A locked smartphone sitting on a nightstand is one of the more quietly devastating experiences of modern grief. You can see the device. You know — or suspect — that it holds photos, messages, contacts, and perhaps financial information that matters. And you cannot get in.
This scenario plays out in thousands of families every year. And unlike many estate planning challenges, the locked phone problem is one of the most technically difficult to solve after the fact — and one of the easiest to prevent with a single, small act of planning beforehand.
Why Phone Encryption Creates a Hard Stop
Modern smartphones are encrypted by default. This means that the data on the device is mathematically scrambled in a way that can only be unscrambled with the correct passcode, face scan, or fingerprint. Without that authentication, the data is effectively inaccessible — not just to unauthorized users, but to Apple, Google, and any other party with physical access to the device.
This is by design. The same encryption that protects a living person's private messages from thieves, hackers, and government intrusion also prevents a grieving family from accessing photos after a death. The technology makes no distinction between the two situations.
Apple has explicitly stated that it cannot bypass the passcode protection on a modern iPhone. Even when compelled by law enforcement with a court order, Apple can provide data from iCloud backups but cannot unlock a locally encrypted device without the passcode.
The implications for families are significant. If you don't know the passcode and there is no iCloud backup (or the backup doesn't include what you need), certain categories of data may be permanently inaccessible.
What Families Can Try (In Order)
If you're facing a locked phone after a loved one's death, here is the hierarchy of approaches to try, from most likely to succeed to least.
The most obvious starting point is simply trying passcodes you know. Many people use predictable passcodes — birth dates, anniversaries, memorable years, simple patterns. If you knew the person well and can think systematically through the numbers they might have chosen, this is worth a patient attempt. Remember that after ten incorrect attempts on an iPhone, the device may erase itself — so be methodical rather than random.
Check whether the person stored their passcode anywhere. Some people record passwords and PINs in a notebook, a sticky note, a saved note in a cloud service, or a password manager. The passcode might be recorded alongside email and banking passwords. A search of the person's desk, files, and digital notes may reveal it.
Contact the carrier (Verizon, AT&T, T-Mobile) and ask about any account-level access options. While carriers cannot unlock a device's encryption, they can sometimes provide account information that helps with recovery efforts or that provides other useful estate administration information.
For iPhones specifically, if the person had iCloud enabled and had a Family Sharing setup, Apple's Legacy Contact feature may provide a path to device data through iCloud rather than the device itself. Contact Apple with a death certificate and proof of relationship, and inquire about available options.
For Android devices, Google's Inactive Account Manager can provide access to certain data from the account, which may include device content that was synced to Google's servers.
The Apple Legacy Contact and Device Access
It's important to understand that Apple's Legacy Contact feature provides access to iCloud data, not necessarily to the physical device. A Legacy Contact can request and download photos from iCloud Photos, contacts, calendars, emails, and other data that was synced to the cloud — but this access comes through a digital download process, not through unlocking the physical phone.
If the deceased person had iCloud Photos enabled and their phone was regularly syncing to iCloud, the photos you're looking for are likely in iCloud — accessible through Apple's Legacy Contact process even if the physical device remains locked.
This is actually the most practically important insight for families in this situation: the phone may be inaccessible, but the cloud backup may not be. Pursue cloud access before investing significant effort in attempting to unlock the physical device.
Third-Party Unlocking Services
A small industry of third-party services claims to unlock or bypass smartphone security. These services range from legitimate data recovery companies used by law enforcement to outright scams.
Legitimate forensic services do exist and are used by law enforcement agencies worldwide. However, accessing them as a private individual is expensive (costs can run into thousands of dollars), slow (weeks to months for analysis), and not guaranteed to succeed. The most sophisticated forensic services cannot guarantee access to a modern, fully encrypted device.
Be extremely skeptical of any service that promises quick, cheap smartphone unlocking. Many are scams. Those that are legitimate are primarily designed for law enforcement use cases, not estate administration.
The Federal Trade Commission regularly warns consumers about phone unlocking scams that charge fees without delivering results. If a service claims to be able to unlock any iPhone or Android in 24 hours for $99, it is either a scam or it is doing something legally questionable.
What Data Is Actually at Stake
To calibrate how much effort is worth investing in accessing a locked phone, it helps to think clearly about what is actually on the device that cannot be recovered any other way.
Photos are often the primary concern. If the deceased person used their phone's camera regularly, the photo library may contain irreplaceable images. However, if they had iCloud Photos or Google Photos enabled and syncing, those photos exist in the cloud — accessible without the physical device.
Contact lists can be retrieved from iCloud, Google Contacts, or the carrier account if they were syncing. Text messages are more difficult: SMS and iMessage threads on an iPhone are typically only fully available through the device itself or a recent iCloud backup. Google Messages may be backed up to Google Drive.
Financial apps require access to the app accounts rather than the device itself. If a deceased person used mobile banking apps, the accounts themselves can be accessed by the estate through the financial institutions directly. The phone is simply a window to those accounts — not the accounts themselves.
Applications and their local data are generally not recoverable without physical device access.
The Two-Minute Prevention
This entire challenge — a locked phone that may hold irreplaceable content — can be prevented with a single conversation or a single written note.
Document your phone's passcode in your estate planning documents or in a secure digital vault that your executor can access. This is not a security risk if the storage is itself secure — and the peace of mind it provides your family is worth the minimal effort.
Alternatively, enable iCloud Photos or Google Photos and allow it to sync regularly. This ensures that your photo library exists in the cloud, accessible to your family through Legacy Contact processes, regardless of what happens to your physical device.
Many families who go through the experience of facing a locked phone in the weeks after a loss report that it compounds their grief in a way that feels entirely preventable. They're right. It is entirely preventable.
My Loved Ones includes a secure section for storing device passcodes and access information, alongside documentation of cloud backup settings — so your family can access what matters without the technical barriers that make grief harder.
Related reading
