personal messages need somewhere too. HeirLock holds them encrypted and releases them to the people you name if you stop checking in.
See HeirLock pricing