Online Account Instructions for a Trusted Friend: A Brisbane Carer’s Plan for an Aging Parent

You’re in Brisbane, helping a parent in their late seventies or eighties get their affairs in order while they still can. Family is thin on the ground — siblings interstate, no spouse, or a complicated history — and the person your parent actually trusts to handle their email, photos, and Facebook account is a long-time friend down the road. The plan is to leave that friend a clear list of which online accounts exist and which provider holds what, without handing over a single password.

The problem

Online accounts are where most of an older person’s identity now lives: the Gmail address used for every bill and bank reset, two decades of photos in iCloud or Google Photos, a Facebook account that’s become the main thread to grandchildren, a password manager nobody else knows the name of, plus loyalty programs, an old Yahoo account, and a Telstra webmail address from 2003 that still receives important things.

When capacity is lost or someone dies, families routinely discover that nobody knew which accounts existed in the first place. Provider deceased-user processes vary enormously: some require a death certificate and a court order, some accept a recovery contact set up years earlier, some simply close the account after a period of inactivity and the photos are gone. Without an inventory, the trusted friend doesn’t even know where to start — and recovery may be impossible once the account has been purged.

A will doesn’t fix this. Wills handle legal title to assets; ASIC’s MoneySmart estate planning guidance is clear that wills don’t typically address digital accounts, and the executor has no automatic right of access to a Gmail inbox. The friend your parent has chosen needs a list, not a legal document.

What the Digital Legacy Vault does

The Digital Legacy Vault is an asset-instruction register: your parent (with your help) records what online accounts exist, which provider holds each one, what username or email identifier is attached, and whether a recovery contact has been set up at the provider level. The simplified version (built for individuals and families) records per account: provider name, username or account identifier, whether a provider-side recovery contact or legacy contact has been nominated, and the account-closure preference (memorialise, delete, download archive first).

The Digital Legacy Vault does NOT hold passwords, 2FA seeds, recovery codes, or the contents of any account. It holds instructions about what exists and how your parent’s trusted friend can find it — not the keys to get in. That boundary is deliberate: it keeps the Digital Legacy Vault outside the AFSL regime under Corporations Act Part 7.6, outside AUSTRAC reporting obligations, and inside the Privacy Act 1988 framework that governs how personal information about your parent and their nominated friend is handled.

How it works

  1. You sit with your parent and enumerate the accounts — Gmail, iCloud, Facebook, the bank’s online portal, the password manager, the loyalty programs. Each goes into the vault as a separate entry with provider and identifier.
  2. For each account, you record whether a provider-side recovery contact has been set up (Apple’s Legacy Contact, Google’s Inactive Account Manager, Facebook’s Memorialisation Contact). Where one hasn’t, the vault flags it as an action item to do at the provider directly.
  3. Your parent names the trusted friend as the recipient for the online accounts module. The friend accepts and the vault records their consent — a Privacy Act requirement for handling their contact details.
  4. You set the release rules: typically on confirmed incapacity or death, with a documentation requirement (e.g. medical certificate or death certificate uploaded by you or another nominated person).
  5. When release is triggered, the friend sees only the online accounts module — not your parent’s superannuation, not their medical directives, unless those modules were released to them too. They then approach each provider directly with the inventory and the appropriate documentation.

Why this matters in Brisbane

Brisbane has a fast-growing older population, and many of those households are first-generation digital — people who built up twenty years of email, photos, and social presence without ever expecting someone else would need to find it. Carers in Brisbane are also frequently managing parents whose closest support isn’t blood family: a neighbour in the same Queenslander, a friend from the local church or bowls club, an ex-colleague who’s become the de facto next-of-kin. A trusted friend has no automatic legal standing with Apple, Google, or Meta. What they have, if you’ve prepared it properly, is a clear inventory — and that turns a hopeless cold call to a provider into a specific recovery request with the right identifiers attached.

Sources

Join the waitlist

Join the waitlist — first access when the Digital Legacy Vault opens for Brisbane carers

We’re opening waitlist access in tranches. Sign up to be notified when carers organising an aging parent’s affairs in Brisbane can register their first online accounts module. The Digital Legacy Vault holds instructions about what exists and how your parent’s trusted friend can find it — not passwords, not recovery codes, and not the accounts themselves.