15 ms·

Ask HN: How will you manage your digital assets when you die?

• throwawayrp 9y ago
  Nothing matters in the end...
  • LinuxBender 9y ago
    Exactly. Or to partially quote the 11th Doctor from Doctor Who: "...we're all stories, in the end. Just make it a good one, eh?"
  • dazc 9y ago
    But what if you have digital assets that are generating revenue without needing much maintenance? This revenue could be going to a family member for many months or even years after you have expired rather than just coming to an abrupt halt because you were paying for hosting month to month.
    • throwawayrp 9y ago
      Just make your spouse/immediate family member aware of your finances. They should always know where the money is coming from. If your family somehow is not aware or does not understand how the food is coming on their table, then it is not the right way of leading the family. Your significant other should be aware of your income sources and debts. They should never get surprises doesn't matter whether your are alive or dead.
      • deleted 9y ago
        [deleted]
• LinuxBender 9y ago
  For my own things, my accounts will just linger until the provider either goes out of business, or until account inactivity leads to deletion. Hopefully I wrote something witty or clever prior to going on permanent vacation. If I had my own small business, I would set up a legal trust and specify who and what is required to access a bank safe deposit box and what information was required to decrypt things.
• tristanj 9y ago
  I would not worry about it. In a decade or so when this becomes a common problem, expect the major tech companies to come up with their own automated process to handle this. Whatever system you come up with now will probably be obsolete in a few years. I would just let the service providers handle it.
  • deleted 9y ago
    [deleted]
  • alanfalcon 9y ago
    If only we had guaranteed lifespans.
  • insomniacity 9y ago
    I suspect most people on HN are their own service providers, to at least some extent.
• excalibur 9y ago
  Easy button: Set your spouse's email (or whoever is appropriate) as the recovery address on your Gmail. They should be able to reset passwords on most anything else from there.
  • semi-extrinsic 9y ago
    Google even has a designated feature for this, Inactive Account Manager. https://support.google.com/accounts/answer/3036546?hl=en https://support.google.com/accounts/answer/3036546?hl=en
    • amiga-workbench 9y ago
      I'm using this, if I don't touch my account for a while it gets nuked.
• oceanghost 9y ago
  I've given this a LOT of thought. I have several storage arrays of data (about 100TB currently). I've amassed every family photo I can get my hands on. Important TV, Movies, Books, Audiobooks. I'm working on software to annotate the data and provide a "guide" of a sort of a "Young Lady's Illustrated Primer". I'd like to be able to hand my daughter a hard disk or whatever the equivalent is-- of everything that was important to our family and to her intellectual development. In the case of my untimely death-- I'd like her to have a chance at avoiding some of the lessons I have paid entirely too much to learn.
  • LinuxBender 9y ago
    You might also consider creating a video of yourself explaining what these things are, why they are important and how to access and use the data. That would also be a good opportunity to share thoughts with her that she may appreciate more when she has matured. Life seems to get in the way of saying some of the most important things. I have so many regrets about the conversations I was never able to have with my mom. She was a single parent and died at a young age. Our last conversation was an argument.
    • oceanghost 9y ago
      Wayyyy ahead of you :) But thank you :)
  • johncalvinyoung 9y ago
    Years ago, my father was diagnosed with Stage 4 cancer, and given a 55% chance of surviving six months. The immediacy pushed him and my mother into writing out the book they'd been thinking about for years, a book on manhood for their sons. He ended up surviving it, and actually being declared cured--chemotherapy+radiation worked really well for him. It was a terrifying time, though, and I was really glad that they took the time to write down these things for us in case we lost him. They ended up publishing the book and it's sold tens of thousands of copies, but for me it's still the book my father wanted me and my brothers to have if he wasn't there to talk about it.
• clort 9y ago
  So, I'm using an open source password manager (KeePassX), and syncing the encrypted password database over several devices. Hopefully this gives me protection from loss from this data and I've thought about giving somebody the passphrase, in some way. I guess I could write it in a will and seal it up or leave it with a solicitor, but I think the best thing might be to give it to an old friend of mine who I don't actually see all that often these days though I met him at uni, 30+ years ago (but I went to both his weddings, was best man at one of them). I'm pretty sure I could trust him to know how to close the accounts and/or give the details to my next of kin.
  • WorldMaker 9y ago
    You could also use something like Shamir's Secret Sharing algorithm to include a piece of your password in your will, another with your old friend, maybe a third in a safety box with a key in escrow with your solicitor, and make it so that it takes two of the three pieces (or n of the k) to recover your password.
• bpicolo 9y ago
  Could put something like a 1password (or other password manager) key/password somewhere accessible.
  • enraged_camel 9y ago
    You could put it in your will, right? That way only your lawyer has access, and if you die then it is released based on the instructions.
