223
Put your usernames and passwords in your will, Japan advises (www.theregister.com)
submitted 1 month ago by ptz@dubvee.org to c/technology@lemmy.world
26 comments fedilink hide all child comments

Japan's National Consumer Affairs Center on Wednesday suggested citizens start "digital end of life planning" and offered tips on how to do it. The Center's somewhat maudlin advice is motivated by recent incidents in which citizens struggled to cancel subscriptions their loved ones signed up for before their demise, because they didn't know their usernames or passwords. The resulting "digital legacy" can be unpleasant to resolve, the agency warns, so suggested four steps to simplify ensure our digital legacies aren't complicated:

  • Ensuring family members can unlock your smartphone or computer in case of emergency;
  • Maintain a list of your subscriptions, user IDs and passwords;
  • Consider putting those details in a document intended to be made available when your life ends;
  • Use a service that allows you to designate someone to have access to your smartphone and other accounts once your time on Earth ends.

The Center suggests now is the time for it to make this suggestion because it is aware of struggles to discover and resolve ongoing expenses after death. With smartphones ubiquitous, the org fears more people will find themselves unable to resolve their loved ones' digital affairs -- and powerless to stop their credit cards being charged for services the departed cannot consume.

top 26 comments
sorted by: hot top controversial new old
[-] Vanth@reddthat.com 106 points 1 month ago

Password manager with a delegated access structure is the way to go. If my sister (who I have delegated to) requests access, provides a death certificate,and waits some cool-off period, she gets access to the portions of my password vault I designate. I will grant her access to my financials upon death, but not social media and private stuff.

Versus writing it down and giving it to a lawyer who probably has the same opsec as their 1920s counterpart.

[-] Imgonnatrythis@sh.itjust.works 23 points 1 month ago

Also are you going to update if every three months when you change your passwords? Writing it down gives only a false sense of legacy access that will likely never end up working

[-] fuckwit_mcbumcrumble@lemmy.dbzer0.com 5 points 1 month ago* (last edited 1 month ago)

Let’s be realistic here. People ain’t changing their passwords every month, 3 months, even yearly.

[-] lud@lemm.ee 2 points 1 month ago

Or ever. As recommended by NIST.

[-] Imgonnatrythis@sh.itjust.works 2 points 1 month ago

A lot of employers require this and people sync up their other passwords or if you're like me, you average a change for many of your passwords every 6months or so simply because you are forced to change since you can't remember the damn thing.

[-] Appoxo@lemmy.dbzer0.com 2 points 1 month ago

It's not recommened to do anyway. So why bother if it's random generated?

[-] ramble81@lemm.ee 20 points 1 month ago

Can you please let us know what password manager does what you said?

[-] FierySpectre@lemmy.world 25 points 1 month ago

Bitwarden has this, you can set your next-of-kin and they'll be able to get access. (They have to wait like 2 weeks or so and I imagine all sorts of alarm bells will go off if they try this while you're alive). Might be a premium only feature though idk.

[-] MajinBlayze@lemmy.world 14 points 1 month ago

It is premium only to configure, but doesn't require premium to execute once configured.

[-] Vanth@reddthat.com 13 points 1 month ago

The BitWarden Emergency Access feature is premium-only to setup. And it doesn't have the death certificate/identity verification piece to it, which I prefer not having anyway.

[-] Redex68@lemmy.world 3 points 1 month ago

Wait how does that work? I thought Bitwarden couldn't access your passwords, how could they grant a third party access to your passwords without your master password?

[-] themagzuz 8 points 1 month ago

my understanding is:

  1. the emergency contact sends their public key to the owner of the vault
  2. the owner encrypts the key for the vault using said public key and stores the result on bitwarden's servers
  3. the emergency contact can now request the decryption key from bitwarden, which they will receive either if the vault owner manually approves the request or if the request is not rejected within a certain amount of time
  4. the emergency contact can then decrypt the stored vault key using their private key, and use that to access the vault

source

[-] Redex68@lemmy.world 2 points 1 month ago

Ok I didn't realise the emergency contact had to have a Bitwarden account, that makes sense. Thanks.

