upvote
This is what I do too, but be warned about “fire proof” - a fire that results in the total loss of your house will create enough heat for enough time that fireproof gun safes and smaller fireproof lockboxes will be destroyed, or even if not, their contents will get hot enough to combust anyway.

A bank safe deposit box offers a different security profile that’s probably more robust against fire because banks burn less often than houses.

It’s probably not practical to really be robust against fire without being buried several feet deep.

reply
Just went through this. Sample size one:

While the fire resulted in the total loss of the house it was actually the water from the fire department not the heat that did proportionally more damage.

As a mental model you shouldn’t think of it as “what if my house burns down?” so much as “what if strangers roll up to my windows and chainsaw through my roof and spray 50,000 gallons of water in here?”

Yes everything in the mechanical room melted but everything in the rest of the house got hot, smoky, soaked and then moldy.

For root of trust materiel like social security cards, cash, passports put in a ziplock bag in a fireproof, waterproof safe. But for other storage I use clear “Ezy Storage” brand stackable 50L tubs labeled with Homebox QR codes. In the US, Target and Home Depot frequently stock them. I am very anti black and yellow tubs.

The majority of work post-fire goes to itemizing your house inventory for insurance. Even cataloging all your bathroom’s soaps by brand name rather than generic can make $100 difference. Multiply that by 500x different things.

From a threat model perspective I look at rooms from a “what would be salvageable in here if I emptied a swimming pool’s worth of water from some fire sprinklers”. Furniture and TVs are easy to replace. Other stuff less so.

reply
This is very interesting and will inform changes in how I secure some items. Thanks for the new perspective.
reply
https://en.wikipedia.org/wiki/2025_Gelsenkirchen_heist

In December 2025, items worth an estimated €30 million were stolen from a Sparkasse bank in the Gelsenkirchen suburb of Buer, Germany. The thieves used a large drill to break into the bank's underground vault and proceeded to crack over 3,000 safe deposit boxes.

reply
Don’t need events that extreme. Regular branch banks have stuff go missing from the safety deposit boxes shockingly regularly. The locks aren’t particularly secure and various people are able to access them. It can be hard to find articles about them because they don’t make the news like the more remarkable incidents do. Examples of boring security box failures (but that were noteworthy in other ways so they did make the news): Jennifer Morsch, Roberta Glassman, Lianna Sarabekyan (multiple customers affected), Philip Poniz, Wells Fargo in Cape Coral FL, Wells Fargo Katy TX (many customers affected, blamed on road construction down the street), lots of individual stories where banks just totally stopped following their own procedures on ID checking and logging.

The vast majority of these don’t make the news because there’s no proof there was even anything inside the box in the first place so anyone could be lying.

> Mr. Pluard, who tracks legal filings and news reports, estimates that around 33,000 boxes a year are harmed by accidents, natural disasters and thefts.

> Oddly, the bank returned to him five watches that weren’t his. “They were the wrong color, the wrong size — totally different than what I had,” Mr. Poniz said. “I had no idea where they came from.”

https://archive.is/j8e6x

reply
deleted
reply
Another solution is to engrave your secret on something that’s stable up to household fire temperatures.
reply
A real innovation from the Bitcoin world! There are several physical password store systems that they have suggested for this kind of use case. The simplest is basically using a nail to punch out a password onto a piece of sheet metal.
reply
Articles such as https://blog.lopp.net/metal-bitcoin-seed-storage-stress-test... will help you pick among the various seed stores out there.
reply
Additionally hardware wallets which can use a seed to generate huge variety of keys.

Including AGE keys (so you can encrypt arbitrary data), SSH keys, FIDO2 and passkeys.

