# Weird terms and conditions for the cloud storage offered by my bank.

**URL:** <https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [March 2, 2014, 5:05pm UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680 "2014-03-02T17:05:15Z")\
**Posts on this page:** 10\
**Page:** 3

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [March 5, 2014, 8:56am UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/41 "2014-03-05T08:56:24Z")

</div>

> [@Quercus](#):
>
> 1. If you store information in your house, it won’t help if you die in a house fire while at home. Consider some kind of off-site storage for critical info (like the existence list, perhaps?).

Agreed.

> [@](#):
>
> 1. On the other hand, if your wife is computer illiterate, why are you worried about storing your passwords and such at home, or even in an envelope you give her?

Not sure I understand the question - I’m working on the assumption that she would be able to use the passwords/instructions with the assistance of a trusted friend, but if we write them all down and put in an envelope, this is susceptible to loss or theft.

---

<div class="post-metadata">

**Author:** ![SciFiSam](https://avatars.discourse-cdn.com/v4/letter/s/47e85d/32.png) [@SciFiSam](https://boards.straightdope.com/u/SciFiSam)\
**Post date:** [March 5, 2014, 9:51am UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/42 "2014-03-05T09:51:02Z")

</div>

> [@Princhester](#):
>
> Your post makes no sense whatever, sorry. Firstly it’s not common (indeed it is positively rare) to buy cars on lease here either. Total non sequitur. Secondly you are explaining that its’ not that simple to transfer ownership of a car. Exactly. So having to get Uncle Fred involved so that he also has to sign forms and produce ID and whatever the heck else helps how exactly?
> 
> Sorry this has become a complete hijack, I’ll stop now.

I mean that it’s not that simple dead or alive, and having an executor wouldn’t change that.

Anyway, since even the govt’s money advisory service advises not having your spouse as the sole executor, I’m clearly not talking out of my arse here.

---

<div class="post-metadata">

**Author:** ![SpaceDog](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spacedog/32/9932_2.png) [@SpaceDog](https://boards.straightdope.com/u/SpaceDog)\
**Post date:** [March 5, 2014, 11:22am UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/43 "2014-03-05T11:22:24Z")

</div>

Just as another idea, Google offers a solution to this (if you don’t mind setting up a Google account) [Inactive Account Manager](https://support.google.com/accounts/answer/3036546?hl=en).

Basically if you don’t log into your account for X months it gives your trusted contacts access to data that you want them to have (and then nukes the account some months later). The only issue being it’s not quick to grant access but neither are most other ways of accessing peoples stuff (on or offline) after they’ve died.

There are other services that will auto-email a secure secret after you fail to check-in for a set period of time. I don’t have links to hand and don’t have time to find 'em now but they’ve been mentioned before – try searching [Lifehacker.com](http://Lifehacker.com) as well, they’ve covered this a couple of times.

---

<div class="post-metadata">

**Author:** ![Disgscen](https://avatars.discourse-cdn.com/v4/letter/d/f05b48/32.png) [@Disgscen](https://boards.straightdope.com/u/Disgscen)\
**Post date:** [March 5, 2014, 3:18pm UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/44 "2014-03-05T15:18:31Z")

</div>

> [@Mangetout](#):
>
> My bank reserves the right to rifle through the files I store there, - if I keep the encryption key alongside the instructions on where to find the encrypted data, the potential exists for one of their staff to gain access to everything
> 
> I think it would work with three sets of data:
> 
> [ol]  
> [li]Encrypted stuff on Skydrive.[/li][li]Instructions in plain text in a document held by my wife (i.e. in saved email)[/li][li]Encryption key in my bank’s cloud.[/li][/ol]

No, I suggest using a file encrypted using **both** a encryption key and a password. Your wife has the key, but no password. The bank (or any other trusted party) has the password, but not the key. You continually have access to both, and can make changes as your circumstances and accounts change.

Your suggestion is similar to mine, but I combine the instructions for your wife with the password–there’s no need for a third set of data.

---

<div class="post-metadata">

**Author:** ![Meurglys](https://avatars.discourse-cdn.com/v4/letter/m/258eb7/32.png) [@Meurglys](https://boards.straightdope.com/u/Meurglys)\
**Post date:** [March 5, 2014, 5:05pm UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/45 "2014-03-05T17:05:51Z")

</div>

Saw [this story](http://www.bbc.co.uk/news/technology-26448158) today and thought of this thread.  
Not directly relevant, but a problem worth avoiding!