    • patmcc 9y ago
      I'd strongly suggest NOT putting it in your will - more people than you may think end up taking a look at the will. Off the top of my head, based on acting as (co)executor for my father: -All executors -Lawyer -Bank teller (x2) who took photocopies so they know who the exeuctors are -Car insurance person, same as above -All potential beneficiaries, so they can challenge it if needed (this is a part of probate) -Once it's in probate, pretty much anyone I'd say it's safer to have in a "in case I die" envelope next to the will, but explicitly not part of the will.
  • PeterisP 9y ago
    You anyway need an offline backup for such keys/passwords in case you forget them, lose them, or they get destroyed in e.g. fire. E.g. it's not safe if the passphrase for your password manager or cryptocurrency wallet is only a single copy in your head; there are all kinds of plausible traumatic events/accidents resulting in things like prolonged hospitalization (e.g. what if you get hit by a car?) that may result in you misremembering some detail. If you have a backup of the "master keys" in a safe somewhere, then they're not only a backup for you, but also for whoever inherits that safe.
    • bpicolo 9y ago
      I'll admit I've considered the amnesia scenario before. Haven't done anything about it yet though. Might need to start thinking about that.
• jakobegger 9y ago
  If it’s important, people will figure something out; if it’s not important, who cares? When my dad passed away, I looked through all his files (fortunately he had one password he used everywhere), but in the end there really wasn’t anything important. There where a bunch of proposals, half finished projects, gigabytes of various data files, but following up on any of that stuff would just be a lot of work and require time that I don’t have. I think that 99% of my data/code/digital footprint is only valuable because of me; when I pass away, most of my stuff will become worthless, and that’s okay.
  • hendler 9y ago
    The value isn't in the items themselves, but in their perceived value. Especially valuable is the optionality. How would you feel if you could not have reviewed your father's files? What if you couldn't access critical financial accounts or didn't know they exist?
    • saurik 9y ago
      > What if you ... didn't know they exist? FWIW, if I really don't know that they exist, I would probably not feel anything about them ;P.
      • mattnewton 9y ago
        He means you would be wondering about them, causing angst.
        • saurik 9y ago
          In which case you might as well be wondering about them already: your father might very well have a bank account in another country, or a chest of gold dubloons buried in the back yard, or a bunch of stock certificates for some company he invested in fifty years ago... you really never know!
    • Sangermaine 9y ago
      >What if you couldn't access critical financial accounts or didn't know they exist? There are already procedures for an executor or heir to assume control of a deceased's financial accounts and assets, and part of that process is determining what accounts the deceased had.. You don't need to dig through Dad's Gmail for that. Like the first poster said, anything actually important either already has procedures in place or will be figured out in the probate process or otherwise.
• thetwentyone 9y ago
  My current approach to this problem is a feature of LastPass - if a designated person requests access to your account, and you don't respond within [x] days, then they are granted access. I set this to be the people necessary for after-life management. I know this doesn't answer all of the details you've asked about, but it is a mechanism for leaving the authentication details and instructions for those who remain after us.
  • gruez 9y ago
    >if a designated person requests access to your account, and you don't respond within [x] days, then they are granted access isn't this wildly insecure? at the very least it means lastpass can read all your passwords at any time.
    • eccbits 9y ago
      Laspass is massively insecure in all aspects of its design & history - including many facepalm-worthy breaches... It's terrible.
      • n3d1m 9y ago
        Off topic, but what makes you say LastPass is insecure, provided of course that you follow common sense rules like strong master password + 2FA?
      • corobo 9y ago
        As someone who uses the service, could you go into detail? Please do consider this a sincere query to your claim, I would like to know more
        • tbyehl 9y ago
          Wikipedia has a good overview of their (known) security lapses. Two server breaches, one known to have exfiltrated sensitive information. Several browser plugin vulnerabilities, one of which allowed arbitrary plaintext passwords to be stolen. https://en.m.wikipedia.org/wiki/LastPass#2011_security_breach https://en.m.wikipedia.org/wiki/LastPass#2011_security_breac... LastPass’s history is troubling but they’re also the biggest target out there. IMO, the entire space of “cloud” password managers is inherently untrustworthy.
• ktpsns 9y ago
  There is probably a distinction between personal software and websites in contrast to accounts at web services. The fundamental point here is who is in charge of running a service. Even the self-hosted website is probably entangled with a contract for the domain and a contract for a VPS, as well as updates and maintenance. Similiarly to a family residence left behind, such things have to be managed: Who is capable or can pay neccessary reparations? It will probably quickly turn out that things which currently look important are unmaintainable for the long term. Software updates are expensive and even companies frequently do not invest budget in old software. This does not render the indiweb useless on the long term in contrast to a mainline blog provider such as medium.com, it just gives it another quality. To cover such services: Even if they guarantee you today the service will be free "forever", they do not need to comply with that in 10, 50, 100 years. Where is geocities today? I think in the digital age, decay goes much quicker then in the past. What can be done is to make sure information go to well-preserved standards. PDF-A, static websites, https://archive.org/ https://archive.org/ , these are more likely to hold up for a longer time.
• deleted 9y ago
  [deleted]
• payne92 9y ago
  Geeky version: let's assume you want to "time release" something (e.g. unlock it in approximately 5 years). Encode your assets/keys/passwords and share just a portion of the key. If you extrapolate computing cost/power trends, you can estimate how long until it will be practical to brute-force decrypt the portion of the key you didn't share. Of course, this is an approximate, not precise, timing system.
  • gruez 9y ago
    problem is that a powerful adversary can "beat" your intended recipient by years or even decades. think whatever computing power a desktop has vs NSA, or even a guy with a lot of aws credits to burn.
    • RandallBrown 9y ago
      A more likely problem is that nobody will ever even try to crack your key and release your information.
      • voltagex_ 9y ago
        Related, this is the premise of MC Frontalot's "Secrets from the Future": https://www.youtube.com/watch?v=FUPstXCqyus https://www.youtube.com/watch?v=FUPstXCqyus
    • AgentME 9y ago
      There are ways of doing this that aren't trivially parallelizable for an attacker: https://www.gwern.net/Self-decrypting-files https://www.gwern.net/Self-decrypting-files. (Of course, the criticism still applies if the adversary is faster at whatever single-threaded operation you build the timelock on.)
  • shpx 9y ago
    You can't estimate the time required because an attacker can crack keys in parallel. "devices can differ dramatically now even in the same computers; to take the example of Bitcoin mining, my laptop’s 2GHz CPU can search for hashes at 4k/sec, or its single outdated GPU can search at 54M/second [...] it would not be very useful to have a time-lock which guarantees the file will be locked between a year and a millennium, depending on how many & what kind of people bother to attack it and whether Moore’s law continues to increase the parallel-processing power available" A better (but still not great) way to do it is to take 100 random numbers, hash them a trillion times (in parallel), then use each hash to successively encrypt the starting seed for the next hash. The last hash in this chain is the private key you encrypt your data with. You release the first seed and each encrypted hash and the encrypted data. To brute force your key someone would have to hash the first seed a trillion times, decrypt the seed of the next hash and hash it a trillion times and so on until they get the key. This can't be parallelized, but you can generate the hashes in parallel. It's still not great because you're probably not using 100 of the best possible ASICs for your chosen hash, whereas an attacker might or might not. https://www.gwern.net/Self-decrypting-files https://www.gwern.net/Self-decrypting-files
• Jhsto 9y ago
  I once played with the idea of some dead man switch triggering an event where it gathers a pool of pre-designated friends from Facebook into one group chat. There would be a bot guiding through opt-in to receive dividends of my wealth into their wallets/bank accounts. The idea was that if I'd have any side hustles, e.g., projects which are mostly autonomous, those would run their time and pay dividends until they deplete or become obsolete. Same would happen to my crypto assets and whatever holdings my sole proprietorship still has. The idea to gather the group chat was that tech-savvy people could help those in need of technical help and people could conglomerate together to reach out to people who are not active on Facebook. I imagine it to be fair that people who've helped me during my life would be offered an opportunity to receive tangible value for their positive effect in my life. As for online accounts in general, I think those should die with me.
  • ateesdalejr 9y ago
    What happens if Facebook dies before you?
    • c22 9y ago
      You port the solution to the new hotness...
  • throwawayd98 9y ago
    > There would be a bot guiding through opt-in to receive dividends of my wealth into their wallets/bank accounts... The bot is called a “lawyer” and the process by which someone receives your wealth is called “executing a will”.
    • Jhsto 9y ago
      Ah, it didn't cross my mind that I would have needed to be explicit about the fact that my scheme is practically inheritance tax avoidance. Practically, while possible, leaving an inheritance in my current country of residence for anyone outside of my family is imposing negative tax consequences on another. And that's not a gift in my book, more like showing up on your door in a foreign country asking for help, followed by a quick notion that the government is also after me. With all these lawyers, their leetspeak, and lengthy processes posing friction it's not a worthwhile effort to practically leave any change after me, thus why I thought to slap a "smart contract" on it.
• troupe 9y ago
  What Aaron Swartz did with http://www.aaronsw.com/2002/continuity http://www.aaronsw.com/2002/continuity seems kind of relevant. Of course what he said he wanted to have happen and what the people who had access decided should happen weren't the same thing. Would have been interesting if he had of automated it.
• craftyguy 9y ago
  All of the code I write now, I release publicly under a permissive license. I do not use any cloud services for storing data, and do not use any social media websites (other than perhaps HN, but all my actions are public here anyways). So that's a nop. If there are things I think others will want when I'm gone (e.g. photos, documents), put them in a place where they can be physically accessed. Everything else disappears when I do.
• thrownaway954 9y ago
  all my public stuff is on github and forkable. all my private stuff that i want people to have access to, they already have access to now. everything else can die with me for all i care. "Nobody exists on purpose, nobody belongs anywhere, everybody's going to die, come watch TV."
  • fak3r 9y ago
    "Wuba duba lub lub!"
    • acct1771 9y ago
      Try that again.
      • thrownaway954 9y ago
        wubba lubba dub dub :)
• danso 9y ago
  Facebook has a "Legacy Contact" system in which you designate someone to be an "heir" to your account. FB Research published a great paper that ruminated about how complicated the situation could be, even compared to the traditional sense of inheritance of assets/brand that we have today: https://research.fb.com/publications/legacy-contact-designing-and-implementing-stewardship-at-facebook/ https://research.fb.com/publications/legacy-contact-designin... I recently saw an edge case of how complex it is to manage online identity after death, in this WaPo article titled, "She wore the weapon in a photo with a friend -- then killed her with it": https://www.washingtonpost.com/news/true-crime/wp/2018/01/18/she-wore-the-weapon-in-a-photo-with-a-friend-then-killed-her-with-it/ https://www.washingtonpost.com/news/true-crime/wp/2018/01/18... This story is notable, for starters, because instead of using a screenshot of the photo, the article embeds the FB image directly, which means it is clickable and you can go to the user profile. What's even more unusual is that this photo was a selfie taken by the murderer (the selfie features both women), who then sent it to the victim, who then posted it on her own profile before getting murdered that night. And apparently, as most people her age, the victim didn't think about suddenly dying, nevermind designating an "heir" for her FB account. Anyway, you can see the comments in that photo and guess that the victim's friends were very pissed about something. Not just about how the murderer (whose faux-woe-is-me comment can still be seen) commented, but because apparently the victim uploaded this photo (taken by her murderer) and used it as her profile pic. So the victim's friends apparently had a dispute with FB to get the photo removed -- or at least changed to not be her profile pic -- and were apparently successful after an initial rejection. tl;dr: FB doesn't have a policy for when you choose a photo with a friend as your profile pic, but then get murdered by that friend.
  • LinuxBender 9y ago
    This would be a good use case of having a trust and a last will and testament, that provides instructions to your friends how to decrypt a password container, keypass, etc... that takes FB out of the loop. The executor or beneficiary can log in and update the account to something appropriate.
    • danso 9y ago
• ashleyn 9y ago
  They die with me; all encrypted. If there's something others need, I'll arrange for that beforehand.
  • funkaster 9y ago
    That's good. But you're assuming you can control when you die. That's not always the case: what about accidents?
• sonaltr 9y ago
  Anything public - it's open sourced. Anything paid - it's in escrow Anything private - it dies with me.
  • gowld 9y ago
    Escrow how?
    • imhoguy 9y ago
      https://en.wikipedia.org/wiki/Source_code_escrow https://en.wikipedia.org/wiki/Source_code_escrow
    • sonaltr 9y ago
      You have 3rd party companies which provide such services [0]. I personally just built an automated git push + email that will get sent if I don't stop it every week. Simple, Clean & Free. And my email has been prepaid for ~2 - 3 yrs (and I pay every year so it gets pushed ahead every year). [0]: https://www.codekeeper.co/ https://www.codekeeper.co/ - I don't personally use it. I found it on google.
• poof_he_is_gone 9y ago
  I worked for a startup that helped to track and store your digital assets, as well as standard ones like insurance and bank accounts. The platform allows its users both to share access and set up a chain of custody for your account in case of death. https://www.zokuvault.com https://www.zokuvault.com
• WorldMaker 9y ago
  I think about this a lot. At one point I almost built a Keybase-like application for Shamir's Secret Sharing to see if it would be useful for automating at least some bits of digital will/trust escrow, but that idea ran aground of 1) not enough attorneys/solicitors are technically competent to see a need for it yet, and 2) the general legalities of digital assets as a whole is a weird, currently untested in the court system wild west rabbit hole that attempting to educate on (1) quickly falls into (2). I think at some point we may need to sit down as a software industry with the law industry and draft better laws protecting digital assets as inheritable assets. Some easy examples: 1) Digital movie unlocks on platforms like Ultraviolet and/or Movies Anywhere. Are those unlocks inheritable? The service agreements are unclear, and the "family account" adds additional gray area. 2) Software Licenses and Software Subscriptions/Accounts. How many EULAs bother to mention inheritable rights other than to squash them or send them to mediation? Which of the App Stores support family sharing? How many have yet thought ahead to inheritable rights? 3) Are the GDPR Rights (Right to Erasure, Right to Rectification, Right to Access by the Data Subject, et al) inheritable? Right now the easy answer is that they don't mention the idea at all, and at least some of the GDPR implementors' heads might explode if they thought they would also need to consider survivors' access to those Rights. There are likely to be some huge coming legal battles over some of this stuff, and its something that I feel surprised not enough legal minds are even considering today.
  • sjg007 9y ago
    Digital movies are inheritable.
    • WorldMaker 9y ago
      I agree they should be, but the fact of the matter is that its not that simple. A digital movie unlock in the systems I mentioned are a "service license" where your relationship to that property is via the service's Terms & Conditions. There's not "digital asset" law that currently takes precedence over such T&Cs and it's not been tested in court (to my lay knowledge at least), if those are inheritable. More directly, if we look at Movies Anywhere's T&Cs [1], here's the main description of your license: «Within the Territory and subject to the terms and conditions in these Movies Anywhere Terms of Use, Movies Anywhere grants you a limited, personal use, non-transferable, non-assignable, revocable, non-exclusive and non-sublicensable right» I am not a lawyer, but the keywords there seem to me to be non-transferable and non-assignable. That is meant to keep you from reselling movies unlocked in your account, but also implies that the right is not inheritable. So too, the words "personal use" may imply "you and only you". Though that is a fun gray area in the terms because the system allows family accounts that bend past "only you". That's also why there is gray area in inheritance cases. The T&C as written would seem to me to bind only to you, not your family. Disney has the right to suspend your account for any reason at all, according to the T&Cs, but if they did need a reason "your death" is pretty clear because at that point the T&Cs no longer apply to "you". Again, I'm not a lawyer, but this seems a pretty big and ugly minefield for digital assets that I would love to see more frank conversations about. I think it is a missing EFF plank, at the very least (and I've mentioned that with past donations). [1] https://moviesanywhere.com/terms-of-use https://moviesanywhere.com/terms-of-use
• cypherpunks01 9y ago
  How are people dealing with crypto/bitcoin inheritance? Dead man's switch (or euphemistically, "Google Inactive Account Manager") that emails inheritee(s) with instructions for retrieving encrypted keys from a safe deposit box or other location, along with password for decryption and distribution allocation? Just giving private keys directly to your lawyer, sealed in your will, or encrypted with some type of challenge that only inheritees would know?
  • gowld 9y ago
    a bitcoin private key is essentially a piece of gold bullionl Keep it locked up somewhere safe, and give the key to someone you trust.
  • throwawayd98 9y ago
    How have people always dealt with this? Wills and lawyers. Why is HN trying to (poorly) reinvent probate law? Yes, give the keys to your lawyer. Or, if you’re uncomfortable with that, open a safe deposit box and keep important documents there that your lawyer/family can access after you die.
  • abecedarius 9y ago
    I'd expect https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing to become the standard way, but I don't know how easy it is to set up yet among non-programmers.
  • m-i-l 9y ago
    There are a couple of cryptocurrency inheritance management startups: https://www.digipulse.io https://www.digipulse.io is up and running and https://safehaven.io https://safehaven.io at the pre-ICO stage. Disclaimer: I haven't researched thoroughly so I can't comment on how secure etc. these are.
• Nadya 9y ago
  Everything will be as good as deleted since nobody will have my password - nor do I want anyone to. I do not concern myself with post-life as there is no evidence that I'll care when I'm dead. The few social profiles I have will just one day stop posting as if I finally decided I had more important things to do with my life, nobody knowing if I've simply left or if I've really left. I have no friends and the only family that would care will, assuming we all die due to passage of time, have already passed years prior.
• arca_vorago 9y ago
  Encrypted iron-key in a safe deposit box which with specific instructions for the executor in my will. (one step of which will be to activate my dormant conciousness transference program so I can become the singularity) Joking aside. If you don't have a will, and/or a trust established, you need to do so asap! It will save your family much trouble, drama, and probably money. For example, if you have multiple properties in other states, there is a tax imposed for transferring the title to a family member that sometimes is so steep the family must sell the property to pay it! This can largely be avoided though if you have multiple properties in a trust... Source: I know lawyers and paralegals who talk about this kind of stuff all the time, and how sad it is when people die without having created a will and all their assets are siezed by the state, and other similar situations. (For example, it depends on the state, but a common misconception is everything you own goes to your next of kin if you don't have a will, such as a wife or child. That's often not true though.)
  • JoblessWonder 9y ago
    There was a website that had nice, clear directions on how to take care of certain things while you are still alive because you never know when something is going to happen. It was called www.getyourshittogether.org. It was started by a woman whose husband died unexpectedly at a young age. Unfortunately it seems to have turned into a weird site driving people to lawyers/life insurance quotes but you can still view the original one on the way back machine: http://web.archive.org/web/20130124012917/http://getyourshittogether.org/ http://web.archive.org/web/20130124012917/http://getyourshit... Their checklists were pretty awesome. Edit: Here is their annual checklist: https://media.npr.org/assets/news/2013/checklist.pdf https://media.npr.org/assets/news/2013/checklist.pdf
    • ravenstine 9y ago
      I saw them once at a job fair back in 2013. I honestly couldn't figure out what they were about. They did an extremely poor job at explaining themselves, and I walked away wondering if they were just a Google Docs ripoff.
• smilesnd 9y ago
  Maybe it is better your code dies with you? If it can't be completed in your lifetime why should next generation suffer?
• Havoc 9y ago
  I don't. I've made sure family know which brokers my money is with. Everything else can crash & burn.
• xab9 9y ago
  I had been thinking about it for quite some time, but nowdays I think I don't care. Whatever will be, will be - but I live alone and my github projects are totally worthless. Maybe I'm growing bitter with the years, but I think that the Internet is an abstract concept - it doesn't exist, it's just bytes and bits.
• cdbattags 9y ago
  Anyone use Google's service for this? https://myaccount.google.com/inactive https://myaccount.google.com/inactive
• m_fayer 9y ago
  Not exactly an answer to your question, but I have one folder in my inbox called "biographaphical" where I archive any personal communication, even the mundane stuff, but not bills and invoices and alerts. I plan to set up something to archive that folder somewhere accessible, together with various chat logs. This is intended to be the digital equivalent of the "box of letters in the attic", which anyone who survives me and is sufficiently interested can access. I decided to do this when looking through old letters and realising that the digital era can, if we're not careful, put an end to the possibility of going through the correspondence of the deceased, which would be a real loss.
• corbett3000 9y ago
  I use Dashlane for this purpose and have provided my wife access...the way it works is she only gets access if her request is not denied by me after 72 hours. Presumably on death, she requests access and 3 days later has control over my accounts.
• goblins 9y ago
  Having no talent and no achievements I have no plans for this. My only wish is my browsing history dies with me.
• snambi 9y ago
  Who cares about software and github repositories after death? I certainly don't.
• icc97 9y ago
  I keep a free wordpress.com blog assuming it will last longer than me. Further to that I have my keepass password manager with the master password written down on paper. Then my spouse has access to my email and knows from keepass all the accounts I have. I'm not sure what to do about domain names. I guess they'll just lapse and free up for the next in line with my name. I think twitter and Facebook accounts should be nuked. I've never said anything important there.
• Razengan 9y ago
  wow, I had been meaning to ask something similar on HN for a while, and was still figuring out how to best word the question. Basically: How do you make sure the effort that you put into building something for the long-term, isn't wasted and forgotten when you die, especially if you're kind of a loner and have no friends/family who would care about it?
• synthmeat 9y ago
  You're probably cloning repos of dead people all the time. We all do.
• deleted 9y ago
  [deleted]
• username223 9y ago
  The public stuff gets mirrored by the Internet Archive, so it will hang around after I stop paying for hosting, even if a bunch of URLs break. If it disappears from the world, so be it. I would honestly prefer that my social media profiles disappear entirely, but I'm fine if they just become stale and forgotten. The private stuff like bank accounts should be hackable for someone with access to my computer. That's not particularly pleasant -- like digging through a dead man's pockets -- but the important parts will be worth the trouble.
• NamTaf 9y ago
  I'm not nearly interesting enough to anyone besides myself for anything that doesn't already have a controlled exfiltration path to need one. My assets will go to various parties if/when I drop off and the rest of it is so uninteresting that it'll probably just be thrown out after collecting dust for a few years.
• VESvault 9y ago
  Well, I'm biased because it's my company, but we use VESvault CloudDash matrix for this. It allows you to encrypt, organize and share critical information to specific people or a team. You can set up an "entity" which can be a family, business, team etc. Each entity has it's own matrix - rows are people, columns are apps or items that you create. For each cell, you can deposit critical information such as passwords and then selectively share it with each person. For example, you can create your bank as an app, deposit your banking information and share or not share it with each person in the entity. If you don't share it, even it you die everything is organized and can be retrieved if you properly set up the VESrecovery function. So your personal stuff is encrypted and protected, and yet it is shareable and recoverable. www.VESvault.com
  • corrigible 9y ago
    What happens if you go out of business?
    • VESvault 9y ago
      The way I read that question is that nobody should use any app or cloud service that has personal information for fear that it will go out of business. In this regard, CloudDash is no different than any other service. Of course, you can always print everything out and put it in a drawer as a backup to address that concern.
• gkya 9y ago
  I don't have social media profiles. Only HN and Reddit, where the latter is unimportant, and the former, well, nothing needs to be done. Any digital asset worthy of a look are in my computer (and in a separate backup drive). All my personal data resides in a special volume, which is mounted at a directory under root path, and almost everything under $HOME is a symlink to a directory in this volume, or in some cases a symlink to a directory symlinked to another directory in that volume. At the root of the volume there's a Readme.org file, which lists all the important paths. Among tens of gigabytes of data, there's actually a few megabytes worth saving: all my notes (agenda, research, etc.) and writing (blog, research, literary stuff), all of which conveniently are located in a specific tree, most if not all in Org mode format; and my bits of code, should I produce a project of importance in the coming years. I use pass(1) and gpg to encrypt lost of stuff, including passwords, all of which is better never recovered. This was not a personal "doomsday" plan (given also I'm still in my twenties), but it all emerged naturally from the normal way categorisation and hierarchy among files and directories work. And I recently added that Readme.org file to formalise the fundamental bits of such hierarchy and categorisation. But I do reflect on, from time to time, things like "what would happen if Fernando Pessoa encrypted his $HOME?"
  • EADGBE 9y ago
    You know what I'd love to do if my child/sibling/father/mother passed away? Learn how Unix works.
  • futuretro 9y ago
    Your decision to stay away from social media, any reason for that? I ask this only because for someone in your twenties, the pressure to get on social media must be extremely high.
• chrishn 9y ago
  Been thinking about this as I setup web hosting for my clients sometimes. Suppose I'd need some way of getting someone to transfer ownership of the web hosting account to the client in case something happened.
• pknerd 9y ago
  I am more interested regarding Crypto Management..should one share 2FA and Private Keys etc with the spouse?
  • fyfy18 9y ago
    Print everything out and seal it in an envelope with instructions for them to "open this when I die". If you don't trust them enough, give the same thing to a lawyer.
• ggm 9y ago
  Many online soft purchases made with a unique mailbox I own but the rhs@lhs.org domain I own also. So.. when I'm gone the ownership of the email identified will vest with who gets my domain. The IPR lawyers hate this and want to say "no no no you can't vest rights in those MP3s with your son" but they're going to struggle to show a loss of continuity in the licenced holder. Personal domain be powerful tool.
  • 0T-T0 9y ago
    I'm curious, how do you make sure the domain ends in the right hands? Can you put it on your will and will the registrar respect that?
    • ggm 9y ago
      I think the transfer of the domain as a heritable use is arguably stronger than licenced IPR. but you're right to question the assumption. Worst case my heirs can use my keystore to open the registry account, unlock the domain and transfer it to themselves for fee if need be.
    • ggm 9y ago
      It was a thin forest of hits in google btw. So, not a field which is well ploughed. So my assumption the domain is heritable is probably moot. But, what I really meant is that its an artifice which makes it significantly less likely an IPR licence through an email account falls fallow: The domain possession means my heirs can ensure the rhs@lhs.com always responds, so they can do password recovery and ID checks through email to satisfy they "own" the account. Obviously if it falls back to real-world ID checks, they're hosed. I didn't mean to imply what I do is intruding a legal mechanism to acquire IPR by transfer. The law says I bought exclusive use, for me and regards the MP3 licence to use as a thing which dies with me. The email chain is going to say "yep.. this mailbox responds when you ask for money" and so the issuing MP3 licence issuer is going to say "I see no interruption in service to the identity I apparently sold the IPR to" so whilst in law, I'm still breaking the law, in practice, I don't think people are going to know. Then, when the new owner subscribes to an 'all you can eat' MP3 service which scrapes the id3 info and says "your tunes are in me" the music will be re-identified, and I suspect their permanency will be enshrined through that agency, even if they terminate the rental agreement: most of the ones I used let you use a one-time bulk downloader to get back the tunes you uplifted by signature. Its not me@lhs.com. its a generic like sharedmusic@lhs.com or music@lhs.com or family@lhs.com btw. (and I wish it was lhs.com)
• seltzered_ 9y ago
  FWIW, https://www.deadmansswitch.net/ https://www.deadmansswitch.net/ has been mentioned on HN in the past.
• toephu2 9y ago
  Reality check: after you die no one really cares about your stuff or is going to look through your social media photos.
  • gkya 9y ago
    Many artists have become famous after posthumous publications, at times of stuff never published in their lifetimes.
  • rotub 9y ago
    I have one dead person on my Facebook now. For the first couple of years she would be awkwardly wished a happy birthday by some of her "friends" who obviously didn't even know she had died.
• lolikoisuru 9y ago
  I won't because I'll be dead.
• zaarn 9y ago
  Atm I guess what would happen is that some of my servers would keep running for a few weeks and then shut off. Most of my data is synced but encrypted, only I know the password. My family would be unable to access any of my data (including the linux ISOs and art collection), I'm not sure if there would be any interest. My biggest concern would be that my digital hoard would be lost, some of the data I have stored isn't available on the internet anymore. Would be a shame to loose it. Maybe I should set something up with my family to ensure continued existence of my hoard.
• bryanrasmussen 9y ago
  hmm, I wonder what I could sell my digital identity for in the case of my death. There should be a market for this. /wry cynicism over
  • jerrre 9y ago
    Maybe sometime in the future you can donate it to science like your physical remains? Or even to living people, like organs?
• andruby 9y ago
  I have a family 1-password account that I share with my wife. In our shared vault I have 2 secure notes: 1 that explains the process of how to unlock my 1-password vault, and another note that highlights which of the +200 accounts are important. That last list only contains about 20 accounts, some financial, some work related. For difficult technical recoveries, I've listed the name of trusted people that can help her. We've gone through the notes together so she knows what to do. Inviting my parents is the next step.
• wizche 9y ago
  I do the same using the "digital inheritance" feature in SecureSafe. https://www.securesafe.com/ https://www.securesafe.com/
• b5 9y ago
  I work on the basis that nearly nothing I have is of much value when I die. I aggressively prune my data on an ongoing basis as I'm doing it. Any bill over store years old, I delete; any unflagged email over three years old, I delete. I'm keen to proactively reduce the overhead of dealing with this stuff myself and for those I leave behind. I keep very little in the way of ephemera, and generally scan important letters and shred/recycle the originals. I store all of my logins in pass[1], and have the store synced in Dropbox. My will has the password for my GPG key and my Dropbox in it. I realise that's a potential security hole, but the copies are sealed and held at home and with a trusted friend, so I consider it relatively minimal. I also print out all of the important photos I've taken. It's a pretty low-tech solution, but it's a proven one: I have albums and photos from both sets of grandparents and great-grandparents precisely because a hardcopy photo doesn't need software to use. [1]: https://www.passwordstore.org/ https://www.passwordstore.org/
• BetsyLC 9y ago
  Digital assets are only part of the legacy; there are electronic records and financial documents that need to be collected. Electronic records are maintained by over 100 agencies and these records were created with a variety of keys. Once the Letter Testamentary is issued, the estate administration can begin their tasks. First steps may be removing, marking or locking records belonging to the deceased. These exit activation procedures help prevent identity theft.
• objectiveariel 9y ago
  Here's a framework and protocol for handling your digital assets after your death: https://arielelkin.github.io/articles/digital-estate-planning https://arielelkin.github.io/articles/digital-estate-plannin... TL;DR: You need a digital estate planning protocol that is comprehensive, privacy-preserving, reliable, and convenient. The best solution is to use a secret-sharing scheme. The following sequence is suggested: 1. Alice encrypts her digital testament using a symmetric encryption algorithm, splitting the key according to a secret sharing scheme. 2. Alice publishes the encrypted testament. 3. To each executor, Alice gives one of the shares of the encrypted key. If you use a password manager, this is equivalent to giving each of your executors a slice of your password. Feedback welcome :-)
• wizzerking 9y ago
  I use forever.com FOREVER™ isn't like other photo storage services. We're focused on providing you with a permanent digital home that will last for generations. It's like insurance for your photos.™ I just put the address in my letters to my brothers, and my son so they know where to find the things.
• BetsyLC 9y ago
  Planning with Legacy Concierge may be step one. Build an electronic vault with its app and/or enter lots of information in a secure encrypted location. Use the contents of the vault upon death. Post-death activities involve the court, an estate administrator (usually an attorney) and a personal representative with fiduciary duties. By law, the fiduciary cannot impersonate the user; the Revised Uniform Fiduciary Access to Digital Assets act (RUFADAA) makes this very clear. Each state has its own version of RUFADAA. To be continued.
• Kostchei 9y ago
  If you are interested in transferring digital data with privacy without having to provide your descendants an ever-changing password... you could use "YourDigitalFile"- which uses keysplits, a nomination process (who receives your file after death or incapacitation) and an escrow. *disclosure- I work for YDF. As our founder came to learn- and this inspired him- sometimes it is important and no-one knows how to get access. https://www.yourdigitalfile.com/data-legacy/ https://www.yourdigitalfile.com/data-legacy/
• DELETTHIS 9y ago
  I keep a set of Google recovery passwords printed on paper. Everything else online is tied to this email plus a draft mail with some offline passwords and instructions. But as the top comment mentioned - nobody cares.
• yasinaydin 9y ago
  I was asking this question to myself lately and started working on some flow: https://raw.githubusercontent.com/yasinaydin/yasinaydin.github.io/master/md/yasinaydin-security3.png?token=ABUNXaU4Fu9wr_fSSnk8m7LN86fNifSbks5arWsIwA%3D%3D https://raw.githubusercontent.com/yasinaydin/yasinaydin.gith...
• i4i 9y ago
  I recently contacted Archive.org to ask if they had a "time-capsule" option... could I upload now and have it made public in xx years. They don't, but I wish they did. Not so much for friends and family but thinking that there may be some historical value to my archives in the future.