this post was submitted on 22 Nov 2024
194 points (98.0% liked)
Technology
59589 readers
2891 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Password manager with a delegated access structure is the way to go. If my sister (who I have delegated to) requests access, provides a death certificate,and waits some cool-off period, she gets access to the portions of my password vault I designate. I will grant her access to my financials upon death, but not social media and private stuff.
Versus writing it down and giving it to a lawyer who probably has the same opsec as their 1920s counterpart.
Also are you going to update if every three months when you change your passwords? Writing it down gives only a false sense of legacy access that will likely never end up working
Let’s be realistic here. People ain’t changing their passwords every month, 3 months, even yearly.
It's not recommened to do anyway. So why bother if it's random generated?
A lot of employers require this and people sync up their other passwords or if you're like me, you average a change for many of your passwords every 6months or so simply because you are forced to change since you can't remember the damn thing.
Or ever. As recommended by NIST.
Can you please let us know what password manager does what you said?
Bitwarden has this, you can set your next-of-kin and they'll be able to get access. (They have to wait like 2 weeks or so and I imagine all sorts of alarm bells will go off if they try this while you're alive). Might be a premium only feature though idk.
Wait how does that work? I thought Bitwarden couldn't access your passwords, how could they grant a third party access to your passwords without your master password?
my understanding is:
source
It is premium only to configure, but doesn't require premium to execute once configured.
The BitWarden Emergency Access feature is premium-only to setup. And it doesn't have the death certificate/identity verification piece to it, which I prefer not having anyway.
So it's not actually one I would recommend. It's provided as an employee benefit through my company, and I don't particularly like my company having any relation to it at all.l and I don't like the death certificate portion.
I'm moving back to BitWarden, which has a similar feature. It's Emergency Access, in which your delegated person requests emergency access, there is a wait period where you would be getting emails or whatever notifying you of the access request, and if you don't respond within the defined time period, access is granted.
So it removes the identification / death certificate portion, which I greatly prefer. My BW vault ties to an email address that I use only for the password manager, not my legal name or Social Security number, so I'm compartmentalizing pieces of identifying information.
You can self host Vaultwarden, which is essentially self managed Bitwarden.
And the feature can be setup fairly easily.
Okay, but if you’re self hosting it, then die, and the hosting has an issue during that time? You’re SOL.
Don’t try to self host things like a dead man switch.
The likelihood that I die, and my loved ones decide to just turn off the server while knowing it's where the Vaultwarden software lives, before they get access to said Vaultwarden, is very very slim.
Self host whatever you want. Even Deadman switches.
The key is informing your loved ones the requirements for the switch. Just like if they don't know to request access in other Deadman switches.
And if the hard drive goes out?
Cmon, you can’t tell me you’re comfortable with a 2 week “anything could happen” period where all that information could just disappear forever.
I can definitely tell you I'm comfortable with that.
If family doesn't know I'm dead in 3 days, they ain't family.