--- title: "The password that dies with you: access decades later" url: "https://eternalos.com/blog/the-password-that-dies-with-you" description: "Encryption protects a record and seals it just as well. How keys are held over decades decides whether anyone can ever open what was so carefully kept." --- # The password that dies with you: access decades later October 20, 2026·4 min read·EternalOS A daughter sits at her father’s desk with a drive he left her and a note that says, in his handwriting, that everything is on it. He was careful. The drive is encrypted, because he read that it should be. The passphrase was something he could always remember. She tries the names of the dogs, the street he grew up on, the year of his wedding. The password manager that would have told her is itself locked, and its recovery email went to an account that closed with him. The drive is intact. Every byte of it is exactly as he left it. None of it will ever be read. This is not a story about carelessness. He did what the advice told him to do, and the advice was about protecting the material from strangers today. Nobody told him that the same lock would hold against his own family in twenty years. The cause is a mismatch of horizons. Encryption is designed to make access depend on one secret. A record of a life is designed to be opened by people who were never told the secret, at a time nobody can predict. Both are sensible on their own. Put together without a plan for the key, they produce a sealed box that outlives its only key holder. ## How the key goes missing **The passphrase was in one head.** The most common failure and the least visible. Memorable to the person who chose it, unguessable to everyone else, which is precisely what it was designed to be. When that person is gone, so is the only path in. **The device that held it is gone.** Hardware tokens, phones with authenticator apps, a laptop with the keychain. A key tied to one physical object inherits that object’s lifespan, and the object is usually replaced, lost or wiped long before the archive is needed. **The service that managed it has ended.** A password manager, a cloud key store, a recovery flow run by a company. These are services, and services close, change terms or lose the account to inactivity. A key held by a company is a key held for as long as the company. **The format of the key is itself obsolete.** A key is data too. A twenty-year-old encrypted container may need a particular tool, with a particular version, on a particular operating system, before the passphrase is even asked for. Having the secret is not the same as being able to use it. **Nobody knows there is a lock.** The quiet version. A folder of encrypted files looks like noise to someone who does not know what they are looking at. It gets skipped, then deleted, without anyone realising a decision was made. **The rules of access were never written down.** Who was supposed to be able to open this, and when? If the answer lived only in the owner’s intentions, the family has to guess, and guessing is how material ends up either exposed too early or never opened at all. ## What custody over decades looks like **Split the secret, not the record.** A key can be divided so that no single person holds it and a defined number of holders together can reconstruct it. One copy in one head is the problem; three people who each hold a piece, written on paper and stored apart, is a plan. **Name the holders and their successors.** A trusted holder is a person, and people move, fall out of touch, and die. The holders need to be written down, and so does what happens when one of them can no longer serve. Custody that is not reviewed is custody that quietly lapses. **Decide when, not just who.** Some material is meant to be opened at once, some after a delay, some only on a condition. Those timings are a decision the person makes while they are here, and they belong in writing alongside the key arrangement, not as a setting in some interface. **Keep the index in plain text.** Whatever is locked, the map of it should not be. A readable list of what exists, where it is, what is encrypted, and who to ask, lets a future reader know that there is something worth the effort before they have the means to open it. **Encrypt less than you think.** Every lock is a future failure point. Material that does not need protecting from strangers may not need to be sealed at all, and a record that is mostly readable with a small protected part is far more likely to survive than one that is entirely dark. ## A test you can run this week Pick one thing you consider protected: an encrypted drive, a password manager vault, a locked archive. Now write, on paper, the complete set of instructions a relative would need to open it if you were unavailable from tomorrow. Where the files are. What tool opens them. Where the passphrase or key pieces are and who holds them. What happens if that tool no longer exists. Then give the page to somebody and ask them to walk through it without you. Every step where they stop and say “I would have to ask you” is a point where the record currently ends with you. If they cannot get past the first step, what you have is not an archive with a lock on it. It is a lock. This is why a durable record has to be designed around how it will be opened, not only around how it is protected. The same thinking applies to [the accounts most of a life now sits in](https://eternalos.com/blog/your-life-is-in-accounts-that-end-when-you-do), and it is the first half of a harder question: once the record can be opened, [who will be able to tell that it is genuine](https://eternalos.com/blog/who-will-verify-the-record-is-genuine-in-a-hundred-years). At [EternalOS](https://eternalos.com/) the access rules travel with the record and the index stays readable without any account, and how much is encrypted at all, and how the keys are held, is one of the decisions being settled now rather than promised. - encryption - key custody - access - succession ## Keep reading - [Who will verify the record is genuine in a hundred years](https://eternalos.com/blog/who-will-verify-the-record-is-genuine-in-a-hundred-years) - [What Starship changes for keeping records, and what it does not](https://eternalos.com/blog/what-starship-changes-for-keeping-records)