Playbook

Facebook and Instagram (Meta): Legacy Contact, and What It Won't Hand Over

Platform claims verified July 25, 2026

What this mechanism is

Facebook has a Legacy Contact: someone you name in advance who can look after your memorialized profile after you die. It is a real, documented mechanism, in the same family as Apple’s Legacy Contact and Google’s Inactive Account Manager, and naming one takes about a minute.

It is also much narrower than people assume. A legacy contact can:

write a pinned post on your profile
update your profile picture and cover photo
request the removal of your account
download a copy of your account data, only if you switched that option on

A legacy contact cannot:

log into your account
read your messages
add or remove friends

Messages are the gap, and messages are usually the point. For most people the valuable content on Facebook is not the public timeline, it is years of private conversation. Legacy Contact never reaches it, and Meta will not hand it over on a death certificate. The only reliable way your family sees those conversations is an export you take while alive.

Instagram has no legacy contact at all. The only options are memorialization or removal, both requested by someone else after the fact, and neither gives anyone access. Instagram will not provide login information for a memorialized account under any circumstances.

Set it up now

On Facebook: Settings & Privacy > Settings > Accounts Center > Personal details > Account ownership and control > Memorialization. Choose a legacy contact, or choose to have the account permanently deleted when Meta learns you have died.
Turn on the data-download permission for your legacy contact. It is a separate toggle in the same place, it is off by default, and without it your legacy contact gets a profile they can decorate and nothing they can keep. This is the single highest-value click in this playbook.
Take your own export anyway: Accounts Center > Your information and permissions > Download your information. Choose a date range of “All time” and the high-quality media option. Do this for Instagram in the same place, since Instagram has no legacy mechanism whatsoever.
Encrypt the export to your archive key and store the ciphertext anywhere durable. Record the location in your executor packet. An unencrypted Facebook export is a plaintext archive of your private messages and photos.
On the account card (Layer 1), record: the account email or phone, who your legacy contact is, whether the data-download permission is on, and the date.
Tell the person you named. Unlike Apple, there is no key to hand over, but a legacy contact who does not know they are one will not act.
Refresh the export on your liveness cadence. Everything said after your last export is reachable by nobody.

What AmberKey stores

Layer 1 (metadata): account identifiers for Facebook and Instagram, the legacy contact’s name, whether data download is enabled, and a pointer to the encrypted export. Safe for the executor packet.
Layer 2 (bearer secret): the archive key that opens the export, and the account password only if you choose to escrow it.
Do not store the export itself in Layer 2. It is far too large. Encrypt it and store the ciphertext externally; Layer 2 holds the key and the location.

What your survivors do

Start with the encrypted export, not with Meta. It contains the messages no process will ever release, and it needs no permission from anyone.
If a legacy contact was named, they go to the memorialized profile and act directly. If data download was enabled, download it now rather than later.
To memorialize a Facebook or Instagram account, submit Meta’s memorialization request with proof of death. For Instagram, a link to an obituary or news article is accepted for memorialization.
To have an account removed instead, you must be verified immediate family or the lawful representative of the estate, and Meta asks for documents (see below). Removal is permanent and takes the content with it, so export first if there is any chance the family wants the photos.
Do not expect message content from any of these routes. If the conversations matter and no export exists, talk to the estate’s attorney about whether civil process is worth it, understanding that stored communications are the hardest category to reach.

Required documents

Memorialization: proof of death, which for Instagram can be a link to an obituary or news article. Anyone can submit this.
Removal: proof you are immediate family or the lawful representative. Meta’s examples include the deceased person’s birth certificate, their death certificate, and proof of authority over the person or the estate.
Content beyond the profile: no documented path. A death certificate does not unlock messages.

Expected timeline

Legacy contact acting on a memorialized profile: immediate, once memorialization is processed. Memorialization and removal requests: Meta publishes no timeline and reviews on a rolling basis, sometimes asking for more documents. Your own export while alive: minutes to hours.

Gotchas

The data-download permission is off by default. A legacy contact without it can change a cover photo and nothing else. Most people who name a legacy contact never find this toggle, and discover the omission at the worst time.
Instagram is not covered by your Facebook legacy contact. Even with both accounts in the same Accounts Center, the legacy mechanism is Facebook’s alone. Instagram’s only answers are memorialize or delete.
Memorialization is hard to undo, and removal cannot be undone. Decide as a family before submitting, and export before removing.
A legacy contact can request removal of the whole account. If you name someone, you are trusting them with the delete button as well as the eulogy.
Anyone can memorialize you with an obituary link. That is deliberate on Meta’s part, but it means the account can be frozen out from under the estate by a well-meaning acquaintance before the executor has exported anything. Export early rather than at the end.
Exports are snapshots. Conversations after the last export are gone with the account.