What documents should be in an end of life folder? Privacy, access and family planning

What documents should be in an end of life folder? Privacy, access and family planning begins with a clear, practical folder that tells trusted people where to find legal papers, financial records, digital account instructions, care preferences, funeral wishes, memorial guidance and private family information without exposing sensitive material too early. The best end of life folder is not a password dump or a sentimental scrapbook; it is a controlled access plan that separates urgent facts, private records, digital legacy choices, private vaults, trusted access, and family instructions so the right person can act at the right time.

This article is written for families in Australia, the United Kingdom and the United States. The principles are shared, but the official processes differ: Australia has state and territory death registration, Services Australia and the Australian Death Notification Service; the United Kingdom has death registration, Tell Us Once, probate and inheritance tax steps; the United States has state-based death certificates, Social Security, Medicare, veterans and estate processes. Use this as a planning framework, then check local requirements before treating any document as legally sufficient.

What documents should be in an end of life folder?

An end of life folder should contain five kinds of information: documents that prove identity and legal authority, documents that explain assets and obligations, instructions for healthcare and personal wishes, digital account and device access notes, and family-facing material that helps people communicate, remember and make decisions. A good folder also tells people what not to do. For example, it might say not to close a phone account until two-factor authentication has been transferred, not to delete a cloud account before photos are backed up, and not to publish certain personal memories without family review.

For administrative tasks, families often need the person’s full legal name, date of birth, date of death, address, account numbers and relationship details. Services Australia’s guidance on who to tell when someone dies also notes that organisations may ask for a death certificate and proof of authority. In the UK, GOV.UK after-death guidance explains death registration, Tell Us Once, funeral arrangements, benefits, tax, estate and probate steps. In the United States, USA.gov death guidance points families towards death certificates, agency notifications, survivor benefits and veterans records.

The folder should not try to replace a will, trust, power of attorney, advance directive or solicitor’s advice. Instead, it should point to the latest signed versions and explain where originals are held. Keep the original will, enduring or lasting power of attorney documents, healthcare directive, guardianship instructions, trust papers, funeral wishes and estate planning correspondence in the legally appropriate place for your jurisdiction. In the UK, GOV.UK probate guidance is clear that probate is the legal right to deal with someone’s estate and that banks or other financial organisations may have their own rules about whether it is needed.

The core document categories to include

Start with identity and family records. These may include birth, marriage, divorce, civil partnership, adoption, citizenship, passport, driver licence and Medicare, NHS or Social Security details, depending on country. Add a note explaining where certified copies are stored and who can order replacements. Do not put unnecessary identity scans in a widely shared folder; identity documents are useful, but they also create fraud risk.

Next, include estate and authority records. List where the will is stored, who drafted it, who the executors or personal representatives are, whether there is a trust, and whether any attorney, guardian or healthcare proxy document exists. Include dates, not just document names, because old copies cause confusion. If a family is already dealing with loss rather than planning ahead, Evaheld’s legal and administrative steps after a death can help separate urgent practical work from longer estate work.

Financial records should be organised without overexposing live account access. Include bank names, superannuation or pension funds, investment platforms, insurers, mortgage or rent details, credit cards, loans, tax agent details, accountant details, major bills and recurring subscriptions. For each one, record the account holder name, reference number, contact details, whether it is joint or sole, and any instruction such as “notify but do not close until direct debits are moved”. Avoid putting complete card numbers or banking passwords where several people can see them.

Healthcare and care documents belong in a section that can be found quickly during incapacity, not only after death. Include advance care directives, enduring guardianship or healthcare proxy documents, medication lists, allergies, GP or primary care details, specialists, aged care or home care providers, disability supports, organ donation preferences and emergency contacts. If someone’s care plan changes often, use a dated summary and review it regularly.

Funeral, burial, cremation and memorial wishes should be specific enough to help, but flexible enough not to trap relatives in impossible instructions. Record whether there is a prepaid funeral, funeral bond, insurance policy, cemetery plot, cremation preference, religious or cultural requirement, military or veterans connection, preferred celebrant, readings, music, clothing requests, people to notify and any preference for privacy. If the wishes include a tribute, story gathering or service update page, families can use what to do when someone dies checklist thinking to connect official tasks with communication tasks.