---

<div class="post-metadata">

**Author:** ![Miss\_Woodhouse](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@Miss\_Woodhouse](https://boards.straightdope.com/u/Miss_Woodhouse)\
**Post date:** [March 5, 2014, 8:59pm UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/46 "2014-03-05T20:59:46Z")

</div>

[USB drive with padlock.](http://www.amazon.com/dp/B003SHMKHS/ref=gbrc_tit_r-1_1762_25192143?smid=ATVPDKIKX0DER&pf_rd_m=ATVPDKIKX0DER&pf_rd_t=701&pf_rd_s=right-new-1&pf_rd_r=0HCRE6D37P6KXMNS01Z8&pf_rd_i=20&pf_rd_p=1725241762)

Would something like that solve your problem. One person gets the USB drive and one person gets the key code to unlock it?

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [March 5, 2014, 11:57pm UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/47 "2014-03-05T23:57:53Z")

</div>

> [@Disgscen](#):
>
> No, I suggest using a file encrypted using **both** a encryption key and a password. Your wife has the key, but no password. The bank (or any other trusted party) has the password, but not the key. You continually have access to both, and can make changes as your circumstances and accounts change.
> 
> Your suggestion is similar to mine, but I combine the instructions for your wife with the password–there’s no need for a third set of data.

I think I understand this more clearly now - but how does my wife gain access to the encrypted stuff on Skydrive? Is that pre-shared (but still encrypted etc) from the start?

---

<div class="post-metadata">

**Author:** ![Thudlow\_Boink](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/thudlow_boink/32/320_2.png) [@Thudlow\_Boink](https://boards.straightdope.com/u/Thudlow_Boink)\
**Post date:** [March 6, 2014, 12:09am UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/48 "2014-03-06T00:09:14Z")

</div>

> [@Thudlow\_Boink](#):
>
> I suggest hiding it and leaving a treasure map, with a series of clues to unravel and puzzles to solve.

> [@Mangetout](#):
>
> That’s a lovely idea, but anything like that can be solved while I am still around.

I think you have to write the initiating clue in your own blood as you lie dying.

---

<div class="post-metadata">

**Author:** ![Disgscen](https://avatars.discourse-cdn.com/v4/letter/d/f05b48/32.png) [@Disgscen](https://boards.straightdope.com/u/Disgscen)\
**Post date:** [March 6, 2014, 1:21am UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/49 "2014-03-06T01:21:01Z")

</div>

> [@Mangetout](#):
>
> I think I understand this more clearly now - but how does my wife gain access to the encrypted stuff on Skydrive? Is that pre-shared (but still encrypted etc) from the start?

Yeah you could share it, or put the access information in the note on the bank’s cloud.  
Really there are any number of ways you could do this, and I’m not certain what I haven’t explained well–I’ve tried to be pretty general because I like Dropbox and TrueCrypt, but other solutions probably work just as well. But here’s how _I_ would do what you seem to want to:

1. Create a software key using TrueCrypt’s keyfile generator. Save this for myself, with another copy on a thumb drive, which I give to the wife.

2. Create archive MySecrets.tc with TrueCrypt, saved on Dropbox, using the keyfile I generated earlier plus a password: abc123. If my wife doesn’t have a Dropbox account, create one and share MySecrets.tc with this account.

3. Save a text document in the bank’s cloud to be given to the wife on death:

Dearest Shmoopy, If you’re reading this I’m dead. I left an encrypted file with all my website passwords and bank account information on Dropbox. Go to [dropbox.com](http://dropbox.com) and log in as mrsdisgscen/password123. Open the file called MySecrets.tc using TrueCrypt, which is on the laptop (or download it from [truecrypt.org](http://truecrypt.org)). You’ll need the keyfile you can find on the thumb drive I gave you, plus the password:  
abc123

Please delete all the porn before my mother finds it.

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [March 6, 2014, 8:07am UTC](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680/50 "2014-03-06T08:07:13Z")

</div>

Trouble with that (and in practice, maybe not a serious trouble) is that I would have given my bank two of the three things they would need to access the information. Whilst the practical possibility of them cracking the key is probably vanishingly small, it seems like a departure from best practice.

[Previous page](https://boards.straightdope.com/t/weird-terms-and-conditions-for-the-cloud-storage-offered-by-my-bank/682680.md?page=2)
