2026-08-03 · 18 min read

How to unlock a deceased person's phone: what really works

How to unlock a deceased person's phone: Apple can't bypass the passcode and Google says erase it. What Apple, Google, Samsung and carriers do instead.

You almost certainly cannot unlock the device itself, and no amount of paperwork changes that: Apple's legal process guidelines state that for all devices running iOS 8.0 and later it cannot perform a device data extraction, because the data is encrypted and Apple does not possess the key, and Google's one published instruction for a phone you can't unlock is to erase it. The route that does work runs through the cloud account behind the phone rather than the lock screen, and it needs a death certificate plus, for Apple in the U.S., a court order carrying five specific statements. Below is the order to do it in, what each path returns, and which paths are already closed.

Can anyone unlock the device itself, including the manufacturer?#

No, and that is a design constraint rather than a customer-service policy. In the same guidelines, published October 2025, Apple answers it in one line: it does not have access to a customer's passcode. A court order gets the same answer, because there is nothing in Apple's possession to hand over.

Guessing is worse than useless, and the numbers say why. Apple's platform security documentation describes escalating time delays after an invalid passcode, running from one minute after the fourth attempt to lockout after ten or more, and if the owner switched on Erase Data, ten consecutive incorrect attempts remove all content and settings from storage. One detail on that page is worth passing to everyone in the family before they start trying birthdays: consecutive attempts of the same incorrect passcode do not count toward the limit. Only distinct wrong guesses burn attempts, which is exactly what a relative working through candidate PINs will produce.

Android is the same problem with a different mechanism. Google's support page for a device you cannot unlock offers exactly one route, erasing the device and setting up a new screen lock, and it warns plainly that the erase options delete all data stored on the phone such as apps, photos and music.

What happens if you tap "Forgot Passcode?" on the iPhone?#

You start an erase, not a recovery. Apple's documented path for a forgotten passcode is to reset the device, and the process requires the Apple Account password to sign out of the Apple Account before the erase can finish. The option only appears at all if the iPhone has an active cellular or Wi-Fi connection, is signed into an Apple Account and has Find My turned on, so a phone that has been sitting in a drawer on a flat battery will not even offer it.

Erasing also does not hand you a usable phone. Activation Lock requires the owner's Apple Account password before anyone can turn off Find My, erase the device, or reactivate and use it. Without those credentials the result is a wiped iPhone you still cannot sign into: you have destroyed the data and kept the lock.

Will Apple help, and what exactly will Apple do?#

Apple acts on the account, never on the passcode. Apple requires and verifies legal documentation before assisting with a deceased person's Apple Account, generally a death certificate and possibly a court order or other documentation, with requirements varying by country or region. Note where each request goes, because families routinely file into the wrong queue: Apple's Digital Legacy website handles Legacy Contact requests and requests to permanently delete an account, while a court-order access request is made by contacting Apple Support.

Apple may also be able to remove Activation Lock from devices that were signed into the original Apple Account. Read the limit carefully: the iPhone, iPad or iPod touch must still be erased and restored before it works with another Apple Account. That path returns hardware, never the photos that were on it.

What must the court order actually say?#

In the U.S. and other locales, Apple requires a court order naming the requester as the rightful inheritor of the person's personal information. Apple specifies the content, and an order missing any of it comes back:

the name and Apple Account of the deceased person
the name of the next of kin who is requesting access
that the decedent was the user of all accounts associated with that Apple Account
that the requestor is the decedent's legal personal representative, agent or heir, whose authorisation constitutes "lawful consent"
that Apple is ordered by the court to assist in the provision of access to the decedent's information

Apple adds one more instruction that is easy to miss and expensive to redo: the order should be addressed to the relevant Apple entity.

The route differs elsewhere. Apple says that in some jurisdictions, such as France, Germany, Japan, Australia and New Zealand, alternative documentation and a different process are accepted instead of a court order. In Japan, a family certificate indicating the death may be needed instead of a death certificate.

How do you get into an Android or Samsung phone?#

Google's position is as blunt as Apple's: it cannot provide passwords or other login details for a deceased user's account. What it can do is work with immediate family members and representatives to close the account where appropriate and, in certain circumstances, provide content from it. Any decision, Google says, follows a careful review.

Google's process runs on three tracks: close the account, request funds from it, or obtain data from it. One ordering rule matters more than anything else on this page. If you ask Google to close the account first, Google is unable to process a request to turn over the contents of the account at a later date. Data request first, closure second, always. Our walkthrough of the documents and sequence for a Google bereavement request covers what each track asks for.

Two more Android facts decide what is even worth attempting. To factory reset a protected device you need to either unlock the screen or enter the Google Account password, and after a reset you can only sign in with a Google Account that was previously added and synced to that device as an account or user. If nobody can supply that during setup, Google says you will not be able to use the device at all. Backups are not the shortcut either: data backed up to a Google Account can only be restored if you know the PIN or pattern of the device at the time of backup. The lock screen you are trying to get past is the key to the backup meant to rescue you from it.

