How to Build a Recovery Plan Your Family Can Actually Use
A recovery plan that only lives in your head is not a plan. Making one your family can actually use takes an afternoon, a little honesty, and one dry run to prove it works.
Most people who care about privacy eventually hit the same paradox. You lock your documents and passwords behind strong encryption that only you can open, which is exactly the point. And then one day you realize: if only you can open it, what happens when you cannot? A lost phone, an illness, or worse, and your family is standing outside a door with no handle.
The answer is not to weaken the lock. It is to build a recovery plan that is real rather than theoretical, one your family could genuinely follow without you in the room. That is a different skill from setting up encryption, and it is the part most people skip. Here is how to do it properly.
Key takeaways
- A recovery plan only counts if someone else can run it when you are not there.
- Write the 24-word passphrase down and store it offline, never in a cloud note or email.
- The Recovery Network splits your key among trusted contacts, any 3 of 5 rebuild it.
- Brief your contacts, decide on the Dead Man's Switch, and do a dry run to prove it works.
Step 1: Anchor it with the passphrase, stored offline
Every Kinship Vault has a 24-word recovery passphrase, and it is not just a hint or a backup code. Those words are the master key. Anyone who has them can rebuild the vault on a new device, and anyone who does not cannot. That makes the passphrase the most powerful and most sensitive thing in your whole plan.
So treat it physically. Write it on paper, or use the printed card, and store it somewhere durable and offline: a home safe, a lockbox, with important legal documents. The one thing you must not do is put it in a cloud note, a photo, or an email to yourself, because that quietly undoes the whole point of an encrypted vault.
The passphrase is the master key in twenty-four words. Store it like the key to your house, not like a reminder.
Step 2: Distribute trust with the Recovery Network
Relying on a single written phrase has one failure mode: if it is lost or destroyed and no one else can help, the vault stays sealed forever. The Recovery Network fixes that by spreading the responsibility. It splits your key into five shards, handed to trusted contacts, where any three of the five can reconstruct it.
That threshold is deliberate. Three of five means:
- No single person holds the whole key, so no one contact can open your vault alone.
- You can lose a shard and still recover, because you only need three of the five to come together.
- A contact who is unreachable does not block you, since there is slack built into the number.
Each shard can be a QR code, a small file, or a printed PDF card, so you can hand them out in whatever form suits each person. Pick contacts who are trustworthy, reachable, and ideally not all in the same household or the same disaster zone.
Step 3: Tell your contacts what they are holding
This is the step that turns a technical feature into a plan people can use. A shard sitting in a drawer that a relative does not understand is not much help in a crisis. Have a short, plain conversation with each contact:
- What the shard is (a piece of a recovery key, not a password they can use alone).
- Where they should keep it, and that they should not lose or photograph it into the cloud.
- Who to coordinate with, so that when the moment comes, three of them know to come together.
You do not need to explain the cryptography. You need them to know they hold something important and what to do with it.
Step 4: Decide on the Dead Man's Switch
For inheritance specifically, Kinship Vault offers an optional Dead Man's Switch on iPhone and iPad. It is an inactivity trigger: if you do not check in for a configurable period (365 days by default, with a 30-day grace window), it releases a final shard to the contacts you nominate. While you are active, nothing happens and you stay fully in control. Decide deliberately whether you want it on, and if you do, tell the same contacts what to expect so a release is never a surprise.
Step 5: Do a dry run, then keep it current
A plan you have never tested is a guess. Do a low-stakes rehearsal: confirm you can find the passphrase where you stored it, check that your chosen contacts still have their shards and remember what they are, and walk through, at least on paper, how three of them would combine. It is far better to discover a gap during a calm rehearsal than during a real emergency.
Then revisit it once a year, or whenever life changes: a move, a new phone, a contact you have drifted from. A recovery plan is not a one-time setup, it is a small standing commitment. For the mechanics of getting back in, see how to recover your vault if you lose your phone, and the full picture lives in the recovery documentation.
Build a plan your family can actually follow.
A 24-word passphrase, a 3-of-5 Recovery Network, and an optional inactivity switch, so private never becomes lost.
See how recovery works