Digital legacy, private vaults and trusted access

The digital section is where many end of life folders fail. People either write down too little, leaving family locked out, or write down too much, exposing live accounts and private correspondence. A safer structure is to record what exists, who should handle it, what the desired outcome is, and how lawful access should be requested. Passwords and recovery keys should be held in a password manager, legal document, encrypted vault or other controlled system appropriate to the account and jurisdiction.

The UK National Cyber Security Centre password manager guidance explains why unique passwords matter and how password managers can help people avoid reused credentials. Its two-step verification guidance is also important for estate planning because many account recoveries depend on email or phone access. In practical terms, your folder should say which password manager you use, how emergency access works, where recovery codes are stored, and who may request access. It should not invite relatives to bypass laws, terms of service or bank rules.

For major technology platforms, use official legacy settings where available. Google Inactive Account Manager allows a user to choose trusted contacts and decide what happens after a period of inactivity. Apple Legacy Contact support explains that a legacy contact needs an access key and death certificate, and that some data, such as iCloud Keychain passwords and purchased media, cannot be accessed. These limitations should be written into the folder so family members do not assume that one setting unlocks everything.

Digital memory files need different handling from legal and financial accounts. Photos, videos, voice notes, family history documents, scanned letters and tribute messages are often emotionally valuable but not always suitable for public sharing. The Library of Congress guidance on personal digital records recommends identifying files, deciding what has long-term value, organising selected documents and making copies in different places. The US National Archives guidance on preserving family archives also reminds families that preventing damage is central to preserving photographs and papers.

For memorial material, separate the complete private archive from the selected public tribute. Evaheld’s digital memories and social media guidance can help families decide which photos, videos, posts and messages should be backed up, captioned, reviewed and shared. If the family later creates a tribute, what to include in a memorial page helps choose meaningful material without turning a private archive into a public data dump.

Privacy and access rules before anyone needs them

Privacy should be designed before a crisis. Decide who can see the full folder, who can see the emergency section, who can see digital account instructions, who can update the folder, and who can approve family-facing material. A spouse, adult child, executor, attorney, business partner and memorial organiser may each need different information. One shared folder labelled “important” is usually too broad.

A tiered structure works better. Tier one is emergency access: medical contacts, medication, care documents, pets, dependants, home access and urgent bills. Tier two is estate administration: will location, executor details, bank and insurance references, tax adviser and property records. Tier three is digital and memorial planning: devices, password manager instructions, social accounts, photos, videos, funeral wishes and family messages. Tier four is private legacy material: letters, ethical wills, personal reflections and items that should be released only to named people.

For online memorials, this privacy thinking continues after publication. Evaheld’s private versus public online memorials explains why families may want a public tribute, a private family space or a staged approach. Evaheld also explains who controls an online memorial over time, which matters when the person who created the page may not be the person who maintains it years later.

The same care applies to guest contributions. If a memorial will invite stories, photographs or condolences, decide whether submissions are reviewed, who approves them, whether photo uploads are allowed, and how private condolences differ from public tributes. Families can check how tributes and condolences can be received on a memorial before sharing a link widely.

Australia, United Kingdom and United States differences

In Australia, death registration and certificates are handled by state and territory registries, while Services Australia, Medicare, Centrelink, Child Support and other agencies have their own notification processes. Superannuation often has its own beneficiary rules and may not automatically pass through the will. A practical Australian folder should include superannuation fund names, binding nomination details if any, MyGov and Services Australia notes, funeral payment information, state-based property and vehicle records, and any cultural or community instructions, including Sorry Business where relevant.

In the United Kingdom, the folder should point to the will, executors, lasting powers of attorney if made, pension providers, National Insurance details, NHS contacts, Tell Us Once eligibility, funeral wishes and probate-related asset records. The UK also has different rules in Scotland and Northern Ireland for some probate processes, so a folder should avoid assuming that England and Wales guidance applies everywhere.

In the United States, death certificates are state-based, probate is state-based, and benefits or notifications may involve Social Security, Medicare, veterans agencies, banks, insurers and state agencies. The Social Security Administration’s survivor benefits information is relevant for families who may qualify for survivor payments, while the Federal Trade Commission’s identity theft guidance is a reminder to protect sensitive personal information after death. US families should also document whether there is a trust, durable power of attorney, healthcare proxy, HIPAA release, beneficiary designations and state-specific advance directive.