[-] Vanth@reddthat.com 10 points 1 month ago

So it's not actually one I would recommend. It's provided as an employee benefit through my company, and I don't particularly like my company having any relation to it at all.l and I don't like the death certificate portion.

I'm moving back to BitWarden, which has a similar feature. It's Emergency Access, in which your delegated person requests emergency access, there is a wait period where you would be getting emails or whatever notifying you of the access request, and if you don't respond within the defined time period, access is granted.

So it removes the identification / death certificate portion, which I greatly prefer. My BW vault ties to an email address that I use only for the password manager, not my legal name or Social Security number, so I'm compartmentalizing pieces of identifying information.

[-] ironhydroxide@sh.itjust.works 1 points 1 month ago

You can self host Vaultwarden, which is essentially self managed Bitwarden.

And the feature can be setup fairly easily.

[-] KairuByte@lemmy.dbzer0.com 9 points 1 month ago

Okay, but if you’re self hosting it, then die, and the hosting has an issue during that time? You’re SOL.

Don’t try to self host things like a dead man switch.

[-] ironhydroxide@sh.itjust.works 1 points 1 month ago

The likelihood that I die, and my loved ones decide to just turn off the server while knowing it's where the Vaultwarden software lives, before they get access to said Vaultwarden, is very very slim.

Self host whatever you want. Even Deadman switches.

The key is informing your loved ones the requirements for the switch. Just like if they don't know to request access in other Deadman switches.

[-] KairuByte@lemmy.dbzer0.com 4 points 1 month ago

And if the hard drive goes out?

Cmon, you can’t tell me you’re comfortable with a 2 week “anything could happen” period where all that information could just disappear forever.

[-] ironhydroxide@sh.itjust.works 2 points 1 month ago

I can definitely tell you I'm comfortable with that.

If family doesn't know I'm dead in 3 days, they ain't family.

[-] drosophila 36 points 1 month ago

This is a symptom of the absolutely insane way digital payments work.

You give a company your card details and they're able to charge whatever they want, whenever they want, by default. That's like paying at a restaurant by handing the waiter your entire wallet and telling them to take out the cost of the meal.

[-] otp@sh.itjust.works 16 points 1 month ago

That's like paying at a restaurant by handing the waiter your entire wallet and telling them to take out the cost of the meal.

Isn't that basically how it works in the US?

[-] sibannac@lemmy.world 7 points 1 month ago

Yes, yes it is. The only deterrent really is the will of the employee to commit fraud and/or a customer noticing. I've had to handle coworkers in the past writing in tips on blank tip lines on the reciepts that the customer signed.

[-] teft@lemmy.world 30 points 1 month ago

Fuck all that. My shit will erase itself if i don’t check in. The family can eat a bag of dicks if they want my data.

[-] AceFuzzLord@lemm.ee 3 points 1 month ago

I can see why people would feel this way, but I would absolutely want a trusted family member that I care about to have access to my data so they could create some sort of digital family memorial of my life if they so choose, for a funeral or just to have in general. I'd personally want family to have easy access to my data so they could easily find any memories they wanna share.

[-] iAmTheTot@sh.itjust.works 9 points 1 month ago* (last edited 1 month ago)

That's just good advice. Personally, I use a password manager.

[-] ptz@dubvee.org 8 points 1 month ago

Yeah. The only complicating factor is there are still some very stupid services that force periodic password changes (or at least I still have to deal with such stupid services with terrible password policies).

this post was submitted on 22 Nov 2024
223 points (100.0% liked)

Technology

60074 readers
3113 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
L3s@fry.gs
L4s@fry.gs
L4s@lemmy.world
enu@lemmy.world