eljojo

Combining Shamir Secret Sharing with age-encryption and WASM-web apps, to provide an easy and safe mechanism to vault and split data safely among friends to be recovered in case of emergency.

i didn't roll this crypto, using hashicorp and age

use the webcam, you put the QR in front of the webcam, there has to be a library for this

hey, this is a great idea! I'll link into your app from my readme. I really like that the PDF contains the entire dataset, not just the keys. I see lots of little details around organizing the PDFs, like document hashes, etc, very nice job!

Since you wrote it in Rust, I'd suggest compiling it to wasm and releasing a browser-based version

great story :')

i tell my friends about it, so they remind me in case I lose my memory

I don't have timelock encryption, but have been looking into integrating https://docs.drand.love/docs/timelock-encryption/#use-cases

thanks for your thorough review and congrats on your launch! for my personal use case, I'm not worried about coercion, but many have highlighted it as a real risk. my answer to that is to do what you suggest: update my contact list yearly, send new ZIP files with bundles, and ask them to delete the previous ones.

"who has five friends?" has been the number one comment I've received on this, by far. a bubble just popped for me

lol i'm so neurodivergent i had to read this 5 times to understand 3M didn't just get into the encryption business

I've been so tempted to try out the apple password manager, I'm fully vested in their ecosystem, but the lock in is too big for me to feel comfortable with.

This is the sort of stuff that terrifies me https://hey.paris/posts/appleid/

that's... a really good perspective to have, thanks for sharing!

ayyyyyyyyyyyy lmao 100%

also RIP bash.org found out thru you :(

you know, I've always thought that "If I know I have something... somewhere, but I don't know where that thing is is, I have effectively lost it"

services going offline is a big concern for me! that's why my solution is offline first, I like the idea of the encrypted backup living in my friend's email inbox and working entirely without internet. a true hard copy.

for the time lock mechanism, how do you go about it? I'm interested in exploring using drand time lock, but that also relies on the service continuing to run (which is admittedly very likely) https://github.com/drand/tlock

I didn't know about bit warden doing this until today! I definitely have to look closer into it, been using 1password for more than a decade and I keep being disappointed. I'd definitely like off-sourcing this to someone instead of building it myself

this is honestly a very pragmatic solution. the amount of life-long relationships i've seen vanish overnight has got me to reconsider my choices when it comes to single points of failure.

I like the idea of the lawyer, unlike normal people, they like sticking to their promises.

do you store stuff in a bank? could you tell me more about it? my account gives me access to one for free and been meaning to put a yubikey there for a while but never have

sometimes simpler is the best. I am always on the move so vaults don't jive well with me. my concern would be for something to still happen to it, too. I'm trying to go by the principle of not putting all my eggs on one basket.

you're completely right! the app actually guides you on some of that, it generates a readme that gives you advise on what to document, but I agree you can't be too careful here, the passwords IS NOT ENOUGH.

You need to give people "a map" of where things are: https://github.com/eljojo/rememory/blob/main/internal/projec...

oh hey, nice timing! good name too, I see we're both on the same wavelength there. I'll link you from my readme!

no way!!!! I searched for a long time for a solution like this, many could encrypt using shamir but none took an actual file with browser upload and easy UX. and like, 14 years ago? my hats down to you my friend.

my zip bundles are 1-2 megabytes due to all the wasm, and you achieved this on so little. impressive job!

I'd love to hear what you think about mine, one of the differences is that it creates a ZIP file containing the recovery app in it, as well as a PDF with instructions for non-technical friends. Overall trying to make the recovery experience as smooth as possible.

but cheers, your version is the only one that I found that does basically what mine does, all the others fall short one way or another!

I don't use Google :(

my stomach turned into a knot just reading your story. I know that feel of waking up surrounded by nurses not knowing what happened. I'm so glad you had proper backups!!!!!!!!!!

this exact story is why i built my app, thank you so much for sharing.

my hope is to basically make a next version of your plan that's distributed among friends.

asking the real questions here

that's so scary though! what if someone has access to it? or it gets lost when you need it?

exactly! my hope is to offload some trust to the collective of my friends

yes! I am starting to do some planning on that myself, that's why I'm in that kind of mindset. If you know more people in this space, please share this with them! would love to get feedback

ohhhh that's brutal haha! for context my app runs entirely clientside, but I get it, it's an interesting idea...

i’ve had a few concussions from biking accidents over the years. every time i recover fine, but every time i also think: what if next time i don’t? what if i can’t remember how to log into my own machines?

the obvious answer is “give my 1password to my partner”. but that turns one human into the single point of failure for my whole digital life. that felt… wrong.

so i built something i call *ReMemory*.

it’s basically a digital safe.

you put some files in it (password manager recovery codes, notes, whatever), and 5 friends each hold a key. any 3 of them together can open it. none of them can open it alone.

the part i’m weirdly proud of: they don’t install anything. they just open a file in a browser and it works. no server, no account, no setup, no “install this tool first”.

links if you’re curious:

- https://eljojo.github.io/rememory/ (browser version + guide) - https://github.com/eljojo/rememory (source) - https://github.com/eljojo/rememory/releases/latest/download/... (this shows exactly what friends receive and how recovery looks)

i’m not trying to pitch this as a product or anything. i mostly want to know:

how are you handling this today?

safe? lawyer? printed notes? one trusted person?