Actifs numériques au Paraguay : crypto, mots de passe et testament numérique

Digital Assets in Paraguay: Crypto, Passwords, and Digital Wills

You live in Paraguay. Your income goes through your US company's online bank. Your investments are with an international broker. Your cryptocurrencies are stored on a physical wallet or an exchange platform. Your clients pay you online, your files are in the cloud, your passwords are in a manager, or worse, in your head. Your professional and financial life is entirely digital. And the question no one asks is: what happens if you die tomorrow?

Does your spouse know the access credentials for your professional account? Do your children know there are bitcoins on a small device in your desk drawer in Asunción? Does your family in France know that your US company holds cash reserves? And if you are hospitalized for three months after an accident on Ruta 2, who pays your bills, who responds to your clients, who manages your company, who accesses your accounts?

Digital assets, online bank accounts, cryptocurrencies, brokerage accounts, US companies, domain names, passive income, and personal data represent a growing portion of expatriates' wealth. These are also the most vulnerable assets in the event of death or incapacity: invisible, protected by access credentials only you know, and not inherently transmissible. This guide covers their protection, documentation, and transmission.

Inventory: Knowing What You Own

Categories of Digital Assets

Category Examples Risk in Case of Death or Incapacity
Online Bank Accounts Your US company account, multi-currency account like Wise, Paraguayan bank account with online access, retained French account. High. Without credentials, your heirs cannot access funds. US online banks apply their own lengthy and complex probate procedures if no one is prepared.
Cryptocurrencies Bitcoin, Ethereum, stablecoins, held on exchange platforms or a physical wallet (hardware wallet). Very High. A physical wallet is protected by a 12 or 24-word recovery phrase. If no one knows it after your death, the funds are permanently lost: no bank, no customer service, no recourse.
Brokerage Accounts ETFs, stocks, and bonds with an international or local broker. High. Brokers have probate procedures, but your heirs must first be aware of the account's existence and have the necessary documents.
US Company (LLC) The entity itself, its Operating Agreement, tax ID, and associated bank and payment accounts. High. Without a succession clause in the Operating Agreement, the company enters a lengthy and costly US judicial probate procedure. See our guide on the death of an expatriate in Paraguay.
Domain Names and Websites Domains, sites, hosting, and registrar accounts. Moderate. An unrenewed domain expires and is lost. Unpaid hosting causes the site to go down. All behind credentials only you hold.
Passive Income Self-published e-books, online courses, advertising monetization, applications, digital products, affiliate programs. Moderate to High. Income continues for some time after death, then declines if no one manages the accounts. Unclaimed funds are eventually lost.
Cloud and Personal Data Online storage, photos, important documents, notes. Moderate. Sentimental and documentary value rather than monetary. Without prior setup, data becomes inaccessible and is then deleted after a period of inactivity.
Social Networks Accounts with an audience, monetizable. Low to Moderate. Accounts are generally untransferable according to platform terms, but remain active after death unless a close relative requests deletion or memorialization.
Professional Emails Main inbox and addresses on your domain, containing contracts, invoices, and client communications. High for continuity: if no one can respond to your clients or track pending payments, the business will cease within weeks.

Building the Inventory

  • The format. A table or structured document listing, for each asset: the service name, access address, username, authentication method (password, two-factor authentication), an approximate value, and specific instructions, such as the physical location of a crypto wallet.
  • What is never included: passwords. The inventory lists assets and access methods; passwords live separately, in an encrypted manager. If both are in the same document and that document leaks, everything is compromised at once.
  • Where to store it. An encrypted digital version with restricted access, plus a paper version in a secure physical location, such as a safe or a sealed envelope with a notary. Paper is the ultimate safety net if all your devices are destroyed or inaccessible.
  • Updating. With each new account, password change, or significant movement, and at least a complete review every quarter, with a recurring reminder in your calendar.

Password Security

The Password Manager

This is the central piece of the system. A password manager stores all your credentials in an encrypted vault, protected by a single master password. You only remember one password; the manager generates, memorizes, and fills in all the others.

