A Parent's Google Photos and iCloud After They Die: What You Can Actually Get

Your father's pictures are in iCloud or Google Photos and nobody in the family has his password. Whether you can reach them turns almost entirely on something he did or did not switch on, probably years ago and probably without mentioning it. This page sets out both companies' official routes, what each one excludes, and the two quiet deadlines that cost families their photographs more often than a refusal does.

What to gather before you contact anyone

• Documents: a certified death certificate, his full legal name, the exact address of the Apple Account or the Gmail account, and proof that you are related to him.
• Expect: minutes if he named somebody. Weeks, and possibly a court, if he did not.
• Do not keep trying passwords, and do not sign in as him even if you know the login. Repeated attempts can lock the account, and signing in as a dead person breaches both companies' terms. Every route below is one they publish and sanction.

Procedures and the documents required change, and they are not the same in every country. Use this as the map and the provider's current help page as the authority. Anything that touches probate, a will, or a disagreement among relatives belongs with an estate attorney rather than a help article.

The order to try things in

Find out whether he named anyone before you write to anybody. At Apple that setting is a Legacy Contact. At Google it is a trusted contact inside Inactive Account Manager. If a name exists, the whole thing can be done in a day. If no name exists, you are making a formal request and the company decides the outcome.

First, find out whether he named somebody

Ask your mother, your siblings, and whoever he talked to about admin. People set these up and tell exactly one person, often not the person who would need it. Then search his email and your own for anything from Apple or Google that mentions a key for access, or a contact he nominated. If his estate papers are in a folder somewhere, look there too: Apple offers to print the access key, and a sensible person prints it. If he still has a phone you can unlock, that is a separate and faster problem, covered in getting into a parent's phone and what to save first.

The Apple route when a Legacy Contact exists

A Legacy Contact needs two things and no more. One is the access key Apple generated at the moment of nomination. The other is a death certificate, and Apple notes that acceptable documents vary from country to country. Being nominated never required the person to own any Apple hardware, or even an account. With the key accepted, they can reach data including photographs, messages, notes and files. Apple's own description of the feature calls it the easiest, most secure way to hand access to someone trusted, and on this one point the marketing is accurate: it is the difference between a day and a month.

What the key will not open is worth knowing in advance so nobody waits for it. Films, music and books bought with the account do not transfer, nor do subscriptions. Anything held in iCloud Keychain, meaning his saved passwords and payment cards, is also outside the route.

The Apple route when nobody was named

Apple runs a separate process for this, and it is slower by design. Legal paperwork has to be supplied and verified: usually a death certificate, and often a court order on top of it. In the United States, and in Israel, the route runs through a court order that names you as the person entitled to inherit. Several other jurisdictions accept different paperwork in its place, among them France, Germany, Japan, Australia and New Zealand. Apple also permits a single requester per account, so the family has to settle on who files before anyone does. The terms are on Apple's page for requesting access.

One line on that page settles some cases before they begin. Apple cautions that it cannot decrypt everything it holds, because parts of it may be protected end to end. Where that applies, a court order changes nothing.

The Google route when a trusted contact exists

Inactive Account Manager is the setting a living person uses to choose up to ten people who will receive data once the account has sat unused for a period they set. They can release everything or only certain categories, and they can give different people different things. The named contact gets an email listing what was shared and a download link, with a phone-number check standing in front of the download. The mechanics are set out in Google's own help article on the feature.

The Google route when nobody was named

Google's position is that content may be released in certain circumstances only, after what it calls a careful review, and that login credentials are never handed over in any circumstance. No timescale is promised and no outcome is promised.

The same page carries the sentence families most need before they act. Once a closure request has been submitted, Google states that it can no longer process a later request for the contents of that account. Closure and retrieval are not two steps in a sequence. They are a fork, and most families arrive wanting to tidy up.

The clock that runs whether or not you file anything

Here is the part that is missing from almost every article on this subject. A dormant Google account does not wait politely. Under Google's inactive account policy, Google may delete an account and its content after at least two years of inactivity, and each product carries its own inactivity rule on top of that, so data inside a product can go after two years of no use of that product. Activity is counted per account, not per device, and the things that count are ordinary: reading or sending email, opening Drive, watching a video, sharing a photograph, running a search, using Sign in with Google somewhere.

