Dead Man’s Switch

A dead man's switch is a mechanism that automatically performs a predetermined action when the operator fails to provide a regular "I'm still here" signal. The term comes from physical controls on trains and machinery that halt the equipment if the operator becomes incapacitated. In the digital and Bitcoin context, it is software that waits for a periodic check-in and, if that check-in does not arrive within a defined window, executes instructions you set in advance — a message sent, a file decrypted, a location revealed.

The concept forces an uncomfortable but healthy question that many self-custodians quietly avoid: what happens to your coins if you are suddenly not here to manage them. A seed phrase locked in your head or a safe is perfectly secure against thieves and perfectly inaccessible to your family, and those are the same property viewed from two opposite sides. A dead man's switch is one attempt to resolve that tension without ever handing your keys to a custodian while you are alive. It is not the only answer, and as the cautions below make clear it is often not the best one, but confronting the question it raises — how continuity survives you — is valuable regardless of the mechanism you ultimately settle on.

Why self-custodians consider one

True self-custody creates a hard problem. If your keys are known only to you, your death or sudden incapacitation can lock your Bitcoin away from your heirs forever — the same properties that make a seed phrase and a hardware wallet resistant to seizure make them resistant to inheritance. A dead man's switch is one approach to continuity. Configured carefully, it might release recovery instructions to a trusted party, surface the location of a backup, or trigger another safeguard only after you have been unreachable for a meaningful period. The appeal is that it needs no ongoing action from anyone but you during your lifetime, and no third party ever holds your keys outright.

Design cautions

A dead man's switch is only as trustworthy as its design, and the failure modes cut both ways. Too short a timeout risks a false trigger during an ordinary absence — travel, hospitalization, a lost phone — prematurely disclosing sensitive material. Too long a timeout delays legitimate recovery when it is actually needed. Any party or service that can be triggered also becomes part of your threat model: whoever or whatever holds the payload could be compromised, coerced, or simply go offline, and premature release of key material is itself a catastrophic, irreversible failure. A switch that lives on someone else's server inherits all of that server's risks, including the risk that the operator shuts it down without warning.

What the payload should contain

A well-designed switch rarely reveals a key directly. More often it discloses partial information that is useless on its own — the location of a backup, one share of a split secret, or instructions that only make sense combined with something an heir already holds. This keeps a premature or intercepted trigger from being fatal: an attacker who forces the switch to fire early still learns only a fragment. Encrypting the payload to a recipient's own key, so only they can read it, is another layer that limits the blast radius of a compromised trigger service.

Sturdier alternatives

Because of these fragilities, many sovereign Bitcoiners prefer inheritance schemes that do not depend on an always-on external trigger. Time-locked transactions can make funds spendable by an heir only after a future block height, with no third party required to fire anything. Multisignature setups can distribute keys among trusted parties or geographies so that no single loss is fatal and no single actor can act alone. These approaches encode the safeguard in Bitcoin's own consensus rules rather than in a script that must keep running for years. A dead man's switch touches both inheritance planning and operational security; weigh it against these more robust designs and against plainly documented need-to-know recovery instructions. This is general education, not legal advice — an estate that includes bearer assets deserves a professional review.