  • Choosing the tool. 1Password is the most advanced for family use: an encrypted vault synchronized across all your devices, shared vaults between family members, and a printable emergency kit containing the master password and secret key, to be kept in a safe place. Bitwarden, open source, offers a premium version with an emergency access function: a trusted contact requests access to your vault and automatically obtains it if you do not refuse within a defined period. If you are deceased or unable to respond, access unlocks automatically. KeePass, free and entirely local, will suit technical profiles who reject the cloud.
  • The master password. This is the most important password in your digital life. Long, at least fifteen characters, used nowhere else, and memorable: a passphrase composed of several unrelated words works better than a sequence of symbols impossible to remember. Do not write it on a sticky note; memorize it, and plan for the emergency kit as a backup.
  • Two-factor authentication. Activate it on all critical accounts: banks, crypto platforms, main email, and the manager itself. Even with your password, an attacker cannot get through without the second factor. Two precautions: choose a code application that offers encrypted backup restorable on a new phone, and keep the backup codes provided at activation, in the manager and on paper in a safe place. Otherwise, a lost phone can lock you out of your own accounts.

Common Security Errors

Error Risk Solution
Same password everywhere One hacked site and all your accounts fall, simply by reusing stolen credentials. A unique password for each account, generated and stored by the manager.
No two-factor authentication on critical accounts A password stolen by phishing or leak grants immediate access. Systematic two-factor authentication on financial accounts and main email.
Passwords in an unencrypted file Stolen or hacked computer: everything is exposed at once. Never put passwords in a text file, an unprotected online document, or a phone note. Encrypted manager, period.
Crypto recovery phrase stored digitally A file, photo, or note containing recovery words, and a hack empties your wallets in minutes. The recovery phrase must be kept on physical media only, never as a photo, never in the cloud, never in the password manager.
No manager backup Service down or inaccessible account: you lose all your access at the same time. Regular export of an encrypted backup to an external medium kept in a safe, and printed emergency kit in a safe place.
Underestimating phishing This is the leading cause of hacking: an email imitating your bank or crypto platform sends you to a fake site that captures your credentials. Never connect to a financial account via a link received by email or SMS. Type the address yourself or use the official application, and check the sender at the slightest doubt.

Cryptocurrencies: The Most Delicate Case

Why Crypto is the Most Vulnerable Asset

  • No recourse. Crypto is decentralized by design: no central bank, no customer service, no recovery procedure. Industry studies estimate that about one-fifth of all bitcoins ever created are permanently lost, very often because the holder has died or lost their private key. It is the only asset in your portfolio that can completely disappear by simple oversight.
  • The physical wallet. A hardware wallet keeps your private keys offline: this is the safest storage method against hacking, and the riskiest for succession. The device is protected by a code and resets after several unsuccessful attempts. The recovery phrase allows everything to be restored on a new device; if it is lost or unknown to your heirs, the funds are irrecoverable.
  • Exchange platforms. Funds held on a platform are simpler to transmit: heirs contact support with a death certificate and succession documents. In return, platforms expose you to hacking and the risk of bankruptcy, of which the recent history of the sector has given resounding examples. The reasonable distribution: significant amounts on a physical wallet, current amounts on a platform.

Protecting and Transmitting Your Cryptos

  1. Engrave the recovery phrase on a metal support. Steel plates designed for this, around 50 to 100 USD, resist household fire, water, and corrosion, which paper does not. A flood or fire in your Asunción apartment should not be able to erase your assets.
  2. Store this support in a safe place, in duplicate, in two distinct locations. Personal fireproof safe at home, bank safe deposit box (Paraguayan bank safe deposit boxes cost about 50 to 200 USD per year), or sealed envelope with a public notary (escribano público). For example: one copy in your safe in Asunción, one copy with a notary or a trusted relative in France.
  3. Keep fractionation simple. Some wallets natively offer Shamir's secret sharing: the phrase is divided into several parts, of which a subset is enough to reconstruct it, which protects against both the theft of one part and the loss of another. However, manually splitting your 24 words into three pieces stored in three places, all three necessary, is a false good idea: you multiply the risk of permanent loss by three. If you do not master these mechanisms, two complete copies well protected in two safe places are better than artisanal fractionation.
  4. Document the process for non-initiates. Your heirs probably do not know what a physical wallet is. Write step-by-step instructions, in French, without jargon: where the device is, where the recovery phrase is, how to restore funds on a new device purchased from the manufacturer's official website, and especially who to call, a trusted contact comfortable with crypto, if a step gets stuck. The quality test: a person who has never touched crypto should be able to either follow the process or find the right person to help them.

Crypto Declaration in Paraguay

Since Resolution 47/2026 of the DNIT, Paraguayan residents holding cryptocurrencies with a value exceeding 5,000 USD per year must declare them. This is a reporting obligation, not a new tax: the declaration is purely informative and generates no taxation. Integrate it into your annual routine; your accountant can handle it as part of DNIT accounting for €30 per month.

