Prepare your digital legacy.

That is the right question to ask. Digital Heritage is designed so trust does not depend on taking us at our word alone.

Your files are encrypted before they leave your device, your passphrase is not sent to us, and the people you choose can only unlock files if they already have the correct passphrase from you. A sensible way to evaluate the service is to start small: upload non-critical material first, test the workflow, and confirm that the process matches your expectations before trusting it with anything more sensitive.

For already uploaded files changing passphrase is not possible. Because Digital Heritage does not know your passphrase, the safe way to change it is to encrypt fresh copies of the relevant files with a new passphrase, update the intended contacts, and then remove the older encrypted copies if you no longer want the previous passphrase to work.

In practical terms, the service can help store and release encrypted files, but control of the passphrase stays with you. That is the trade-off that gives you privacy.

Your account can move into a suspended state, new uploads may stop, and existing files can be scheduled for deletion if the plan is not restored. The goal is to warn you before that happens, not to surprise you.

That is why keeping your contact methods current matters: the system can use them to send reminders about plan cancellation and file deletion risk while there is still time to act.

Using annual\lifetime plans helps a lot with this, as you don't need to worry about payments every month. They also come with a good price discount.

Changing contact methods is completely normal. You can do check-ins simply by logging into Digital Heritage. Just update your contact methods as soon as possible.

Warning: Make sure your access to Digital Heritage is absolutely secure! Do not share it with anyone, otherwise someone with access could potentially change your contact details, so, you may miss a check-in message and release flow could be triggered. Always set check-in intervals and release delay big enough to have time to react to any dangerous changes.

Technically this tuns into the question: How to Safely Access Apple Account from a New Device or Location?

When logging into an Apple Account (formerly Apple ID) from an unfamiliar device or location, Apple will demand a 6-digit verification code sent to your trusted devices or trusted phone number.

---

1. Add a Secondary Trusted Phone Number

• How to do it: On your Apple device, go to Settings > [Your Name] > Sign-In & Security > Two-Factor Authentication, then tap Edit next to Trusted Phone Numbers to add a secondary number.
• The Key Point: Use the number which is active with carrier network and has internet access. (Could be a secondary VoIP number accessible via the web.)

2. Set Up an Account Recovery Contact

This is one of Apple's best safety nets. A Recovery Contact is someone you and your trustees know and trust who can verify identity and generate a code to help get into your account. They will not have access to your data! This could be your executor or you could set up completely separate Apple account on a separate device and keep it with you.

• How to do it: Go to Settings > [Your Name] > Sign-In & Security > Account Recovery > Add Recovery Contact.
• The Key Point: Pick someone who is generally reachable by phone or in person. They just need to look at their own Apple device to give your trustee a one-time unlock token.

---

3. Generate a Recovery Key (The Ultimate Failsafe)

If you want total control and want to bypass Apple's automated account recovery delays, you can generate a 28-character Recovery Key.

• How to do it: In the Account Recovery menu, select Recovery Key and toggle it on.
• The Key Point: Warning: Store this key in Digital Heritage. In case you may need it by yourself - write it down and keep it somewhere physically safe, completely separate from your devices.

4. Set Up a Separate Backup Device (optional)

You can add a Separate Backup Phone\device logged into your account or with completely separate Apple account. Have it connected to the internet and with active phone number, add this phone number as a Secondary Trusted Phone Number or as an Account Recovery Contact (this will exclude third parties, such as executors, from the process)
The Trade-off: You need to physically secure this device.

Login Protocol for Trustees

1. Enter your Apple Account email and password.
2. Apple will automatically attempt to send a popup notification to your iPad, Mac, or iPhone. Click "Didn't get a verification code?" on the login screen.
3. Choose "Send text to [Your Secondary Trusted Number]" or use your Recovery Contact / Recovery Key to complete the verification.
4. If using a temporary or public browser, always uncheck the option to "Trust this browser" when prompted.

What to keep in Digital Heritage:

1. Apple Account email and password.
2. (optional) Your Primary Phone Number and PIN, password to access this device
3. Your Secondary Trusted Number and PIN, password to access this device
4. Recovery Contact details
5. Recovery Key

Technically this tuns into the question: How to Safely Access Google Account from a New Device or Location?

When someone logs in from an unfamiliar device or a completely new location, Google's automated defenses will immediately flag it. Because a stolen password is a hacker's best friend, Google will demand a second form of verification.

---

1. Generate Google Backup Codes (The Ultimate Failsafe)

If Google refuses to send a notification to a new device, these 8-digit codes are the golden ticket. They bypass all phone prompts and MFA apps entirely.

• How to get them: Go to Manage your Google Account > Security & sign-in > 2-Step Verification > Backup codes.
• The Key Point: Do not store them inside the Google Drive or Gmail account. Store them in your Digital Heritage vault or print them out or write them down.

2. Export or Sync Your Authenticator App

If you use Google Authenticator, a password will not help if your phone is dead, lost, or not accessible.

• Cloud Sync: Ensure your Google Authenticator app shows the green cloud icon at the top right. This means your 2FA seeds are securely backed up to your Google profile.
• Manual Export: If you want an offline backup, use the Transfer accounts option within the app menu to export your accounts as a QR code. Take a picture of it or scan it with a secure secondary backup device, such as a tablet and store in Digital Heritage vault.

3. Set Up a Separate Backup Device (optional)

You can add a Separate Backup Phone\device logged into your account. Have it connected to the internet and with active phone number, add this phone number as a backup 2-Step Verification phone.
How to do this: Go to Manage your Google Account > Security & sign-in > 2-Step Verification phones > Add a backup 2-Step Verification phone

• The Key Point: Set up a Separate Backup Phone\device you may give to your Trustees. They may use it to restore access to your account.
• The Trade-off: You need to physically secure this device.

---

Login Protocol for Trustees

1. Enter email and password.
2. When Google asks for a verification prompt you cannot receive, click Try another way at the bottom of the prompt box.
3. Select Enter one of your 8-digit backup codes or use your physical Authenticator app code.
4. Once inside, check the box to Trust this device only if it is a personal machine you own. Never trust public or shared computers.

What to keep in Digital Heritage:

1. Google Account email and password.
2. (optional) Your Primary Phone Number and PIN, password to access this device
3. Google Backup Codes
4. Backup Phone Number and PIN, password to access this device
5. Exported Authenticator QR codes and\or seed phrases

Important: If you use biometrics\passkeys to log into your account, be mindful that these could be overridden by other login methods. While biometrics\passkeys are convenient, please disable them, if possible, for account access by your trustees in the future.

---

What to keep in Digital Heritage:

1. Crypto Exchange Account email\login and password.
2. Phone Number linked to this account and PIN, password to access this device
3. Backup Codes (if there are any)
4. Exported Authenticator QR codes and\or seed phrases. Some exchanges have multiple seeds for different purposes (i.e. login and funding actions)