Maybe a play off of In case of emergency, break glass with hammer and copy private key: a one-time-only retrieval of a private key at some URL, so when your buddy retrieves it, it triggers an email that goes out to you.
I recently began trusting KeyPass with my credentials.
It uses two mechanisms to protect my details:
- a secret key file (backed up on an usb stick and on dropbox). If you steal my keypass db you need this file as well
- a ridiculously long sentence that I can never forget for various reasons as a passphrase. It's plain text, so probably everything in there is in a dictionary, but - good luck trying to figure this out.
With this set up I'm relaxing now. I know that I ~cannot~ lose access or forget my passwords :)
Me too. But if it has a password on it, you'll be protecting your password with another password. If it's just an obfuscated, unprotected URL, then you're going to have to store the obfuscated URL somewhere safe.
I think this only works if you want to give credentials once to someone while still knowing when those credentials are being given, unfortunately :(
Privnote (https://privnote.com/) can do exactly that. For added bonus, the message is stored encrypted on their servers and decrypted with a key in the URL's fragment.
"We store the notes encrypted in a way that only the sender and receiver know how to decrypt, which means we cannot read the notes sent through Privnote."