The Digital Will

What it is

A digital will is a set of documents that organizes access to your digital assets and their transmission in the event of death or incapacity. It complements your traditional wills, Paraguayan for assets in Paraguay, French for assets in France, a subject covered in our guide on the death of an expatriate. It contains an inventory of your assets, instructions for accessing the password manager, specific instructions for each critical asset (US company, bank accounts, cryptos, broker), the designation of a digital executor, your wishes for your social media accounts, and continuity instructions: who notifies clients, who pays ongoing invoices, who manages the company during the transition.

In terms of form, the combination that works is as follows. The notarized will designates the digital executor and mentions the existence of a digital addendum, without ever containing a password or recovery phrase: a notarized act is not the place for technical secrets. The addendum, a sealed envelope entrusted to the notary or kept in a safe, contains sensitive information: master password or emergency kit, location of the recovery phrase, step-by-step instructions. The will provides legal legitimacy; the addendum provides the user manual. One without the other is useless.

The Digital Executor

  • Who to choose. A person who is both reliable (you entrust them with the keys to all your digital assets) and competent (capable of navigating between password manager, crypto wallet, and online accounts). If no one in your circle possesses both qualities, designate a duo: a legal executor, a lawyer or notary, for succession, and a technical executor, a tech-savvy relative, for access. Both work together.
  • Designation. Explicit, in the will: full name, scope (online accounts, cryptocurrencies, US company, domains), and reference to the sealed envelope containing the instructions.
  • Powers. Access accounts, transfer funds to heirs, manage or close the US company according to the Operating Agreement, renew or close domains and subscriptions, inform clients and partners, secure or delete personal data.
  • Remuneration. Optional for a relative; a legacy of recognition is an appropriate gesture. For a professional, provide for it in the will, ranging from 1,000 to 5,000 USD depending on the complexity of the estate.

Automatic Transmission Mechanisms

Tool How it works Setup
Inactive account manager (Google accounts) You designate trusted contacts. After an inactivity period you choose, from 3 to 18 months, they receive access to the data you selected: emails, files, photos. In the account privacy settings. Five minutes, free.
Legacy contact (Apple ecosystem) The designated contact can request, with a death certificate, access to your data stored in the cloud: photos, files, backups. In account settings, under security. Five minutes, free.
Emergency Kit and Vault Sharing (1Password) The printed emergency kit contains the master password and secret key: anyone who has it can open the entire vault. The family plan also allows you to share targeted vaults with a loved one, with permanent access. Print the kit, place it in a sealed envelope in a safe or with a notary, intended for the digital executor.
Emergency Access (Bitwarden) The trusted contact requests access to your vault; you have a configurable period to refuse. If you are deceased or unable to respond, you will not refuse, and access will be automatically unlocked at the deadline. In account settings, premium version. Five minutes.
Posthumous Message Services Third-party services automatically send messages and documents to your contacts if you do not confirm your activity at regular intervals. The principle is appealing, but these services are small businesses that sometimes close before you do: never make them the sole pillar of your plan, at most an additional layer. Registration, message drafting, choice of contacts and verification frequency.

Incapacity: The Forgotten Scenario

Death is not the only risk, and not necessarily the worst for asset management. Upon death, your succession opens, and your heirs inherit. In a coma, or diminished by a stroke or illness, you are alive but unable to manage your affairs, and no one else has the right to do so on your behalf, unless you have arranged it in advance.

  • The future protection mandate (mandat de protection future), France. A deed, preferably notarized, by which you designate an agent responsible for managing your affairs if your incapacity is medically confirmed. Explicitly specify digital assets: access to online accounts, cryptocurrency management, administration of the US company. The mandate only takes effect in case of incapacity; as long as you are able, it remains dormant.
  • The general power of attorney (poder general), Paraguay. A notarized power of attorney executed before an escribano público, which authorizes your agent to act on your behalf regarding your Paraguayan affairs: local bank accounts, real estate, RUC, procedures with the DNIT. Expect approximately 200,000 to 500,000 Guaranies, or a few tens of dollars. The two instruments are complementary: the French mandate covers France, the power of attorney covers Paraguay.
  • Specific clauses by asset. The Operating Agreement of your US company must explicitly state who manages it in case of incapacity of the sole member and who inherits it in case of death; without these clauses, the company is legally paralyzed. For online banking, neobanks do not have a standardized power of attorney procedure: the agent will have to present the mandate and supporting documents, on a case-by-case basis, with delays. For brokers, inquire about the available arrangements, authorized agent, power of attorney, beneficiary designation according to jurisdictions, and implement them now: once incapacity occurs, it is too late to sign a form.

