EOFY 2026: The Digital Estate Checklist Every Australian Should Complete Before 30 June

You're reviewing your tax receipts. You've checked your super. You've probably even looked at your mortgage offset balance.

But have you thought about what happens to your 147 online accounts if you don't wake up tomorrow?

The End of Financial Year is the one time Australians are already in "get your affairs in order" mode. This year, add one more task to the list: your digital estate.

Why EOFY 2026 Is the Year This Actually Matters

Three things happened this June that should make every Australian pay attention:

1. A password manager got breached. Dashlane, one of the most popular password managers in the world, confirmed a brute-force attack that let attackers download encrypted vaults from user accounts. If your "plan" for digital estate planning is "my family can just check my password manager", that plan just got a lot less reliable.

2. ShinyHunters hit 100+ organisations. The cybercrime group exploited an Oracle PeopleSoft zero-day to steal student records from universities worldwide, 454,600 people exposed at the University of Nottingham alone. Your data doesn't live where you think it does, and you can't protect accounts you've forgotten about.

3. Australia still has zero federal laws governing digital asset succession. While Washington state just enacted digital likeness protections (SSB 5886), the Netherlands launched a government-backed digital legacy campaign, and the US is progressing the CLARITY and PARITY Acts through Congress. Australia has done precisely nothing. Your executor has no automatic legal right to access your digital accounts. None.

That last point is the one that should keep you up at night.

The Problem in Plain English

When someone dies, their family faces a wall of passwords, platform policies, and legal grey areas. Every major platform. Google, Apple, Meta, Microsoft, has different rules about what happens to accounts after death. Most require a death certificate and proof of relationship. Some require a court order. A few simply say no.

Meanwhile, the clock is ticking:

• Subscriptions keep charging. The average deceased person's accounts leak approximately $2,400/year in ongoing subscription charges before someone manages to cancel them.
• Fraud risk skyrockets. Deceased persons' digital accounts face 14x higher fraud risk because no one is monitoring them.
• Crypto vanishes. Without private keys or seed phrases, cryptocurrency holdings are gone permanently. Not frozen. Not recoverable. Gone.
• Memories disappear. Cloud-stored photos, videos, and messages, often the most emotionally valuable digital assets, become inaccessible behind passwords nobody else knows.

The EOFY Digital Estate Checklist

This isn't about writing a will (though you should do that too). This is about making sure the will actually works for your digital life.

✅ 1. Build Your Digital Inventory

List every account that matters. Not just banking and email, think broader:

• Financial: Banking, super, investments, crypto wallets, trading platforms
• Communication: Email accounts, messaging apps, social media profiles
• Storage: Cloud drives, photo libraries, backup services
• Business: Domain names, websites, SaaS subscriptions, client portals
• Entertainment: Streaming services, gaming accounts (some have real monetary value)
• Government: myGov, ATO, Medicare, state services

The average person has 100-150 online accounts. You probably have more.

✅ 2. Appoint a Digital Executor

This can be the same person as your will executor, but they need to know this responsibility exists. Your solicitor may not think to mention it, digital estate planning isn't standard practice in Australia yet.

What they need from you: - Knowledge that they've been appointed - Access to your master credential system (see step 3) - Written authority in your will to manage digital accounts - A list of your wishes (memorialise, delete, transfer, archive)

✅ 3. Set Up a Secure Credential System

A password manager with emergency access is the baseline. But after the Dashlane breach, consider layering your approach:

• Primary: Password manager with emergency access enabled and tested
• Backup: Encrypted document (stored physically, not just digitally) with master password and recovery codes
• Platform-specific: Set up Google Inactive Account Manager, Apple Legacy Contact, and Meta's memorialisation settings

The key word is tested. If your designated person can't actually access your password manager in an emergency, it's not a plan, it's a wish.

✅ 4. Document Your Digital Wishes

This is the part people skip. Don't.

For each category of account, state clearly: - Keep: Transfer to [person] (e.g., family photo libraries) - Memorialise: Convert to memorial status (e.g., social media profiles) - Delete: Remove entirely (e.g., dating profiles, private accounts) - Business continuity: Transfer to [business partner/successor] with instructions

✅ 5. Review Beneficiary Designations

Your super beneficiary nominations, life insurance designations, and online investment accounts often override your will. EOFY is when your super fund sends that reminder, actually open it this time. Make sure the person named in your will matches the person named on your accounts.

✅ 6. Address the MFA Problem

The American Bar Association issued a warning this month that should concern every Australian: legal authority does not equal practical access. Even with a grant of probate, your executor may not be able to get past multi-factor authentication tied to your phone, your fingerprint, or your hardware security key.

Plan for this: - Document which accounts use MFA and what method - Ensure recovery codes are stored separately from the password manager - Consider backup authentication methods that survive device loss

What a Digital Directive Actually Is

A Digital Directive is a professional inventory of your entire digital life, every account, credential, and instruction, verified, encrypted, and released to your verified executor when it's needed.

It's not a password list taped to the inside of a drawer. It's not "my kids will figure it out." It's a managed, maintained, living document that changes as your digital life changes.

Because your digital life doesn't freeze when you do.

The One-Hour EOFY Task

You don't need to do all of this today. But you need to start.

Set a timer for one hour before 30 June. Open a document. Start listing accounts. Name a person. Tell them.

That single hour could save your family weeks of grief, thousands of dollars in leaked subscriptions, and the permanent loss of irreplaceable memories.

Your tax return can wait until October. Your digital estate can't wait at all.

NYLK builds and maintains Digital Directives, professional inventories of your entire digital life with verified executor release when needed. Born from a family that got locked out of everything.

Start your Digital Directive at nylk.com

SEO Metadata: - Title: EOFY 2026: The Digital Estate Checklist Every Australian Should Complete Before 30 June | NYLK - Meta Description: Before June 30 hits, add one task to your EOFY checklist: your digital estate. Here's the 6-step digital estate plan every Australian needs, with the latest breach data proving why. - Slug: eofy-2026-digital-estate-checklist-australia - Tags: EOFY, digital estate planning, Australia, digital directive, digital inheritance, checklist