Live data from Hacker News

Cheat sheet for if I'm gone

thoughtscollected.tech

11–20 of 194 posts

Re: Cheat sheet for if I'm gone

#12

The big problem with this that I don't have a good answer to... we've been told to use a password manager and have it secured with a long passphrase... and now we write down the username/passphrase on a piece of paper or somewhere else easily accessible - how to adequately secure that? Maybe encrypt the passphrase under an m of n scheme and distribute to family & friends that you can trust to not collaborate unless y…

Leave it in escrow with a lawyer, along with a copy of your will.

If you are super cautious, leave an encrypted copy (or half the passwords etc) with one lawyer/escrow, and have a separate lawyer/escrow hold the decryption key/other half of the passwords etc. Along with easy instructions on how to decrypt!

End of the day, if I die at an old age, my heirs will also be old and possibly not into computers/tech. I prefer a simple approach that requires minimum skill/effort on their part aside from presenting the relevant death certificate/paperwork to the lawyer.

Re: Cheat sheet for if I'm gone

#13
This has been around for a long time. I personally maintain all the information in the following format. I hope someone finds it useful.

https://lifehacker.com/organize-your-familys-essential-infor...

and what my family should know incase if something happen to me.

https://ussvicb.org/documents/What%20My%20Family%20Should%20...

Somethings like the above. I've added more info such as 2FA etc in a separate sheet and saved all QR Codes for all the 2FA in my Authenticator apps, and printed them and kept two copies of it in two different locations known to family members. Updates are added as additional sheets to the binder as new codes are added and as a practice, one full dump around a 6 months to 8 months is also added.

You never know what emergency might come in.

Re: Cheat sheet for if I'm gone

#14

The big problem with this that I don't have a good answer to... we've been told to use a password manager and have it secured with a long passphrase... and now we write down the username/passphrase on a piece of paper or somewhere else easily accessible - how to adequately secure that? Maybe encrypt the passphrase under an m of n scheme and distribute to family & friends that you can trust to not collaborate unless y…

The answer is shamir's secret sharing algorithm. Give a chunk of your password to N friends who you trust, with instructions to recombine it.

I've been (lightly) thinking about this with regard to digital identity.

One of the few use cases that I find very compelling with regard to blockchain/web3 tech is as a means of ID/auth much in the same way that many sites now offer options to log in with FB/Google/etc.

One big obstacle (I imagine, I haven't really looked into this that far) is that of the password reset. Some non-trivial amount of people will forget the passwords to their identity tool, and in this scenario there's no central power with the capability to reset it for them.

The simplest option is to designate trusted friends who you could delegate authority to in order to perform some multi-sig reset, but then there's the issue of a FriendCoup. If you strike it big and turn on or ignore your friends, there's nothing stopping them from getting together and performing a takeover. Even if there are individual objectors, because it's blockchain, everything's public, and these are identity wallet contraptions, everyone knows who the hold out is and can lean on them or find some way to get their password, etc.

Even outside of a FriendCoup scenario, a FedCoup scenario where the government just leans on your buddies to grant them control is pretty plausible.

So I guess the question is, what sort of strategy for this is FriendCoup/FedCoup resistant but still grants the necessary amount of delegated power?

Not entirely relevant to the above, as doing this pen and paper for a password manager is a little harder for outsiders to game given that the holders aren't public, but still a question I've been batting around. Curious about anyone's thoughts/ideas or any existing work in this space.

Edit: After thinking about this for an extra minute, if it's not time sensitive a deadman switch could probably do it. If your friends perform the multi-sig and you haven't logged in in X days, then and only then will the reset occur, so you can void an attempt. That said, falls down on the FedCoup scenario since you'd presumably have restricted access to the internet.

Re: Cheat sheet for if I'm gone

#15
The valuable part of this document is reminding us what to remind them of.

I would add: Do you have any private investments? Convertible notes or stocks?

Should have a login for AngelList or whatever platform if it’s through one.

Then other assets like bank account, brokerage account, deeds to house and car.

And I agree this is stuff that — if possible — should be shared and discussed in real time.

Re: Cheat sheet for if I'm gone

#16

The big problem with this that I don't have a good answer to... we've been told to use a password manager and have it secured with a long passphrase... and now we write down the username/passphrase on a piece of paper or somewhere else easily accessible - how to adequately secure that? Maybe encrypt the passphrase under an m of n scheme and distribute to family & friends that you can trust to not collaborate unless y…

The answer is shamir's secret sharing algorithm. Give a chunk of your password to N friends who you trust, with instructions to recombine it.

That has failure modes, though, especially death on one of the N (might seem unlikely but I just had to help a friend unfuck a family member's finances after he died in a car accident next to the one trusted associate who had all his logins saved in an account locked behind 2FA secured by his iPhone which he didn't leave the unlock code to with anyone). I know there are other schemes where you only need M of N to turn the key, but really...

Leave. Your. Passwords. With. An. Attorney. And also your phone unlock code. A reputable attorney (preferably attached to a big firm) won't lose your stuff, and if they die or go out of practice they will have procedures in place to make sure you are set. This is not a situation where you want some clever DIY scheme that might fail and leave your loved ones scrambling to sort your finances when they are already devastated and mourning.

Re: Cheat sheet for if I'm gone

#17

The big problem with this that I don't have a good answer to... we've been told to use a password manager and have it secured with a long passphrase... and now we write down the username/passphrase on a piece of paper or somewhere else easily accessible - how to adequately secure that? Maybe encrypt the passphrase under an m of n scheme and distribute to family & friends that you can trust to not collaborate unless y…

https://www.deadmansswitch.net/

Re: Cheat sheet for if I'm gone

#18

The big problem with this that I don't have a good answer to... we've been told to use a password manager and have it secured with a long passphrase... and now we write down the username/passphrase on a piece of paper or somewhere else easily accessible - how to adequately secure that? Maybe encrypt the passphrase under an m of n scheme and distribute to family & friends that you can trust to not collaborate unless y…

https://www.deadmansswitch.net/

How do you know this website will last longer than you?

Re: Cheat sheet for if I'm gone

#19
post #18

Earlier quoted context omitted.

https://www.deadmansswitch.net/

How do you know this website will last longer than you?

I read the help page.

https://www.deadmansswitch.net/help/

How can I be sure you'll outlive me?

We don't have to outlive you! If the service shuts down while you're alive, we'll send you an email well in advance so you can switch services. That said, the service has been running successfully since 2007.

Re: Cheat sheet for if I'm gone

#20
If you're not married or a domestic partner you might want to talk to a lawyer. You don't know what your partner or friend might not be allowed access to depending on your local laws or the business's requirements. But power of attorney will remain with.... your attorney.
Post reply on HN