Ontario has no statute giving an estate trustee a right of access to a deceased person's online accounts. The Uniform Law Conference of Canada produced model legislation on fiduciary access to digital assets, and Ontario has not enacted it. What an Ontario estate trustee actually has is authority derived from the will and the certificate of appointment, exercised against platforms that are mostly foreign, governed by their own terms of service, and cautious about federal privacy law. The practical consequence is that access depends far more on what the deceased set up in advance than on what the executor is legally entitled to. Cryptocurrency held in a private wallet is the extreme case: without the key, there is generally no remedy at all.
What Is the Legal Position in Ontario?
There is no Ontario statute on the point. The model legislation prepared by the Uniform Law Conference of Canada would have made default fiduciary access the basic rule and made clear that access is not barred by privacy law. Ontario has not adopted it, and an Ontario estate trustee therefore has no statutory override of a platform's service agreement.
The executor's authority comes from the will and the grant. That authority is real, and it is what allows an estate trustee to deal with the deceased's property. The difficulty is that a custodian holding data outside Canada is not obliged to recognise it in the way an Ontario bank would.
Federal privacy law complicates the request rather than resolving it. The Personal Information Protection and Electronic Documents Act protects personal information, including that of a deceased person. An estate trustee may qualify as a personal representative, but platforms are frequently unwilling to act on that without a court order, which pushes the estate into an application it may not be able to justify economically.
Where the custodian sits elsewhere, other law may apply as well. A platform operating under European rules faces its own constraints on releasing personal data, and none of that is displaced by an Ontario certificate.
What resolves this in practice is done before death, by using the platform's own succession tool. Where one exists and has been configured, it generally controls, and the estate trustee never needs to argue about any of the above.
What Do the Platforms Actually Allow?
Platform type
Typical mechanism
What it generally does not do
Major email and cloud providers
An inactivity or legacy tool the user configures in advance, naming who receives what
Hand over the password or full live account access on request
Mobile ecosystem accounts
A legacy contact designated by the user, who receives access to specified data
Bypass device passcodes or two-factor authentication
Social networks
Memorialisation of the profile, or deletion; a legacy contact where configured
Give a third party the ability to read private messages
Photo and file storage
Download or transfer of data to a designated person
Preserve content indefinitely without action
Subscription and streaming services
Cancellation on proof of death
Transfer the subscription or the purchased media library
Custodial cryptocurrency exchanges
An estate process, generally requiring the certificate of appointment
Recover credentials the exchange never held
Self-custody crypto wallets
Nothing. Access requires the private key or seed phrase
Anything at all without the key
Two structural points explain the whole table. First, most of these are licences rather than owned property: a media library is often a licence that ends on death, which is why beneficiaries cannot inherit it. Second, the platforms are protecting themselves against releasing data to the wrong person, so their processes are built around identity verification and documentary proof, not around speed.
What Should an Estate Trustee Do?
Secure the devices first. A phone, tablet or laptop that is unlocked, or whose passcode is known, is worth more than any correspondence with a platform. Do not reset devices, and keep them charged.
Do not change or reset passwords on accounts you can already reach. Password resets frequently trigger security lockouts and can permanently sever access.
Inventory what exists. Email accounts are the highest-value target because they contain statements, receipts and account confirmations that reveal other assets.
Separate the categories: assets with real economic value, accounts that cost money each month, accounts holding sentimental content, and accounts that simply need closing.
Cancel the recurring charges early. Subscriptions continue to draw on a card until somebody stops them.
Use each platform's published deceased-user process, with the certificate of appointment and a death certificate ready.
Value what has value as at the date of death, in the same way as any other asset.
Record what you attempted and when. Where access proves impossible, the file needs to show reasonable effort.
Our guide to the first 30 days covers the immediate steps alongside this, and our guide to executor duties in Ontario sets out the wider obligation to identify and secure estate assets, which extends to digital ones.
How Are Digital Assets Taxed and Reported?
Cryptocurrency is property, and it is treated as such. Where the deceased held it, its fair market value at the date of death goes into the estate value in the ordinary way, and our Estate Administration Tax guide sets out how the value is built.
