The Dead Man's Switch
Sovereignty without succession is a time bomb. How to ensure your people can get in when you're gone, without creating a backdoor an attacker can use while you're alive.
TL;DR
The unspoken failure mode of self-custody is you. If you die or are incapacitated and nobody else can open the system you built, sovereignty becomes the thing that ruins your family. A real dead man's switch grants access on your death and not before, using layered mechanisms (multisig, Shamir, sealed instructions, timelocks) and a one-page document of last resort. Build it, rehearse it, update it.
What you'll be able to do
- ▸Draw a complete succession inventory of your assets and infrastructure.
- ▸Choose between trusted multisig, Shamir, sealed-envelope, and on-chain timelock based on real tradeoffs.
- ▸Design a tiered plan (immediate, recovery, cold) that no single person can abuse.
- ▸Write a one-page document of last resort that explains the map without leaking the keys.
- ▸Rehearse the plan annually with the people who will have to execute it.
Prerequisites
- ·You self-custody at least some material assets or operate infrastructure others depend on.
- ·Comfort with seed phrases, hardware wallets, and multisig basics.
- ·A relationship with an estate or trust attorney in your home jurisdiction, or willingness to start one.
Threat model
Your own death or incapacity, plus the dual risk that any succession mechanism powerful enough to rescue your heirs is also powerful enough to be abused by a co-signer, fiduciary, attacker, or coerced family member while you are alive. The whole design is the balance between those two failures.
Every guide in this manual teaches you how to close a door. This one is about the door you forgot you locked. You self-custody your keys, you run your own nodes, you compartmentalize your identities, you keep your seed phrase out of every cloud on earth. Then a truck runs a red light, or a clot finds the wrong artery, and the system you built becomes a sealed vault that your spouse, your kids, your business partner cannot open. The sovereignty you spent years assembling becomes the thing that ruins them.
This is the failure mode the sovereignty community talks about the least and loses the most to. It is not a hypothetical. There is a measurable, growing pile of self-custodied capital in this world that will never move again because the only person who knew how is dead.
The fix is not "give someone your seed phrase." That is the lazy answer and it creates a live backdoor an attacker, a creditor, or a future bad actor in your own circle can use today. The fix is a real dead man's switch: a succession architecture that opens only when you are gone, and only to the people you chose, and not before.
By the end of this guide you will be able to draw your own succession map, choose between the four real mechanisms (trusted multisig, Shamir, sealed envelope with attorney, on-chain timelock), design a tiered plan that does not collapse if any single person turns hostile, and rehearse it with the people who will actually have to execute it.
Sovereignty without succession is not sovereignty. It is a time bomb pointed at the people you love.
§ 01
The two failure modes.
Every succession plan is balanced between two opposite ways to get it wrong. Most people get exactly one of them right and congratulate themselves.
| Failure mode | What it looks like | Who pays |
|---|---|---|
| Locked vault | You die. Nobody can recover keys, accounts, or hardware. Estate freezes. Crypto is gone. Server fleet rots. Lawyers spend years not finding things. | Your family, your business, every cause you cared about. |
| Live backdoor | You handed someone a working copy of your seed, your password vault, or your 2FA tokens. They have it today. So does whoever steals their laptop or coerces them. | You. Now. Probably without knowing for a while. |
§ 02
Inventory: what actually needs succession.
Before you choose mechanisms, you list the assets. Most people underestimate the surface by an order of magnitude. The inventory is the work. Mechanisms are easy once the list is honest.
§ CHECKLIST, The succession inventory
The point of this list is not to memorize it. The point is that you will look at it and realize half of these have no succession plan at all today, and the other half have one that runs through a single Post-it note in a desk drawer.
§ 03
The four real mechanisms.
Every workable succession scheme is built from one or more of these four primitives. Each has a specific failure profile. There is no universal best. There is a best for your assets, your jurisdiction, and your people.
| Mechanism | How it works | Who can collude against you | What breaks it | Maintenance |
|---|---|---|---|---|
| Trusted multisig (2-of-3, 3-of-5) | Keys distributed to people or institutions; a quorum signs to move funds. You hold enough keys to operate solo while alive. | Any quorum-sized subset of co-signers acting together. | Co-signers losing keys, dying before you, or being unreachable in the recovery window. | Annual key-health check; rotate on life events (divorce, new partner, death of a co-signer). |
| Shamir / SLIP-39 shares | A secret is split into N shares; M shares reconstruct it. Distribute shares to people, vaults, jurisdictions. | Anyone who quietly assembles M shares without your knowledge. | A share-holder hoarding shares; losing more than (N-M) shares; bad implementations that leak the secret during reconstruction. | Periodic audit that each share-holder still has their share and has not duplicated it. |
| Sealed envelope + attorney / fiduciary | Physical or encrypted instructions held by a regulated third party, released on proof of death or incapacity per your written instructions. | The fiduciary, or anyone who compromises their controls. | Fiduciary going out of business, getting hacked, or interpreting your instructions creatively. Subpoena risk. | Review instructions every 1-2 years; confirm the firm still exists and still holds your packet. |
| On-chain timelock / inheritance contract | Smart-contract or covenant-based: funds become spendable by your heir's key after N months of inactivity from yours. | Whoever holds the heir key, once the timelock matures. | Bugs in the contract; you forget to ping the clock and trigger early release; chain-specific risks. | The 'I am still alive' heartbeat. Miss it and the clock starts. |
§ 04
A reference architecture.
Here is one defensible shape. It is not the only shape. It is the one I would hand a peer who asked me to sketch something on a napkin. Adjust the tiers to your asset mix.
- STEP 01
Immediate-access tier (hours to days)
What your spouse or partner needs to keep the lights on this week. Operating cash in a joint account, the password vault master and recovery kit in a sealed envelope in a home safe, a short written note explaining where the other tiers live and who to call.
This tier is the one most plans get wrong by either making it too rich (it becomes the backdoor) or too thin (your partner cannot pay the mortgage for three months).
- STEP 02
Recovery tier (weeks)
The bulk of liquid assets, accessed through a 2-of-3 multisig or 3-of-5 Shamir. Keys or shares are distributed across: your spouse, a trusted sibling or friend in a different jurisdiction, an attorney or fiduciary, and a geographically separated personal vault. No single person in that list can act alone. No two people who see each other at Thanksgiving form a quorum.
- STEP 03
Cold tier (months, only on death)
Long-horizon holdings and the entity-level keys (trust, holding company, foundation). Sealed instructions with the fiduciary, released only on certified proof of death or court-ordered incapacity. Optional on-chain timelock as a backstop if the fiduciary disappears.
- STEP 04
The document of last resort
One physical, signed document. It contains no keys, no seeds, no passwords. It contains the map: what tiers exist, who the players are, how to reach them, the order of operations, and the name of the attorney who holds the sealed packet. Stored in your home safe and with the attorney. Updated when anything material changes.
- STEP 05
The rehearsal
Once a year, you sit down with the people in the recovery tier and walk the plan end to end without actually moving funds. They have to be able to describe what they would do if you did not wake up tomorrow. If they cannot, the plan does not exist yet.
# IF I AM GONE OR INCAPACITATED # Last updated: 2026-__-__ Signed: ____________ ## 1. CALL FIRST Attorney: ____________________ firm: ____________ matter #: ______ Co-signer 1: ____________________ relationship: __________ ph: ______ Co-signer 2: ____________________ relationship: __________ ph: ______ ## 2. IMMEDIATE TIER (this week) Joint operating account at: ______________ acct: ________ Home safe combo is held by: ____________ and ____________ Password vault recovery: sealed envelope inside the safe ## 3. RECOVERY TIER (weeks) Quorum: 2 of 3 from the people listed above Vault location: ____________________________________ Procedure: see sealed packet held by attorney ## 4. COLD TIER (only on death, months) Trust: _________________ trustee: _________________ Holding co.: _________________ registered agent: _________ Long-horizon assets: see sealed packet ## 5. DO NOT - Do not post anything about this online. - Do not contact exchanges before the attorney does. - Do not move funds before quorum is confirmed.
§ 05
Verification: the dry-run drill.
A succession plan that has never been tested is a story you tell yourself. The verification step is non-optional. Run it annually and after any life event (marriage, divorce, birth, death of a co-signer, change of attorney, major asset reshuffle).
§ CHECKLIST, The annual dry run
§ 06
What this does NOT protect against.
✓ PROTECTS AGAINST
- +Total loss of self-custodied assets on your death or incapacity.
- +Your family being locked out of the systems your daily life runs on.
- +Any single co-signer, fiduciary, or family member acting unilaterally.
- +The chaos of a multi-month probate where nobody knows what exists.
✗ DOES NOT PROTECT AGAINST
- −Coerced heirs. A quorum under duress is still a quorum.
- −Forced-heirship rules in civil-law jurisdictions that override your wishes.
- −Tax events on transfer. Inheritance is a taxable moment in most places.
- −Co-signers turning on each other after you are gone.
- −An heir who is technically incapable of executing the recovery, regardless of how clean the document is.
- −Jurisdictional conflicts when your assets, your heirs, and your fiduciary live in different legal systems.
- −The slow drift problem: a plan that was perfect in 2024 and that you have not touched since.
§ 07
Going further.
CAPITAL · CUSTODY
Self-Custody Without Self-Destruction →The custody discipline this guide assumes you already practice.
CAPITAL · STRUCTURE
How the Wealthy Actually Hold Their Money →Trusts, holdings, and foundations: the legal vehicles your cold tier will live inside.
JURISDICTION
The Life No Single Country Owns →Cross-border estates are harder. Know the terrain before you architect the plan.
§ REFERENCES