The Checklist: Twelve Actions to Take Now

  1. Install a password manager and migrate all your credentials to it.
  2. Enable two-factor authentication on all critical accounts, with backup recovery codes.
  3. Create an inventory of your digital assets, without any passwords in it.
  4. Print your manager's emergency kit, or configure its emergency access, and place it in a sealed envelope in a safe place.
  5. Engrave your crypto recovery phrase on a metal plate, in duplicate, in two distinct locations.
  6. Write step-by-step instructions for your heirs, in non-technical language, and have them reviewed by the relevant person.
  7. Update your US company's Operating Agreement: succession clause, incapacity clause, designation of successor.
  8. Configure your email's inactive account manager and, if applicable, the legacy contact for your mobile ecosystem.
  9. Draft or update your Paraguayan and French wills, designating a digital executor and mentioning the appendix.
  10. Have a future protection mandate established in France and a general power of attorney in Paraguay, explicitly covering digital assets.
  11. Check with your broker about power of attorney and beneficiary designation arrangements, and implement them.
  12. Inform your digital executor of their role and the location of the documents. They don't need the passwords today, only to know they are designated and where to look when the time comes.

The Six Mistakes That Ruin the System

  • "I'm young, I'll deal with it later." A road accident doesn't check your birth date. The complete setup costs two or three hours of configuration and a few hundred dollars; its absence can cost all your crypto and months of blockage for your loved ones.
  • Everything in one file. A spreadsheet with passwords, recovery phrases, and balances is a single point of failure: if stolen, it reveals everything. The rule is separation: credentials in the encrypted manager, recovery phrase on metal, instructions on sealed paper.
  • Only one holder of the key. If the only person with the emergency kit dies or disappears at the same time as you, all is lost. Two copies, two locations, possibly two people: redundancy is the condition for resilience.
  • Outdated instructions. You change managers, move your crypto, close an account: unupdated instructions will lead your heirs to dead ends. Quarterly review, calendar reminder.
  • Technology without legality. Passwords without a will provide no legitimacy: banks, platforms, and administrations will demand a death certificate, act of notoriety, and proper designation. Conversely, a will without technical access leaves legitimate heirs facing locked doors. Both pieces of the puzzle are essential.
  • An untested process. Your instructions seem clear to you because you wrote them. Have your executor read them: each sticking point is an instruction to rewrite. An untested process will fail precisely on the day it is needed.

What It Costs

Item Cost Frequency
Password manager 10 to 60 USD per year Annual
Metal plate for recovery phrase 50 to 100 USD One-time
Personal fireproof safe 100 to 500 USD One-time
Bank safe deposit box in Paraguay 50 to 200 USD per year Annual
Notarized Paraguayan will 200 to 500 USD One-time, plus updates
Future protection mandate in France 300 to 800 € One-time
General power of attorney in Paraguay a few tens of dollars One-time

In total, the order of magnitude is 700 to 2,500 USD for setup, then one or two hundred dollars per year. Relative to the value protected—tens or hundreds of thousands of dollars in accounts, securities, and crypto—it is the cheapest insurance for your assets.

Conclusion

Your digital assets are at the heart of your expatriate wealth: online accounts, cryptocurrencies, investments, US company, domains, passive income, data. They are invisible, fragile, and non-transferable by default: your heirs, for the most part, know neither their existence nor how to access them.

Protection rests on three pillars. Security: password manager, two-factor authentication, recovery phrase on metal, safe. Documentation: inventory, instructions for non-experts, quarterly review. Legal framework: wills with designated digital executor, future protection mandate, general power of attorney, updated Operating Agreement. All three together form a robust system; if even one pillar is missing, chance or time will find the flaw.

The digital will is not morbid. It is an act of responsibility: to spare your family the chaos of an unprepared digital succession, to ensure that the wealth built with hard work and intelligence reaches those you love, and not digital oblivion. Start today: the manager, the inventory, the plate, the will, the executor. Two or three hours of work, and you'll sleep soundly.

Are you structuring your assets in Paraguay? Contact us: Paraguayan tax residency from €1,400, or €1,800 for the Express formula which is completed in a single 2-day trip on-site, creation of a US LLC, Paraguayan bank account for €250, and DNIT accounting at €30 per month. We can also refer you to Paraguayan scribanos and French notaries for your will and future protection mandate. Write to us on WhatsApp at +595 971 362 302: quick response, in French.

Back to blog

A question? Write to us