Find Hub, the service Google renamed from Find My Device in May 2025, can locate, secure or erase the phone remotely, but only if the device has power, is connected, is signed in to a Google Account and has Find Hub turned on. Erasing permanently deletes the data on the device, though Google notes it may not delete SD cards, and the location stops being available in Find Hub afterwards. It is a last step, not a first one.

Samsung owners often hear about a remote unlock, and Samsung's own guidance is regionally inconsistent, so check the page for your market before you count on it. Samsung UK states plainly that it is no longer possible to remotely unlock your phone using SmartThings Find, while Samsung's Caribbean and Latin America page still documents the procedure and shows what it costs you: the remote unlock option has to be switched on in advance in the device's settings, the phone must be registered to a Samsung account, and you need that account's password. Either way it is not a route a family can open after the fact. Samsung's stated fallback where no remote method was set up beforehand is a factory reset, with data and settings restorable only if the device was backed up.

Which path gives you what?#

Path	Platform	What it actually returns	What it requires	Realistic outcome
Known passcode	Both	Everything on the device	Someone knew the code	The only route to on-device data
Apple legal request	Apple Account	Apple Account data; possible Activation Lock removal	Death certificate, usually a court order with Apple's five required statements	Device must still be erased and restored to be used
Apple Legacy Contact	Apple Account	Photos, messages, notes, files, device backups; Activation Lock removed	Access key plus death certificate	Only works if it was set up beforehand
Google deceased-user request	Google Account	Possible content release, funds, or account closure	Careful review by Google; data request must precede closure	No passwords or login details, ever
Inactive Account Manager	Google Account	The data the owner chose, to named contacts	Configured in advance by the account holder	Contacts get 3 months to download
Factory reset	Both	A usable handset, zero data	Apple Account password (Activation Lock) or screen unlock / Google password (device protection)	Wipes the thing you were trying to reach
Samsung remote unlock	Galaxy	Nothing, after the fact	Enabled in advance, plus the Samsung account password; withdrawn in some regions	Not a route to open afterwards

What should you do first, in order?#

Stop guessing, and do not tap anything that offers to erase. Every distinct wrong passcode moves the iPhone closer to a ten-attempt lockout, and toward a full wipe if Erase Data was ever switched on.
Note whether the phone is powered on and connected, since Apple's Forgot Passcode option needs an active cellular or Wi-Fi connection with Find My on, and Find Hub needs the same on Android.
Order several certified copies of the death certificate. Apple requires one or a regional equivalent, and Verizon asks for proper documentation such as a death certificate or executor paperwork. Requirements are not universal, though: T-Mobile states a death certificate is not required to start its process, and AT&T will accept an accident report, death certificate or obituary if you do not know the account passcode.
Search the person's email and papers for an Apple Legacy Contact access key, and watch the estate's inbox for an Inactive Account Manager message. Both arrive as ordinary email and are easy to delete by mistake.
Submit the Google data request before any closure request. That order cannot be undone.
Hand the estate attorney Apple's exact five-point court-order wording rather than a general request for access.
Save voicemails and greetings before touching the carrier account. T-Mobile warns that a transfer of ownership or cancellation permanently deletes them, and Verizon notes you can save voicemails before a line is disconnected.

Does being next of kin change anything legally?#

Being family is not by itself permission. Under the Revised Uniform Fiduciary Access to Digital Assets Act, a direction made through an online tool overrides a contrary direction in a will, trust, power of attorney or other record, provided the tool lets the user change or delete that direction at any time. A Legacy Contact designation, kept current, beats the paragraph your relative wrote into their will.

RUFADAA also explains why the companies behave the way they do. It gives custodians a 60-day window to comply with a valid fiduciary request, lets them insist on a court order first, and makes them and their staff immune from liability for acts or omissions done in good faith in compliance with the act. Nothing in it gives a fiduciary rights the user did not have. It is also why silence is expensive: for the content of electronic communications, a custodian discloses only where the user consented, through an online tool or in a will, trust or other record, or where a court directs it. Absent that consent, access can be limited or eliminated by the provider's terms of service. The act has been enacted in most U.S. states, but the granting still has to be affirmative.

What happens to the phone number and the wireless account?#

The number is usually portable, the account is not. Verizon asks for proper documentation such as a death certificate and executor paperwork, can disconnect the line or transfer the number to a different Verizon account, and reviews requests in about 3 business days. Account members and executors must go to a Verizon Company Store or call 800-922-0204, because Verizon Authorized Retailer locations such as Walmart or Target cannot process this type of request.

AT&T charges no early termination or other cancellation fees for a deceased person's line, and waives remaining unbilled installment charges if installment-plan devices are returned. If you know the wireless account passcode you can transfer billing responsibility or cancel; if you do not, AT&T may ask you to verify the account with details including the last four digits of the account holder's Social Security number and one of an accident report, death certificate or obituary. T-Mobile handles both closure and continuing service on the same number and device by phone at 1-877-746-0909, and says a death certificate is not required to start.

