Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I debate this with myself often. Short of renting a security box and telling people I trust about it, I haven’t come up with a strategy for the master password. At the moment, I’ve resigned myself to the feeling that if I lose my memory, maybe it’ll be the opportunity for a fresh start, and so losing everything is a feature not a bug.


Shamir Secret Sharing could be the answer you're looking for... I'm sleeping better at night

here's a quick blog post I wrote with my plan. The app is trivial to write if you find a library for your preferred language

https://g3rv4.com/2022/04/a-plan-for-my-secrets


If you lose your memory you better have instructions written clearly on paper not some app which you won't remember how to build or install


instructions are on my blog :)


And if you can't update your blog or can't pay for it because you lost your memory? The low tech solutions can't be beat, especially if you expect others to help you pick up the pieces with minimial technical sophistication.


I agree, if I lost my memory and can't remember how to access my blog or run docker then I'd be out of my digital life.

In that scenario though, I'd also be out of my digital life even if I had access to 1password.


I wrote a tool for this[1,2], though it's still a work in progress (all the features work but I still need to finalise the QR data format and work on user-friendly interfaces).

[1]: https://github.com/cyphar/paperback [2]: https://youtu.be/GI9rKdM9rB8


I wish I found your app before I wrote mine [1] :) you seem to be way better versed in cryptography than I am. What's the advantage of having the main document and the keys separated?

[1]: https://g3rv4.com/2022/04/using-shamir-secret-sharing


I wouldn't say I'm very well-versed in cryptography. The reason they're separated is that it allows you to:

  * Further split up the trust such that the key shards can be held by one group but they don't have access to the document (maybe you keep a copy of the document with a lawyer but distribute the keys among your friends and family so that if your lawyer is hacked or bribed they can't reveal the secrets, same goes for if your friends conspire against you).
  * Make the shards small, independent of the document size, so that they're always practical for friends to store even if you have a very large document to save.
  * You can do a quorum expansion (create new shards that are compatible with the existing shards) without revealing the secret.
To be fair, for practical uses this is not super necessary but it adds flexibility without losing anything in return (I would argue the quorum expansion point is actually a useful feature).


Bitwarden (premium) has a really nice service of granting access to emergency contact based on prespecified wait time [1]. This can be used in any emergency situation.

[1] https://bitwarden.com/help/emergency-access/


Just send four trusted family members half of the passphrase in a sealed envelope and tell them what it's for. If your family has a lawyer or safe deposit box trusting that instead is a 1000x better option.


Lawyer yes, safe deposit hell no.

Three reasons:

- Banks fubar safe deposit boxes all of the time, in a variety of ways.

- Once the bank figures out that you’re dead, it’s sealed without a court order.

- As you get older it’s more likely that you’ll screw up payments, lose keys or codes, etc.

Also, the attorney will advise your loved ones on what they can do. For example, you need a power of attorney for many things.


Never, ever use a safe deposit box at banks:

https://www.nytimes.com/2019/07/19/business/safe-deposit-box...


>Never, ever

Despite the issues, there are still valid uses for a safe deposit box. I live in a highly fire-prone area and keep a backup drive with family photos and documents in a safe deposit box in a local place that won't burn when I do.


So long as you don’t expect the drive to be there when you retrieve it, sure. You should probably also encrypt any sensitive document on it. Here’s one example. Just one:

https://abc7news.com/archive/8973198/

Note the police are not classifying this as a criminal case (theft), but a civil case.


Can lawyers be trusted with this? Do they also properly manage their own death and other events? I don't have any experience and I'm genuinely curious how all this works.


> - Banks fubar safe deposit boxes all of the time, in a variety of ways.

Which is why you need to put a tamper-proof box INSIDE a security box in a bank. Key to that box will be in your house, far away from bank personnel.


excellent point!


I wrote mine down and put it in an envelope containing a few other secrets in a small fire-resistant, waterproof safe which my wife knows how to open.


Which safe did you get?


Fire safes are so shitty you'd probably be better off buying a small one to keep your documents/backups in and then a larger one to put that safe in for double insulation.


Itis a small portable one; more akinto an outrageously bulky, heavy, awkward briefcase than a bank vault.


So basically you bet everything on eternal love.


I publish or write down most of the things I want to keep in that scenario.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: