5 ms·

I'm not sure there's anything a service like this could do to assure me that (1) I can trust them, and (2) that they can actually make the UX of this meaningful

I'm not sure there's anything a service like this could do to assure me that (1) I can trust them, and (2) that they can actually make the UX of this meaningfully better, without compromising security fundamentally. For now, I'm rocking: * yubikeys pre-provisioned with keys given to select family members * sops to encrypt my "will" to those keys * sops-encrypted file hosted on google drive, pre-shared to select family members Luckily I have enough technical family and friends that they would eventually figure out how to run `sops decrypt`. And/or enough funds that they can hire someone if need be. Weakest part here is my BIP39 is not Shamir'd, so a rouge family member could empty my wallet. But I trust them. More than a third party presuming-for-profit service. :( Not to be a party-pooper, it's a neat idea. (edit, s/bip32/bip39/g)

EnthusiastShiv 2y ago
totally understand your concerns, especially with your solid setup using Yubikeys and sops. We're actually adding Yubikey support for end-to-end encryption too, focusing on good UX without sacrificing security. Plus, we're using homomorphic encryption, so your data stays secure while you're alive, so family members could not empty you're wallets. Appreciate your feedback!
- 3np 2y ago
  Are you planning to release source code? Without at minimum client sources matching the builds, all assertions of trustlessness are pretty void. Doing under a free/open-source license would address some further concerns about long-term sustainability (which seems especially relevant here).
  - EnthusiastShiv 2y ago
    We’re exploring the possibility of releasing some source code, but we’re not sure how that will fit into our overall development strategy. Transparency and trust are important to us, and we’ll keep your suggestions in mind as we move forward.
pjkundert 2y ago
Sheesh; no excuse not to back up your BIP-39 mnemonic phrases using SLIP-39 (Shamir secret sharing): https://slip39.com/app https://slip39.com/app
- pjkundert 2y ago
  Furthermore, you can use the same App to SLIP-39 any arbitrary 128-, 256- or 512-bit key in a way that your family can combine their data to recover.
  - nixosbestos 2y ago
    I can't remember why I didn't pursue this, something about the hardware wallets having a way to do the Shamir upfront? In a different way than just sharing the words. Such that each person winds up with 24 words rather than a subset. Anyway, I decided I didn't want to migrate my wallet, so I'll look into this. Arbitrary key support is also interesting. Thanks for the tip!
    - pjkundert 2y ago
      Yes, there are hardware wallets that support SLIP-39 natively; however, the sequence of derived wallets is different than that produced when you take the same seed and save it as a BIP-39 and derive the wallets from the BIP-39 mnemonics. Using the app, we actually produce the SLIP-39 recovery mnemonics from the underlying BIP-39 seed, and since we can recover the underlying seed, we can regenerate the BIP-39 mnemonics, and import that into a standard hardware wallet.

EnthusiastShiv 2y ago

totally understand your concerns, especially with your solid setup using Yubikeys and sops. We're actually adding Yubikey support for end-to-end encryption too, focusing on good UX without sacrificing security. Plus, we're using homomorphic encryption, so your data stays secure while you're alive, so family members could not empty you're wallets. Appreciate your feedback!

3np 2y ago
Are you planning to release source code? Without at minimum client sources matching the builds, all assertions of trustlessness are pretty void. Doing under a free/open-source license would address some further concerns about long-term sustainability (which seems especially relevant here).
- EnthusiastShiv 2y ago
  We’re exploring the possibility of releasing some source code, but we’re not sure how that will fit into our overall development strategy. Transparency and trust are important to us, and we’ll keep your suggestions in mind as we move forward.

pjkundert 2y ago

Sheesh; no excuse not to back up your BIP-39 mnemonic phrases using SLIP-39 (Shamir secret sharing): https://slip39.com/app https://slip39.com/app

pjkundert 2y ago
Furthermore, you can use the same App to SLIP-39 any arbitrary 128-, 256- or 512-bit key in a way that your family can combine their data to recover.
- nixosbestos 2y ago
  I can't remember why I didn't pursue this, something about the hardware wallets having a way to do the Shamir upfront? In a different way than just sharing the words. Such that each person winds up with 24 words rather than a subset. Anyway, I decided I didn't want to migrate my wallet, so I'll look into this. Arbitrary key support is also interesting. Thanks for the tip!
  - pjkundert 2y ago
    Yes, there are hardware wallets that support SLIP-39 natively; however, the sequence of derived wallets is different than that produced when you take the same seed and save it as a BIP-39 and derive the wallets from the BIP-39 mnemonics. Using the app, we actually produce the SLIP-39 recovery mnemonics from the underlying BIP-39 seed, and since we can recover the underlying seed, we can regenerate the BIP-39 mnemonics, and import that into a standard hardware wallet.