DEV Community

GitHubOpenSource
GitHubOpenSource

Posted on

LastSignal: Secure Your Digital Legacy with a Self-Hosted Dead Man's Switch

Quick Summary: 📝

LastSignal is a self-hosted, end-to-end encrypted dead man's switch that automatically delivers messages to trusted contacts if the user becomes unresponsive. It prioritizes security with a zero-knowledge architecture and modern cryptography, allowing users to configure check-in intervals and delivery delays.

Key Takeaways: 💡

  • ✅ LastSignal is a self-hosted, email-first dead man's switch for securely delivering encrypted messages.

  • ✅ It features end-to-end encryption and a zero-knowledge architecture, ensuring privacy and data control.

  • ✅ The system uses a robust email check-in and reminder flow, with an optional trusted contact verification step.

  • ✅ Developers gain full control and auditability by self-hosting, built on modern Ruby on Rails and strong cryptography.

  • ✅ Strong passphrases are critical for message security, as the system is designed for maximum user control over encryption.

Project Statistics: 📊

  • Stars: 444
  • 🍴 Forks: 8
  • Open Issues: 1

Tech Stack: 💻

  • ✅ Ruby

Ever wondered what happens to your important digital information, photos, or messages if something unexpected happens to you? In our increasingly digital world, securing your digital legacy is more crucial than ever. This is where LastSignal comes in, offering a powerful and reassuring solution: a self-hosted, email-first dead man's switch designed to deliver your encrypted messages to the people you care about, automatically, if you stop responding to check-ins.

At its core, LastSignal operates on a simple, yet robust, email-based check-in system. Once set up, the system periodically sends you emails to confirm your activity. Think of it as a digital heartbeat. If you miss a check-in, LastSignal doesn't jump straight to delivery; instead, it initiates a series of reminder emails at a fixed interval, giving you ample opportunity to respond. Should these reminders go unanswered, a final reminder can trigger a ping to a trusted contact you've designated, adding an extra layer of verification before any messages are sent.

The true power and peace of mind with LastSignal lie in its formidable security model. It boasts end-to-end encryption, ensuring that the server never sees your plaintext messages. This isn't just a claim; it's built on a zero-knowledge architecture, meaning even the operator of the LastSignal instance cannot read your data. It leverages modern cryptography, including Argon2id for key derivation, XChaCha20-Poly1305 for authenticated encryption, and X25519 for key exchange, making it incredibly robust. As developers, the auditable nature of the code is a huge plus, allowing us to inspect and verify its security claims ourselves. It's crucial, however, to use strong, unique passphrases for your recipients, as this directly impacts the security of your encrypted messages.

For developers, the self-hosted aspect of LastSignal is a game-changer. You maintain complete control over your data and the system itself, removing reliance on third-party services for such a critical function. Built with Ruby 3.4+ and Rails 8, using SQLite for the database and libsodium for cryptography, it's a modern, well-structured application. Deployment is streamlined with Kamal, making it accessible to get up and running. This level of control, combined with its robust security and transparent operation, makes LastSignal an incredibly appealing project for anyone looking to ensure their digital wishes are honored, providing a unique blend of technical elegance and profound personal utility. It's a project that truly empowers you to manage your digital afterlife on your own terms.

Learn More: 🔗

View the Project on GitHub


🌟 Stay Connected with GitHub Open Source!

📱 Join us on Telegram

Get daily updates on the best open-source projects

GitHub Open Source

👥 Follow us on Facebook

Connect with our community and never miss a discovery

GitHub Open Source

Top comments (0)