Security After Death -- Not your problem, or is it?
summary
A practical how-to: a browser password store with no master password lets an executor extract hundreds of credentials (one case recovers ~385). Use a full-featured vault (KeePass, LastPass, Dashlane), enable MFA (Google Authenticator or YubiKey), and keep TOTP seeds inside the vault. For recovery create shares with Shamir's Secret Sharing so that only a two-of-three quorum reconstructs the master (each share is same length as the secret). Note public breaches: 2017 ~230M, 2016 ~539M leaked passwords; treat central vaults accordingly and use local/cloud backups.
AI-written summary · about
chapters (12)
- 0:00Start
- 1:44Problem Definition
- 3:51Super Federation
- 4:06Storing your passwords safely - Key Rings & Password Managers
- 5:45Feature - Password Policies
- 6:58Random Password Generation & MFA
- 9:19Features you might want
- 12:21Top 3 Open Source Password Managers Reviewed
- 16:22Secret Sharing Generic
- 17:29Shamir's Secret Sharing (SSS)
- 23:00Walk Through
- 23:47Conclusion
related talks
31mAuthentication Afterlife: the dark side of making lost password recovery harder
26mHow To Keep A Secret
29mBehind Closed Doors: Managing Passwords in a Dangerous World
30mBehind Closed Doors: Managing Passwords in a Dangerous World
32mPasswords are so 1990
30mhunter2: A Symphony of Password Horror
01h 02mA reasonable guide to security practices
47mPasswordless Web