Ask HN
How would you setup an emergency data locker for a (mostly) trusted partner to access if you were indisposed in some kind of emergency?
If I got hit in the head and couldn't remember my main passwords or was unconscious, I would want my partner to be able to access all my accounts and such if needed. I do trust her but do not want to just give her a URL and credentials she could access at any time. I think maybe a timed access with notification to me if she accessed it would give me time to intercept if needed.
You could periodically create encrypted backups of the necessary data on a USB stick (stored in a known place in your home), so that the data locker only needs to disclose a relatively short password to her (and it could even broadcast it in a tweet, since she would be the only person for whom that password would be useful).
Then, as you say, if she wants to access the plaintext, she would have to click a button on a secret web page somewhere which would trigger a server to send an email to you (and a couple of friends) saying that she had done this and that a 24 hour timer had started.
The email would also include a link to a page that could reset the timer, up to N times, while you tried to buy a new phone or regain consciousness or post bail or whatever the attack scenario is that you want to defend against.
In practice, the most likely failure mode is that you don't need to use this system for years and then something silently breaks, like you forget to renew a domain, or you forget that you changed your email address. As such you should include a quarterly test process for all of the steps, including making sure your partner remembers the process for performing the decryption, and making sure your friends haven't marked the automated email as junk, and so on.
Interestingly some banks provide this facility. I was once talking to my "financial assets manager"(I didn't know I had one until I went to the nearest branch for some other work!).
Anyway, during my discussion with him he asked me whether I would like to avail the "will creating and custody service". And he mentioned that in addition to financial assets they also have an option for safe custody of digital assets with them. Here digital assets are anything like usernames, emails, passwords, URLs, digital photos, backups etc that you would like to pass it on to the nominees.
I was lowkey thinking about approaches to a similar arrangement, and my conclusion is that the key to this is a lawyer/attorney, unless you want to make the trusted person a part of a convoluted cryptography scheme. Give the person an encrypted file with instructions, or a password database, and have the attorney deliver a piece of paper with the password to that file if you're incapacitated. Perhaps make the paper look innocuous to the lawyer if you want. IDK though if lawyers actually do things like this in various jurisdictions—outside of the rather final scenario of a will.
I'm in the process of setting this up with multiple SD cards as locker[1]. I got SD card storage with credit card like form-factor so that it fits in my wallet. The tricky thing is to figure out how to keep the instructions unencrypted. I'm thinking about making a half-yearly ritual like a fire-drill which also allows me to rotate keys and improve the process. Not sure how to make it feel less morbid than it is :)
An Online Deadman switch can release a piece of info (a pin or password in this case).
This requires you logging in or responding to the service daily/monthly/yearly.
I have my password as part of my will. The contact details for them are in my wallet and in my room.
Print it out and put it in a bank safe deposit box. Or, consult an attorney.
Relatedly, are there good ways to do this considering 2FA? (or maybe that is tangential to the author's ask)