There are exceptions that keep an account alive, and most of them are commercial: a current subscription or purchase, a gift card with a balance, a published app with ongoing transactions, or an account managing a child's account through Family Link. Google says it emails the account and its recovery address before deleting anything, which means the warnings go to an inbox nobody is reading. For a family that has quietly decided to deal with this next year, that is the whole risk in one sentence.

Get the export off the link before it goes

When data does arrive from Google it usually arrives as an archive, and archives expire. Google's own documentation for Download your data says an archive expires in about seven days and can be downloaded five times before you have to request a new one. It also offers delivery straight into Drive, Dropbox, OneDrive or Box rather than to an email link, which is the better choice when the file is large and your laptop is not.

Two details matter for photographs specifically. The export keeps the metadata inside the image files, and puts the extra material such as comments into a separate JSON file alongside them. So do not throw away the odd-looking files next to the pictures: they hold the dates and captions that make the pictures findable later. Google also offers a scheduled export that runs every two months for a year, which is a reasonable thing to switch on for your own account today.

What to do when you are stuck

Advanced Data Protection is switched on

Switch that on and the encryption keys stay on the owner's own trusted devices. Photographs are one of the data categories it covers, according to Apple's documentation. It is excellent privacy, and it narrows what anyone, Apple included, is able to do for you. So keep his devices charged, wipe nothing, mention the feature when you file, and read two-factor codes and a dead person's phone before you lock yourself out of a route that still works.

The pictures live in a shared album

Shared content is often held differently from his own library, and the other members of the album already have access. Ask every one of them to save their copy today, while the album still exists. There is a method for collecting the scattered copies in one parent, five phones, and the photographs on all of them.

The account has already gone

Then look away from the cloud. Old phone backups on a home computer, the laptop in the spare room, an external drive in a drawer, a sibling's shared album, the photographs he emailed to people. These are regularly the only surviving copies, and they are not searchable from anywhere, so this is a job of opening cupboards.

Export everything first, sort it out afterwards

The usual advice is to work out what you want and then request it. We would do the opposite, and the reasoning is in the two facts above. Google will not hand over contents after a closure request, and a dormant account can be deleted after a couple of years without anyone doing anything wrong. Both of those are one-way doors. The sorting is not. So whoever has a route in should take the full export on the first day they can, and nobody should ask any provider to close or tidy an account until the files are on a drive the family owns.

The cost of working this way is real and worth naming. A parent's complete photo library is often very large, the download is slow, and most of it is screenshots, receipts and nine versions of the same picture of a dog. You are committing to storage you have to pay for and a sorting job that may take years, and there is a strong temptation to request only the recent albums instead. Resist it. Sorting can be done in any month of the next decade. The export can only be done in the window the provider leaves open, and nobody tells you when that window closes.

Conflict changes the order: if the family is in disagreement, or probate is contested, do not export unilaterally. Apple allows only one person to request access to an account, and a sibling who acts alone can turn a sad admin job into a legal one. In that situation the right first call is to the estate attorney, who can tell you who is entitled to act. The related tension is covered in who inherits the photographs when the will only mentions the house.

Giving the files a home with the names attached

An export is a rescue, not an archive. What arrives is thousands of files with machine names and no indication of who anybody is. The part that only your family can do is attaching the names, the places and the years while the people who remember them are still here to ask. Glow holds photographs, recordings and the family's own captions in one private place that relatives can add to, including the ones who will never create an account, and it invents nothing: every name and date comes from the family. A well-organised drive does the same job if somebody will maintain it. If you would rather set your own affairs up so none of this falls to your children, it takes one short sitting: see the digital legacy checklist.

Questions families ask

He wrote his password down. Can we not just use it?

No. Signing in as someone who has died breaches both companies' terms and can get the account locked at the worst possible moment. The sanctioned routes are a legacy or trusted contact, a memorialisation request, and a formal data request.

How much does a Legacy Contact actually reach?

Not everything. Purchased films, music and books, subscriptions, and anything in iCloud Keychain are all outside it. Plan on photographs, messages, notes and files.

How long will a formal request take?

Neither company commits to a time. Assume weeks, assume you will be asked for a document you do not have yet, and in the meantime secure every copy that already exists outside the cloud.

Should we close the account once we have the photographs?

Only once the files are downloaded and verified on a drive you control, because closure removes the option of asking for content later. Open the archive and check that the pictures are actually in it before anybody writes to anybody about closing anything.