Additionally you might want to store a hardware wallet in a deposit box instead of the seed (if you trust the security model).

reply
And so we return to our programming-roots with punchcards. :p
reply
Just make sure that the metal you use has a high enough melting point.
reply
Tungsten, perhaps.
reply
do you store stuff in a bank? could you tell me more about it? my account gives me access to one for free and been meaning to put a yubikey there for a while but never have
reply
Safe deposit boxes are not safe. There are many stories of peoples stuff going missing.

ex: https://www.cbc.ca/news/safety-deposit-box-protection-1.7338...

https://archive.is/www.nytimes.com/2019/07/19/business/safe-...

reply
What if you RAID01 it, so you have four safety deposit boxes, two with the first half of your password, two with the second half of your password? Then no snoop at a particular bank would be able to get your password, but also if one or two go missing, the password won't be lost. And you just check all four boxes once or twice a year to make sure everything is good.
reply
Maybe not safe for valuables. What about stuff that has no value to anyone else? I'm not a villain from Ocean's Eleven, no one is stealing my passwords to break into my elaborate safe.
reply
What I found out when I was burgled, was that they don't care. I had nothing valuable in my firesafe but they still took it wholesale. I found some papers from it drifting around outside afterwards like they had dumped it out. But not my passport or SSN card. The lock was even broken so they could have just opened it to see that and saved themselves the lift. But again, they don't care.
reply
deleted
reply
I do. I have a small safe deposit box in my local branch for about $1 a year.

It's great if you want to store some documents. But don't expect _real_ security. It's guarded by a minimum-wage employee, and the keys are usually laughably insecure. Banks know this, so they cap their liability for the loss of the deposit box at around $1000.

So don't even think about storing gold bars there, like they do in movies.

There _are_ companies that provide safe storage for high-value items, but they are pretty exotic.

reply
that's... a really good perspective to have, thanks for sharing!
reply
Floor safes do better than above-ground safes.
reply
This. A physical safe provides something that you can't do digitally: It's hard, but not impossible to get in without credentials.

On the internet, it's either: Public for anyone in the whole world, or impossible to recover if anything goes wrong.

reply
I've broken into Physical Safes using nothing more than a drill with a half inch bit (I was young and didn't want to drag myself to harbor freight to sacrifice a more suitable tool). Enough boreholes and I had access.

In hindsight, looking harder for the key would probably have been fruitful.

reply
Nothing says you cannot trivially encode the paper password. Those in the know understand that you need to append “BoomShakalaka”, replace “A” with “Q”, or some other super simple modification to what is recorded.

Maybe the NSA would be willing to brute force the infinite variations from that starting seed, but it is still effectively locked for mortals.

reply
I've thought about making a "word search" and embedding the passphrase in it using a pattern (e.g., a subset of a Knight's tour, a space-filling curve overlay, or some other sampling algorithm).
reply
https://www.passwordcard.org/en

I used to keep a password card in my wallet and had a pattern I would use.

reply
Alternative - my partner and I (and also two other close contacts) have password managers that contain each of the other one's secret. This was less an effort to help with the memory loss scenario and more of an effort to deal with death and access to services (especially to cease subscriptions and the like).

In a lower trust scenario you could probably use a lawyer as a broker of the secret (potentially even as part of a will).

reply
Password managers like bitwarden also have emergency access features which can do this, with the caveat of trusting them to enforce the requirement of access only being granted after a notification to the account holder is not denied in some time period (but unlike the lawyer you're not trusting them with the secret directly)
reply
Apple has this thing called Legacy Contact which allows the same but then built in to the whole Apple account. This includes devices as well as the iCloud ~~and attached keychains. Granted, it is another hoop to jump through compared to presharing keys with each other.~~

It would be nice if your Apple account could be unlocked with some other keys as well apart from the primary one, but I guess that is what Apple calls the “Legacy Contact Key”.

Edit: okay so the keychain is excluded from this. So back to storing each others passwords in eachothers keychain…

reply
I didn't know about bit warden doing this until today! I definitely have to look closer into it, been using 1password for more than a decade and I keep being disappointed. I'd definitely like off-sourcing this to someone instead of building it myself
reply
this is honestly a very pragmatic solution. the amount of life-long relationships i've seen vanish overnight has got me to reconsider my choices when it comes to single points of failure.

I like the idea of the lawyer, unlike normal people, they like sticking to their promises.

reply
In general whatever kind of backup plan you have for when you die could also work in this scenario, you may just need to think harder about anything that you do not want have revealed when you die.
reply
sometimes simpler is the best. I am always on the move so vaults don't jive well with me. my concern would be for something to still happen to it, too. I'm trying to go by the principle of not putting all my eggs on one basket.
reply