If the line is disconnected for good, the number does not vanish immediately. Since 27 July 2020 the FCC has required all service providers to age telephone numbers for at least 45 days after permanent disconnection before reassignment, and to report permanent disconnections on the 15th of every month.

Are paid "unlock" services worth trying?#

No, and the ones that ask for money up front are the ones to walk away from. Apple's own guidelines say it cannot extract data from a passcode-locked iOS 8 or later device and does not have access to the passcode, and Google's published answer for a locked Android is to erase it. Neither vendor offers a consumer route around a lock screen, which is the entire reason the account and court-order paths exist.

The FTC's advice on refund and recovery scams is blunt: if someone contacts you and asks for an upfront fee to get something back for you, that's a scammer, and it warns never to hand over personal or financial account information to get a refund. The FTC has also flagged imposters posing as the funeral home to pressure grieving families, and advises resisting the pressure to act immediately, because honest businesses give you time to decide. Anyone selling a guaranteed passcode bypass is selling something the platform vendors state in writing that they themselves cannot do.

What can be set up in advance so none of this is needed?#

Both platforms ship a tool that replaces the court order with a settings screen. Both only work if someone taps through it while the account holder still can.

Apple Legacy Contact. Apple calls it the easiest, most secure way to give someone you trust access to the data stored in your Apple Account, and the contact needs both the access key and a death certificate to file a request. Setup needs an Apple device running iOS 15.2, iPadOS 15.2 or macOS Monterey 12.1 or later with two-factor authentication on. The contact must be over 13, with the age varying by country or region, and needs neither an Apple Account nor an Apple device. You can add more than one, and any of them can individually make decisions about the account data, including deleting it permanently. On approval they receive a special Legacy Contact Apple Account, the original Apple Account stops working, Activation Lock is removed from devices that used it, and access lasts three years from when Apple approves the first request before the account is permanently deleted. They can reach photos, messages, notes, files and device backups. They cannot reach movies, music, books or subscriptions purchased with the account, or anything in iCloud Keychain. That last exclusion is structural rather than a setting anyone can flip: the key information handed to a Legacy Contact deliberately omits what is needed to decrypt the deceased's iCloud Keychain, so saved passwords and passkeys can never be released.

Google Inactive Account Manager. The account holder picks 3, 6, 12 or 18 months of inactivity and up to 10 trusted contacts, with a warning sent a month before the deadline. If data is shared, those contacts have 3 months to download it before deletion, and an automated Gmail reply can be set for the same moment. Contacts get no notification during setup and are only emailed after the inactivity period, with a list of shared data and a download link. Google measures inactivity from signals including last sign-ins, My Activity, Gmail usage and Android check-ins, and some information cannot be shared this way. Worth knowing separately: Google reserves the right to delete an account and its data if it has been inactive across Google for at least two years.

Both tools cover exactly one company's data. Neither covers the domain registrar, the payment processor, the client contracts, or the note explaining which of those matters first. That gap is what Proceedly's scheduled check-in is built for: you answer on a schedule, and when an answer does not arrive past a grace window, a person you name confirms, or on a paid plan it releases automatically, before your encrypted handoff plan reaches the people who depend on you. It holds your instructions and where the keys live, never the passwords themselves, which is the same line Apple's Keychain exclusion draws.

FAQ: what do families ask next?#

Can a repair shop or data recovery service unlock it? Not through any route Apple or Google supports. Apple's guidelines say it cannot extract data from an iOS 8 or later device and does not have the passcode, and Google's published answer for a locked Android is to erase it. Be very wary of anyone who takes an upfront fee to try anyway.

Does a court order force Apple to reveal the passcode? No. A court order gets you Apple Account data and possible Activation Lock removal, and it must carry Apple's five specified statements and be addressed to the relevant Apple entity. The passcode is not something Apple holds.

Can I use the phone after a factory reset? On iPhone, only with the original Apple Account password, because Activation Lock survives the erase. On Android, only by signing in with a Google Account that was previously added and synced to that device.

Will a Legacy Contact get the saved passwords? No. iCloud Keychain, covering payment information, passwords and passkeys, is excluded by design, and the key information handed over does not include what would decrypt it.

How many wrong passcode guesses does it take to lock the phone? Apple documents escalating delays from one minute after the fourth attempt to lockout after ten or more, and a wipe after ten if Erase Data is on. Repeating the same wrong passcode does not count toward that total, but each new guess does.

The phone is offline. Does that matter? Yes. Apple's Forgot Passcode option only appears with an active cellular or Wi-Fi connection and Find My turned on, and Find Hub cannot secure or erase an Android device that has no power or connection.

How long does any of this take? Verizon reviews these requests in about 3 business days. Google publishes no timeline and states only that any decision follows a careful review.

Can we keep the number? Verizon can transfer it to another Verizon account and T-Mobile can continue service on the same number and device. If it is permanently disconnected instead, FCC rules age it for at least 45 days before reassignment.