PassMyWill Is A Will For Your Online Assets And Passwords
1–10 of 21 posts
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#2What a great way to get your passwords stolen.
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#3This is an interesting start up and concept but it seems like there's a pretty high barrier to entry. In order to use this site you have to place a lot of trust in it to:
* Be secure with your credentials to sites * Reliably figure out that you are dead * Trust that your next of kin will figure out the key you've set up
It's certainly a useful concept and much better than hoping your loved one placed the credentials somewhere you could access them.
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#4This is an interesting start up and concept but it seems like there's a pretty high barrier to entry. In order to use this site you have to place a lot of trust in it to: * Be secure with your credentials to sites * Reliably figure out that you are dead * Trust that your next of kin will figure out the key you've set up It's certainly a useful concept and much better than hoping your loved one placed the credentials…
An easy solution:
Encrypt your package using a fresh private key. Send the package to the will handler (such as PassMyWill), but not the key. Send the key to all the will recipients.
Upon the execution of your will, your recipients get the package that they can already open with their key.
The trick becomes to keep the package opaque to the will handler, and to keep the recipients from gaining access to the package prematurely.
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#5I really don't see it competing much with having an envelope with a master password (e.g. my gmail password) in my safe?
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#6Pretty sure these guys have been doing something similar for a while now: https://www.lifeensured.com/
I wonder if PassMyWill has ever been audited for security vulnerabilities? LifeEnsured has: https://www.lifeensured.com/faqs#security
EDIT: lol. The login form on PassMyWill gets POST'd over HTTP.
EDIT2: Nope, the entire server doesn't support SSL. facepalm
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#7This is an interesting start up and concept but it seems like there's a pretty high barrier to entry. In order to use this site you have to place a lot of trust in it to: * Be secure with your credentials to sites * Reliably figure out that you are dead * Trust that your next of kin will figure out the key you've set up It's certainly a useful concept and much better than hoping your loved one placed the credentials…
An easy solution: Encrypt your package using a fresh private key. Send the package to the will handler (such as PassMyWill), but not the key. Send the key to all the will recipients. Upon the execution of your will, your recipients get the package that they can already open with their key. The trick becomes to keep the package opaque to the will handler, and to keep the recipients from gaining access to the package p…
Double-encrypt the package with a key that you give to PassMyWill and that you give to the recipients. Give the package to everyone.
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#8What benefit would this provide over simply having an encrypted memory stick (or similar) containing all of the necessary account information and leaving the password with someone trusted (e.g., lawyer responsible for will, family member friend, etc)? (or, as troels suggests, leaving the password or even the stick in a safe)
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#9Another problem is keeping your backup passwords in sync with your day to day use passwords, especially if you're not going to die to 40-80 years.
Probably the best solution is to have something like 1Password set to automatically manage passwords, encrypted with a master password, and then disclose only enough information to get to the daily-use 1Password. Disclosing a single password like that is probably better accomplished in a paper will, stored with a lawyer/executor.
Although there's also some value in an "I'm dead" script which deletes porn, porn passwords, information about your affairs, criminal activity, compromising photos involving porn and crime and drugs, the Guatemalan second family you support, etc., before turning over things like facebook passwords to next of kin.
Re: PassMyWill Is A Will For Your Online Assets And Passwords
#10What benefit would this provide over simply having an encrypted memory stick (or similar) containing all of the necessary account information and leaving the password with someone trusted (e.g., lawyer responsible for will, family member friend, etc)? (or, as troels suggests, leaving the password or even the stick in a safe)
The benefit is that if you did it with an encrypted USB that you keep with a lawyer, every time you make a new account or change your username or password, you would have to get the USB back, re-write the txt file, then give it back. Whereas here, it may be easier to update your information in this fashion