eSIM and Digital Legacy: Who Inherits Your Mobile Identity?

Your mobile number is far more than a string of digits. It is the master key to your digital life: two-factor authentication for banking, password recovery for email and social media, verification codes for government services, and the primary contact for insurers, employers, and family. When someone dies, their phone number often becomes the single most critical gateway for executors trying to settle affairs. With a physical SIM card, the process was straightforward: locate the SIM, insert it into another device, and receive the codes. But eSIM fundamentally disrupts this workflow. There is no tangible object to hand over, no drawer to search, no SIM tray to pop open. The profile lives in silicon, fused to a specific eUICC chip inside a device that may be locked, damaged, or simply inaccessible. This shift from physical to digital SIM technology has inadvertently created what estate lawyers are now calling the 'mobile identity gap' — a digital asset that is simultaneously indispensable and unreachable.

No jurisdiction on Earth has enacted legislation that specifically addresses eSIM profile inheritance. Traditional estate law recognizes tangible property and, more recently, some categories of digital assets — but eSIM profiles fall into a regulatory void. Carriers in most countries have established procedures for transferring a deceased person's physical SIM and phone number to a family member, typically requiring a death certificate and proof of executorship. Yet these same carriers often have no internal policy for eSIM profiles. In many cases, customer support representatives are genuinely unsure how to proceed when a grieving family member asks to access an eSIM-based number. The GSMA's eSIM specifications — SGP.22 for consumer devices and SGP.02 for M2M — meticulously define profile download, activation, and deletion, but they contain zero provisions for posthumous profile transfer. This was not an oversight so much as a reflection of the standards body's focus on commercial deployment scenarios. Meanwhile, the legal frameworks that govern digital legacy — such as the Revised Uniform Fiduciary Access to Digital Assets Act in the United States or the EU's General Data Protection Regulation provisions on post-mortem data — were drafted with email accounts, cloud storage, and social media in mind. Mobile network identities simply were not on the radar.

From a technical standpoint, eSIM profiles are designed to be non-exportable for excellent security reasons. Each profile is cryptographically bound to a specific eUICC (Embedded Universal Integrated Circuit Card) during the download process. The SM-DP+ (Subscription Manager Data Preparation) server encrypts the profile using keys unique to that particular eUICC, meaning the profile cannot be decrypted or used by any other chip. Attempting to clone or extract a profile would require breaking hardware-level encryption that the entire eSIM security model depends on. This is the same architecture that protects you from SIM swap fraud and unauthorized profile cloning while you are alive, but after death, it becomes an impassable wall for legitimate executors. Even keeping the deceased's phone powered on indefinitely is not a viable long-term solution: devices require passcodes, which may be unknown; batteries degrade; operating systems demand updates and restarts; and carrier profiles eventually need refreshing. The SM-DS (Subscription Manager Discovery Server) may also eventually invalidate dormant profiles. In essence, the very security guarantees that make eSIM superior to physical SIM cards during life become its greatest liability after death.

Until carriers and standards bodies catch up, the burden falls on individuals to plan ahead. First, maintain an encrypted inventory of all active eSIM profiles: which carrier, which phone number, which device, and what each number is used for (banking, email recovery, etc.). Password managers with emergency access features — such as Bitwarden's Emergency Access, 1Password's Emergency Kit, or Apple's Legacy Contact — should store this inventory alongside device passcodes. Second, explicitly mention mobile numbers and eSIM profiles in your digital will or estate plan. A surprising number of digital estate planning checklists skip mobile connectivity entirely. Third, designate a trusted legacy contact and ensure they know not just about your email and social media but about your phone numbers. Fourth, proactively contact your carrier to ask about their death-of-account-holder procedures for eSIM lines. Some carriers, notably T-Mobile in the US and EE in the UK, have begun developing internal workflows for this scenario, though they rarely publicize them. Fifth, consider maintaining one critical number on a physical SIM as a deliberate redundancy — the 'break-glass' number that your executor can physically retrieve if all else fails.

The long-term solution requires coordination between carriers, device manufacturers, standards bodies, and legislators. The GSMA's upcoming specifications could introduce a 'legacy transfer' profile state that allows an authorized executor, upon verified proof of death and legal authority, to initiate a one-time secure migration of a profile to a new eUICC via the carrier's SM-DP+. This would function similarly to how Apple's Legacy Contact and Google's Inactive Account Manager allow designated individuals to access cloud data after death. The technical infrastructure for such a transfer already exists in the eSIM ecosystem — profile re-download to a new device is a standard capability — but it currently requires the account holder to authenticate the process. A legally mandated exception for verified executors, combined with biometric or multi-factor authentication from the executor side, would bridge the gap without compromising security. Some blockchain-based identity projects are also exploring decentralized solutions where a smart contract, triggered by a verified death certificate oracle, releases encrypted eSIM profile backups to pre-designated heirs. For now, however, the most powerful tool is awareness: understanding that your eSIM profiles are among the most critical digital assets you own, and planning accordingly.