Guide · Apple & iCloud

What happens to your iPhone, iCloud and Apple ID when you die in New Zealand

A locked iPhone is one of the most common quiet problems NZ families face after a death. Here is what Apple actually allows, the step almost everyone skips, and the five minutes that can save your family months of legal back and forth.

7 min read

Almost every New Zealand family I have spoken to about digital estate planning tells me the same story. A parent or partner dies. The funeral happens. Life starts to settle. And then, weeks or months later, someone picks up the iPhone and realises that the photos, the messages, and almost everything sentimental about that person's digital life is locked behind a passcode no one knows.

The locked iPhone is not a small problem. It is one of the most consistent and painful experiences a family runs into after a death, because almost everyone keeps their most personal data on it: family photos, last messages to children, voice notes from grandparents, the receipts that prove an asset existed.

This guide walks through what Apple actually allows, what it does not, and the five-minute setup that changes the entire outcome for your family.

The locked iPhone problem

Modern iPhones are encrypted by default. The passcode is not stored on Apple's servers. Face ID and Touch ID rely on biometric data that does not transfer. If you die and no one else knows your passcode, the iPhone is effectively a sealed object. Apple, by design, cannot get into it for you, and has historically required a court order before even discussing the contents of an iCloud account.

For families, the result is consistent. The phone stays in a drawer. Sometimes for years. People try things: birthdays, anniversaries, the dog's name, hoping one will work. Sometimes the device wipes itself after too many failed attempts.

The good news is that since iOS 15.2, Apple has introduced a proper way to plan for this. Most people have never heard of it. Those who have heard of it have usually only done half of the setup.

iCloud Digital Legacy: what it is

Digital Legacy is Apple's built-in tool for letting trusted people access your iCloud data after you die. You designate one or more people as Legacy Contacts, and after your death they can request access to your iCloud account using a death certificate and an Access Key generated when you set them up.

Apple introduced Digital Legacy in iOS 15.2 (late 2021). It is now built into every iPhone running a current iOS. It works the same in New Zealand as it does anywhere else. There is no fee.

The catch is that it only works if you set it up while you are alive. There is no after-the-fact version.

How to set up a Legacy Contact

The setup takes about five minutes on an iPhone. Here is the exact path:

  • Open Settings on the iPhone.
  • Tap your name at the top of the settings list.
  • Tap Sign-In & Security (older iOS: Password & Security).
  • Tap Legacy Contact.
  • Tap Add Legacy Contact and follow the prompts to choose one or more people.
  • Choose how you want to share the Access Key. The phone will offer to send it directly through Messages (if your contact also has an Apple ID), or to print it as a PDF.

You can add multiple Legacy Contacts. Each gets their own Access Key. Any one of them can request access independently after your death.

The step almost everyone skips: the Access Key

The Access Key is the most important part of the entire setup, and the part people most often skip or lose. It is a unique code that proves a Legacy Contact has the right to request access. Without it, even a person you have officially designated may face months of legal back-and-forth with Apple Support.

The Access Key is generated when you add a Legacy Contact. It needs to live somewhere your family can find it after you die. The default options Apple offers are:

  • Send it via Messages. The contact receives it on their own device, where it gets stored in their Apple account. Fine in theory, easy to lose in practice if they change phones or lose their Apple ID.
  • Print it. Apple generates a PDF with the code, your name, and the contact's name. You print it and store it physically.

Both options work, and both fail in the same way: your family has to remember the Access Key exists at the moment they need it. A folder labelled "Apple Legacy Contact" in a home filing cabinet works, if anyone thinks to look there.

A better option is to store the Access Key in a digital vault that releases its contents to your family on the right trigger. That way the key is not lost in a messages thread, and not sitting in a paper file no one finds for six months.

What iCloud Digital Legacy gives access to

Once your Legacy Contact has been verified by Apple (using the Access Key and a death certificate), they get a temporary Apple ID with access to most of the data stored in your iCloud account. Specifically:

  • Photos and videos in iCloud Photos.
  • Messages (iMessage and SMS backed up to iCloud).
  • Mail (iCloud Mail).
  • Notes.
  • Files in iCloud Drive.
  • Contacts, Calendars, and Reminders.
  • Voice Memos.
  • Safari bookmarks and reading list.
  • Health data and Apple Wallet data (depending on iOS version).
  • Device backups stored in iCloud, including iPhone and iPad backups.

That last one matters. An iCloud device backup often contains data from apps that are not natively iCloud-synced, which means a Legacy Contact can sometimes recover far more than just the headline categories above.

What it does not give access to

Digital Legacy is generous in some places and deliberately restricted in others. Specifically, it does not give access to:

  • iCloud Keychain. All of the saved passwords, passkeys, and Wi-Fi credentials. Apple treats these as too sensitive to release.
  • Purchased media. Music, films, books, and apps bought through iTunes or the App Store. These are licensed to the individual and not transferable.
  • In-app purchases and subscriptions. These remain attached to the deceased's Apple ID and need to be cancelled through Apple Support or the relevant app.
  • Data inside third-party encrypted apps. If they used apps like Signal, Bitwarden, or 1Password that store data only locally or under an additional master password, Digital Legacy will not unlock them.
  • The device passcode itself. Legacy Contact access is to iCloud, not to the physical iPhone's lock screen. A locked phone with no known passcode stays locked.

That last limitation is the one most families do not expect. Digital Legacy gives your family access to most of the photos and messages, because those are backed up to iCloud. It does not unlock the device itself. If you want your family to be able to use the actual phone, the passcode needs to be stored somewhere they can find it.

What about the Apple ID password?

You might be tempted to just give your spouse your Apple ID password. This works for some couples and is genuinely a reasonable approach. Two warnings:

First, Apple's terms of service technically prohibit sharing your Apple ID with anyone. In practice nothing happens, but it is worth knowing.

Second, two-factor authentication will defeat a shared password if your spouse does not also have a trusted device. After a death, when the iPhone may have been wiped or its SIM cancelled, the 2FA codes can be unreachable. Recovery Keys help, but most people do not have one. Digital Legacy is a more reliable mechanism for this reason. It survives the loss of the physical device.

What to do right now

Five minutes of work, done today, materially changes what your family experiences if you die.

  • Open Settings, go to your name, then Sign-In & Security, then Legacy Contact. Add at least one person. A spouse, an adult child, or a sibling are the most common choices.
  • Save the Access Key somewhere your family can actually find it. Not buried in a Messages thread. A digital vault, or a labelled folder in your filing system, or both.
  • Write down your Apple ID email and an indication of where the Access Key lives. Your Legacy Contact will need both your Apple ID and the Access Key, plus a death certificate, to start the process.
  • Tell the person. It is awkward for a moment, but a 30-second conversation now is worth a great deal later. They do not need details. They just need to know you have done it.
  • If you have a device passcode you want your family to know, store that separately in a vault that releases to your trusted people on the right trigger.

The whole setup takes less time than reading this article. The difference it makes after a death is measured in months.

A safe place for the Access Key

Aftr Vault stores your Apple ID details, your Digital Legacy Access Key, and your device passcode under strong encryption. When the right moment comes, your designated people get exactly what they need. Nothing before, nothing extra.

Store an Access Key