What not to put in a shared end of life folder

Do not put everything in one unlocked folder. Full bank passwords, cryptocurrency seed phrases, identity scans, tax file numbers, Social Security numbers, Medicare numbers, health records, private messages, intimate photos, children’s information, unreleased business data and family conflict notes should not be broadly shared. Some items belong in a safe, solicitor’s file, bank deposit box, encrypted vault or password manager emergency access process. Others should be described rather than copied.

A safer wording is often: “The original is held by my solicitor”, “The password manager emergency access instructions are in the sealed envelope”, “Do not close this phone account until email and two-factor access have been moved”, or “Photos in the folder named Family Only should not be used in a public memorial without consent from the people shown.” That level of context helps without exposing the family to avoidable risk.

This is also where brand separation matters. Evaheld Memorials can help families create a remembrance space, manage privacy settings, gather tributes and preserve selected memories. It is not the same as a legal digital-legacy vault and should not be treated as the place to store full passwords, legal originals or confidential financial data. If you use a private vault elsewhere, let the memorial folder point to it without duplicating secrets.

A practical folder structure families can use

Create a top-level folder or binder with clear sections. Use plain names: Emergency, Legal authority, Financial accounts, Property and possessions, Insurance and superannuation or pensions, Tax, Devices and digital accounts, Photos and memories, Funeral and memorial wishes, People to contact, Business or professional records, Pets and dependants, and Review log. Each section should start with a one-page summary.

The emergency page should be the fastest to read. Include key people, doctors, medications, allergies, care needs, home access, pets, dependants and urgent bills. The legal page should list the latest will, executors, attorneys, guardians, healthcare decision-makers and document locations. The financial page should list institutions, not necessarily login credentials. The digital page should list devices, email accounts, password manager, recovery codes, legacy settings, cloud storage, social media, domain names, subscriptions and digital assets with financial value.

The memory page should describe what the family can safely preserve and what should stay private. It may say where important photographs are, who can identify people in old albums, where video files are backed up, whether voice recordings can be used in a memorial, and who should approve public sharing. If families want relatives to help, how to invite family and friends to help build the memorial explains a controlled way to gather contributions.

The memorial page should include the person’s preferred name, pronunciation, dates, family members to mention, service or cultural wishes, music, readings, charities, photo preferences, topics to avoid, and whether the memorial should be private at first. Evaheld’s answer on whether your memorial can stay private until you are ready to share is useful when a family wants time to review wording before inviting a wider circle.

Examples of trusted access in real life

Trusted access is not just a technical matter. It is a relationship decision. A spouse may need immediate household and care information. An executor may need account records and asset lists. A sibling may be the best person to gather photos. A close friend may know the person’s music, writing or community life. A business partner may need continuity records. A memorial organiser may need stories, images and service details without seeing financial files.

Public lives show the same principle at a larger scale. The memorial profile for Stephen Hawking shows how achievements, family relationships and public legacy can be presented without exposing private administrative records. A profile such as Robin Williams reminds families that a remembered life can include humour, tenderness, complexity and cultural influence without turning every private detail into public material. Princess Diana is another example of how public memory, family relationships and charitable legacy can sit beside, but not replace, private family records.

The practical lesson is simple: one person should not automatically receive everything. Access should match responsibility. If someone is organising a funeral livestream, they do not need banking records. If someone is handling probate, they may not need private letters. If someone is curating photographs, they should know consent boundaries. If someone is moderating a memorial, they should know the family’s privacy rules.

Review schedule and common mistakes

Review the folder at least once a year and after major changes: marriage, divorce, separation, new child, house purchase, move overseas, new business, change of executor, diagnosis, retirement, new phone, new password manager, new bank, new cloud storage, or death of a named contact. A stale folder can be worse than no folder if it points relatives to closed accounts, outdated lawyers or revoked documents.

Common mistakes include hiding the folder so well that nobody can find it, giving too many people full access, mixing live passwords with ordinary papers, forgetting two-factor authentication, omitting device passcodes, failing to update beneficiary nominations, keeping only one digital copy, treating social media as the only memorial archive, and not telling trusted people what role they have. Another common mistake is leaving a beautiful collection of photos with no names, dates or context. Future relatives need descriptions, not just files.

If an online memorial becomes part of the family plan, remember to keep an export or backup of important content where possible. Evaheld’s download online memorial content guidance supports the broader principle that memories should not depend on one person’s login or one platform’s future. The goal is not perfection. It is enough clarity that family members can act calmly, protect privacy, and preserve what matters.

