Crypto Dead Man’s Switch: How On-Chain Inheritance Works
TimeWill · Updated 2026-09-14
A crypto dead man’s switch is a mechanism that releases access to a wallet if the owner stops checking in for a set period. There are four practical approaches. On-chain dead man switch contracts hold funds and transfer them to a beneficiary address once a heartbeat transaction stops, but they depend on an oracle to confirm a real-world death. Timelock wallets such as Liana and Nunchuk give heirs a recovery path on a schedule. Multisig setups, for example 2-of-3, split control between the owner, a beneficiary and a trusted third party. Shamir’s Secret Sharing splits a seed phrase into shares where a threshold, such as 3 of 5, is needed to rebuild it. None of these can verify a death on their own, and all of them trade convenience against new risks, including premature triggering and coercion of the heir.
Self-custody solves one problem and creates another. Your keys are safe from custodians, and they are equally safe from your own family. A dead man’s switch is the most direct answer: an automatic mechanism that hands over access when you stop proving you are alive. It works, but it is not the same thing as a will, and it fails in ways that are worth understanding before you trust it with your seed phrase.
What a crypto dead man’s switch actually does
The concept is simple. You check in on a schedule, by sending a transaction, logging in or clicking a link. If the check-ins stop for longer than the window you set, the system assumes you are gone or incapacitated and releases encrypted information or moves funds to a pre-defined beneficiary address. The trigger is inactivity, not proof of death, and that single design choice explains most of the benefits and most of the risks.
The four practical approaches
- On-chain dead man switch contracts — A contract holds the funds and transfers them to a beneficiary address if your heartbeat transaction stops. Sarcophagus, for example, encrypts a payload and pays a network to release it only after you fail to attest. Contracts are censorship resistant, but they need funded gas and careful parameter choices
- Timelock wallets — Wallets such as Liana and Nunchuk encode a recovery path into the spending policy, so a beneficiary key becomes usable after a set delay. No third party is involved, but the owner must refresh the timelock periodically
- Multisig arrangements — A 2-of-3 setup gives one key to you, one to your heir and one to a trusted third party. Nothing moves while you are alive, and your heir can act with one co-signer afterwards
- Shamir’s Secret Sharing — The seed phrase is split into shares, and a threshold must be combined to rebuild it. There is no software to trust, but there is also no automatic trigger, so it is usually paired with a letter of instruction
Why the trigger is the weak point
A blockchain cannot read the outside world. It cannot see a death certificate, and it cannot tell a hospital stay from a holiday. This is the oracle problem, and it is why on-chain switches lean on inactivity as a proxy for death. Set the window short and it may fire while you are simply offline; set it long and the estate waits. Most implementations therefore use windows of six months or more, and the more careful ones combine an inactivity trigger with a human confirmation step. If you are weighing an on-chain switch against a platform tool, our comparison of dead man switch vs Google IAM sets out what each can and cannot do.
Shamir’s Secret Sharing in plain terms
Shamir’s Secret Sharing splits a secret into several shares in a way that reveals nothing about the secret until enough shares are combined. Split a seed phrase into five shares with a threshold of three, give them to five different people or places, and any three can reconstruct the wallet while any two reveal nothing. The mathematics is well tested and standardised as SLIP-0039. The failure mode is human: shares get lost, copied, or handed to people who never learn how to combine them.
Multisig: the option most advisers recommend
For holdings that justify the setup cost, a multisig wallet is usually the most robust answer. It removes the single point of failure, it lets you keep control while you are alive, and it gives your heir a defined path that does not depend on one piece of paper surviving a fire. The trade-offs are real: more complexity, more places to make a mistake, and the need to teach your co-signers how to use the wallet before they need to.
Risks you are taking on
- Premature triggering — Any inactivity timer can fire while you are travelling, ill or simply not paying attention. Use long windows and multiple notification attempts before release
- Coercion of the heir — A beneficiary who is known to be about to receive a large amount becomes a target. Time locks and professional fiduciaries give heirs time to act safely rather than under pressure
- Contract and key failure — Smart contract bugs, unfunded gas, lost shares and forgotten PINs all end the same way. Hardware wallets wipe after repeated wrong PIN entries, and no court order can recover a lost seed phrase
What to do alongside the technical setup
Technical succession does not replace the legal layer. Include a clause in your will that covers digital assets and authorises your executor to act, keep the operational details in a separate letter of instruction rather than in the will itself, choose a fiduciary who understands crypto or can hire someone who does, and run a rehearsal every year. Our crypto wallet inheritance guide covers the seed phrase handover, and the crypto inheritance checklist covers what to record. TimeWill (时间遗书) is an encrypted vault that holds your account list, instructions and letters and releases them to a trusted contact through heartbeat check-in, which covers the accounts that no on-chain contract can reach.
Disclaimer
This article is informational, not legal, tax or investment advice. Crypto inheritance tools, wallet policies and the tax treatment of digital assets vary by jurisdiction and change quickly; verify current details with the providers involved and consult a qualified adviser before relying on any technical scheme.
FAQ
Q: What is a crypto dead man’s switch?
It is a system that requires the owner to check in periodically and, if the check-ins stop, releases encrypted information or transfers funds to a designated beneficiary. The trigger is inactivity rather than a verified death, which is both its strength and its weakness.
Q: Can a smart contract know that I have died?
No. A blockchain cannot read off-chain events, so contracts rely on an oracle or on a simpler proxy such as inactivity. That is why most implementations use long windows, often six months or more, to avoid triggering while the owner is simply unavailable.
Q: Is a multisig wallet better than sharing my seed phrase?
For most holders, yes. A 2-of-3 multisig means no single person can move the funds, so giving one key to an heir does not hand over control today. It also removes a single point of failure, at the cost of more setup and the need for heirs to learn how to sign.
Q: What is Shamir’s Secret Sharing and is it safe?
Shamir’s Secret Sharing splits a secret into shares where a threshold is needed to reconstruct it, and any number of shares below that threshold reveals nothing. It is cryptographically sound and standardised as SLIP-0039, supported by some hardware wallets. The risks are operational: shares get lost, stored badly, or heirs do not know how to combine them.
Q: What is the biggest risk of an on-chain inheritance plan?
Premature triggering and coercion. An inactivity timer can fire while you are travelling, ill or simply offline, and a beneficiary who is known to be about to receive a large amount can become a target. Time locks, professional fiduciaries and clear instructions reduce both risks.
References & Notes
Related Guides
Cover the accounts no contract can reach
TimeWill stores your wallet inventory, instructions and letters in an encrypted vault and releases them to a trusted contact when you can no longer check in.
Create free account