What happens to Google Authenticator, Authy, and hardware 2FA keys when you die?

1 November 2026 · 6 min read

Millions of responsible adults write down their primary passwords or save them in a password manager, assuming their spouse or adult children will be able to log in if something happens to them. Then an emergency hits, the spouse enters the correct password for the bank or email account, and the screen immediately displays: "Enter the 6-digit verification code from your authenticator app."

The 4 types of 2FA that lock grieving families out

Two-factor authentication is designed to stop someone who steals your password from logging in. Unfortunately, the login server cannot tell the difference between a hacker and your grieving spouse:

Lock in the $3.99/month early-access price →Or $74.99 once for life. Your heirs never pay. Waitlist members keep the launch price.

The fatal mistake: cancelling the deceased person's cell phone plan

When a parent or spouse passes away, one of the first bills families cancel to save $80 a month is the deceased person's mobile phone contract (see how to find and cancel a deceased parent's subscriptions).

Never cancel the cell phone number first. The moment that phone number is deactivated and recycled by the carrier:

• Every bank, brokerage, tax portal, and utility account that sends SMS verification codes to that number becomes unreachable.
• Even worse, 60 days later the carrier reassigns that phone number to a stranger — who will start receiving password-reset texts for your family member's accounts.
• Instead, downgrade the line to the cheapest $10/month talk-and-text plan and keep the physical phone on a charger until every financial and digital account is settled (see how to close online accounts after death).

How to make your 2FA accessible to your family in an emergency

You do not need to turn off 2FA to protect your family. You just need to leave them the four specific keys that unlock your second factor:

1. Your primary phone and laptop unlock passcodes

Your iPhone is your master 2FA device: it receives SMS texts, holds your authenticator app, and approves Apple and Google login prompts. If your spouse does not know your 6-digit iPhone passcode, Apple cannot unlock the phone for them even with a death certificate.

2. Your 8-to-16 digit 2FA Backup / Recovery Codes

When you turn on 2FA for Google, Microsoft, Apple, GitHub, Coinbase, or your password manager, the service gives you a set of one-time Backup Recovery Codes. Each code bypasses the authenticator app if your phone is lost or damaged in an accident. Copy those recovery codes into your emergency vault.

3. Export or document your TOTP Authenticator seeds

Apps like 2FAS, Ente Auth, Aegis, and Google Authenticator allow you to export your TOTP secret seeds (or store them directly inside your password manager's TOTP field in 1Password or Bitwarden) so your family doesn't depend on a single fragile phone screen.

4. Document your physical YubiKey locations and PIN

If you secure high-value accounts with hardware security keys (like a YubiKey), always register a backup YubiKey, store its FIDO2 PIN in your digital inheritance vault, and state clearly where the physical key is kept.

How Heritkey delivers your passwords + 2FA safely

Writing your iPhone passcode, master password, and 2FA recovery codes on a sheet of paper in your desk drawer means any visitor or burglar can empty your accounts while you are alive (see where to keep your password manager Emergency Kit).

Heritkey solves the 2FA handoff with zero-knowledge cryptography and a dead-man's switch:

• Store passwords, 2FA recovery codes, and device PINs together: Everything is encrypted in your browser with AES-256-GCM before upload (how Heritkey works).
• Unlocked only after missed check-ins: While you are healthy and responding to periodic check-in reminders, nobody — not Heritkey, and not your beneficiaries — can read your vault (how a dead man's switch works).
• Works for both hospitalization and death: If you are incapacitated in the ICU or pass away, the check-in timer expires and delivers your plain-English instructions and 2FA codes to your chosen family member ($3.99/month or $74.99 once for life).

Don't let a 6-digit 2FA prompt lock your family out when they need access most. Join the Heritkey early-access list for $3.99/month or $74.99 once for life.