Final checklist before you call the folder complete

• Confirm the latest will, attorney, healthcare and executor information is listed.
• Record where originals are stored and who has authority to access them.
• List financial institutions, insurers, superannuation or pension providers, tax advisers and major debts.
• Document devices, emails, password manager, recovery codes and two-factor dependencies.
• Use official legacy settings for major technology accounts where available.
• Separate private archive material from memorial material intended for family or public sharing.
• Write privacy rules for photographs, messages, health details, children and sensitive family history.
• Name the people responsible for estate tasks, digital access, funeral communication and memorial decisions.
• Keep copies and backups in different secure locations.
• Review the folder after major life, legal, financial or technology changes.

When your family is ready to turn selected memories, service details and tributes into a controlled remembrance space, Evaheld Memorials can help you begin with what documents should be in an end of life folder in mind, keeping private records separate while chosen stories are shared respectfully.

FAQs about end of life folders

What documents should be in an end of life folder? Privacy, access and family planning

An end of life folder should include legal documents, identity records, financial account references, insurance and superannuation or pension details, healthcare wishes, funeral preferences, digital account instructions, device and password manager guidance, and a clear privacy plan for family memories. Keep secrets separate from ordinary notes, and use legal and administrative steps after a death to distinguish official paperwork from memorial planning while checking GOV.UK after-death guidance for UK-specific steps.

Should passwords go in an end of life folder?

Do not place raw passwords in a folder that several people can open. Record the password manager, emergency access process, recovery key location and authorised contact instead. Evaheld’s who controls an online memorial over time helps families think about roles, while the UK National Cyber Security Centre password manager guidance explains why password managers are safer than reused or exposed passwords.

Who should have access to the folder?

Access should match responsibility: emergency carers need care information, executors need estate records, digital trustees need account instructions, and memorial organisers need approved stories and photographs. Evaheld’s private versus public online memorials explains similar access choices for remembrance, while Services Australia’s notification guidance shows why proof of authority may be needed before organisations release information.

How is an end of life folder different from a will?

A will is a legal document that deals with estate distribution and executors; an end of life folder is a practical map that helps people find records, contacts, wishes and access instructions. It should point to the will rather than replace it. Evaheld’s what to do when someone dies checklist gives practical context, and GOV.UK probate guidance explains why legal authority may still be required.

What digital accounts should be listed?

List primary email accounts, cloud storage, phones, computers, password managers, social media, online banking references, payment apps, subscriptions, photo libraries, websites, domain names, cryptocurrency wallets and important work systems. Evaheld’s digital memories and social media guidance helps identify memory files, while Google Inactive Account Manager shows how one major provider lets users plan trusted access.

Should the folder include funeral and memorial wishes?

Yes, but keep them practical: include burial or cremation preference, service style, cultural or faith needs, people to notify, music, readings, charities, photo preferences and privacy boundaries. Evaheld’s what information you need to start a memorial helps organise tribute details, and USA.gov death guidance gives US families official context for certificates and government notifications.

How do I protect photos, videos and private messages?

Separate the complete private archive from the selected memorial set, add captions and consent notes, and keep backups in more than one secure place. Evaheld’s download online memorial content supports backup planning, while the Library of Congress personal digital records guidance recommends organising valuable digital documents and keeping copies in different locations.

Can family members help build the folder or memorial?

Yes, but give each person a defined role: one person checks legal contacts, another gathers photographs, another confirms service details, and another reviews public wording. Evaheld’s how to invite family and friends to help build the memorial supports controlled collaboration, and the US National Archives family archives guidance reinforces the value of caring for family papers and photographs.

What should stay out of a public memorial?

Keep full addresses, identity numbers, bank details, private health facts, children’s information, conflict, passwords, private messages and sensitive images out of public memorial copy unless there is a clear reason and consent. Evaheld’s how tributes and condolences can be received on a memorial explains review choices, while the Federal Trade Commission identity theft guidance is a useful reminder to limit exposed personal information.

How often should an end of life folder be reviewed?

Review it yearly and after major life, legal, financial, health or technology changes, including a new phone, new password manager, new executor, move overseas or changed memorial wishes. Evaheld’s whether your memorial can stay private until you are ready to share supports staged review before publication, and Apple Legacy Contact support shows why legacy access details should be kept current.