The deemed disposition rules apply to it. Unless a rollover or exemption applies, the Income Tax Act generally treats the owner as having disposed of the property at fair market value immediately before death, and any resulting capital gain is brought into income at the current one-half inclusion rate.
Valuation is genuinely difficult for volatile holdings, because the price moves within the day of death. Record the source and the method used, and keep the supporting data.
Accounts with no economic value still have to be dealt with, and they are frequently where the family's real interest lies. Photographs and correspondence are not assets in any meaningful sense but they are the thing people actually want.
Where This Goes Wrong
Putting passwords in the will. A will submitted for probate becomes part of the court record. Credentials belong in a separate, secure inventory that the will refers to without reproducing, and that inventory needs to be kept current.
Losing the crypto. Where a deceased person held cryptocurrency in a self-custody wallet and the key or seed phrase died with them, the holding is generally unrecoverable. No court order reaches it. This is the clearest case in estate administration where planning is the only remedy and litigation is not one.
Resetting a device to gain access. A factory reset is irreversible and it destroys exactly what the family wanted.
Assuming a certificate of appointment opens everything. It is the necessary document but it is frequently not a sufficient one, particularly with foreign platforms, and an executor who has promised the family access on that basis has over-promised.
Missing assets hidden in plain sight. Loyalty points, a domain name registration, an online business, an advertising account with a balance, and a payment platform holding a credit are all real and are all commonly overlooked. So are ongoing charges to a card nobody has cancelled.
Distributing sentimental content informally. Where several beneficiaries want the same photographs, handing them to whoever asked first creates a grievance that is disproportionate to the value involved. Copy everything, distribute equally, and record what was done.
Leaving it too long. Some platforms delete inactive accounts on their own schedule. Content is lost while an executor is waiting for probate.
If an estate includes cryptocurrency, an online business, or accounts nobody can reach, you can book a free call to work out which parts are realistically recoverable before spending money pursuing the parts that are not.
Frequently Asked Questions
Does an Ontario executor have a legal right to access a deceased person's online accounts?
There is no Ontario statute conferring one. The Uniform Law Conference of Canada prepared model legislation on fiduciary access to digital assets, and Ontario has not enacted it. An estate trustee's authority comes from the will and the certificate of appointment, and platforms are not obliged to treat that authority the way an Ontario financial institution would. Access in practice depends on the platform's own process and on what the deceased configured in advance.
Can I get into my parent's email account as executor?
It depends on the provider and on what was set up beforehand. Major providers offer a tool that lets a user nominate in advance who receives their data, and where that was configured it generally works. Where it was not, the provider has a deceased-user process requiring documentary proof, and it commonly produces a limited data export rather than live account access. Some providers will not release contents without a court order.
What happens to cryptocurrency when the owner dies?
Held on a custodial exchange, it is dealt with through that exchange's estate process, generally on production of the certificate of appointment and a death certificate. Held in a self-custody wallet, access requires the private key or seed phrase, and if those were not recorded anywhere the holding is generally unrecoverable. Either way the value at the date of death forms part of the estate for tax and probate purposes, which can produce a tax liability on an asset nobody can reach.
Should I list my passwords in my will?
No. A will submitted for probate becomes part of the court record, so credentials placed in it are exposed. The better approach is a separate secure inventory, referred to but not reproduced in the will, kept current, and stored where the estate trustee will be able to find it. Configuring each platform's own legacy or inactivity tool is more effective still, because it operates without anyone needing to argue about authority.
Can I keep my late spouse's social media profile online?
Most major social networks offer memorialisation, which preserves the profile in a fixed state, and some allow a legacy contact designated in advance to manage limited aspects of it. What is generally not available is ordinary login access, including to private messages. The options are usually memorialisation or deletion, and which one is available depends on the platform and on whether a legacy contact was named.
Are digital assets included in the Estate Administration Tax calculation?
Assets with economic value are included in the estate value in the ordinary way, valued at fair market value as at the date of death. Cryptocurrency, a domain name with resale value, an online business, and a credit balance on a payment platform are all property. Accounts with no economic value, such as a social media profile or a personal photo library, do not add value to the estate even though they may matter a great deal to the family.
This article provides general information about Ontario law and is not legal advice. Speak with a lawyer about your specific circumstances.