A plug: If you're worried about "lead pipe" attacks, I've set up a simple service for remote-activated duress codes at http://unduress.com http://unduress.com.

A plug: If you're worried about "lead pipe" attacks, I've set up a simple service for remote-activated duress codes at http://unduress.com http://unduress.com. I'm not sure anyone actually uses it, but it passes the tests I've written and it seems to work in practice... It uses GPG for symmetric encryption as per TFA.