Crypto inheritance: a dead-hand handover that survives you

Self-custody solves the problem of someone else losing your money. It creates a different one: what happens to your crypto when you're gone? If the keys live only in your head and your device, your death takes the fortune with you — and no court, no lawyer, no exchange can recover it. Helix's dead-hand inheritance answers that without the cure being worse than the disease: your keys reach the people you choose, on a trigger you control, and at no point does any single person — including a lawyer — ever hold your seed.

What dead-hand inheritance is

"Dead hand" is an old engineering idea: a control that activates precisely when the operator can no longer hold it. The classic example is the dead-man's switch on a train — let go of the lever and the train stops safely on its own. Applied to crypto, a dead-hand mechanism is one that releases access to your keys when you're no longer there to release it yourself.

The problem it solves is brutal and specific. With a custodial account, your heirs can — eventually, painfully — present a death certificate and probate documents and recover the balance, because a company holds the assets. With true self-custody, there is no such company. The keys are the asset. If your heirs don't have the keys, they don't have anything; the coins sit on the blockchain forever, visible and untouchable, a tombstone with a balance.

The naive fix — write your seed phrase in your will, or hand it to a lawyer — trades a small risk for a catastrophic one. A seed phrase in a will becomes a public court record. A seed phrase held by any single person is a single person who can now empty your wallet today, while you're very much alive. The whole art of crypto inheritance is delivering access after death without creating access before it.

How the handover works

The mechanism rests on two pieces working together: a way to split the secret so no one holds it, and a trigger that decides when to reassemble it.

Splitting the secret with Shamir M-of-N

Rather than handing anyone your seed, Helix splits it using Shamir's Secret Sharing into N shares, with a threshold of M required to rebuild it. You might create five shares and set a threshold of three. Each guardian holds one share. Any three of them together can reconstruct your keys; any two of them — or any one acting alone — learn nothing. Not a partial key, not a hint. Mathematically nothing.

This single property dissolves the dilemma. No individual guardian can betray you, because no individual share is worth anything. Your wealth is not entrusted to a person; it's entrusted to a quorum, and you choose how large that quorum must be and how much redundancy it has. Lose one guardian to a falling-out or a bus, and the others still meet the threshold.

The dead-man trigger

The shares only become useful when the handover is actually meant to happen. Helix gates that with a dead-man trigger: a check-in you periodically satisfy just by using your device. As long as you're present, nothing moves and no guardian can act. If you stop checking in for a defined period — the dead-man condition — the handover process for your guardians is enabled. Combine that with the M-of-N threshold and you get a system that won't fire while you're alive and won't fail to fire when you're not.

Threshold approval as an alternative

Some people prefer not to rely on time alone. The same Shamir machinery supports a pure threshold-approval handover: the keys reconstruct when M-of-N guardians explicitly agree to invoke the handover. Either way, the guarantee is the same — control transfers only when your chosen rule is met, never on the say-so of one party.

Why the obvious alternatives all fail

Before trusting a mechanism this consequential, it's worth seeing why the simpler approaches don't hold up — because most people reach for one of them and discover the flaw too late.

• "I'll write the seed in my will." A will becomes a court document, frequently a public record after probate. You'd be publishing your seed phrase to anyone who reads the filing. Worse, the will may not be accessed for months, during which the document — and everyone who handled it — is a live threat to a wallet that's still funded.
• "I'll give the seed to my lawyer / a trusted person." Anyone holding your full seed can drain your wallet today. You've converted an inheritance plan into a standing back door and a permanent test of one person's integrity, security and discretion — for as long as you live.
• "I'll put the seed in a safe deposit box." Better, but it's a single physical point of failure: lose access, suffer a fire or flood, or have the box accessed by someone with a key, and the plan is gone. And your heirs still need to know it exists and how to reach it.
• "I'll use a custodian so my heirs can recover it legally." Now you've reintroduced exactly the counterparty risk that drove you to self-custody. The custodian can fail, freeze, or be hacked while you're alive — trading a death-planning problem for a daily solvency-and-trust problem.

Every one of these fails the core test: deliver access after death without creating access before it, and without a single point of failure. Shamir-plus-trigger is the only common approach that passes all three at once.

The threat it stops: keys that die with you

An enormous amount of cryptocurrency is already lost forever, and a large share of it is lost not to theft but to death and forgetting — keys that existed only in one person's memory or one undocumented device, gone when that person was. As more wealth moves into self-custody, this becomes one of the defining estate-planning failures of the era: assets that are provably yours on a public ledger and yet permanently unreachable by the family you meant to leave them to.

The failure has a cruel symmetry. The same property that makes self-custody safe — that only you can move the coins — is the property that makes them vanish if "only you" stops existing without a plan. You cannot solve it by weakening custody, because that reintroduces the counterparty risk you held your own keys to escape. You can only solve it by building a survivable custody: one whose access plan is as robust as its security.

Dead-hand inheritance is that survivable custody. It treats your absence as a planned-for state rather than a catastrophe, and it does so without ever lowering the wall while you're alive.

There's also a partial-incapacity version of the same threat that people overlook. Death is the clean case; the messier one is a stroke, an accident, advancing illness, or cognitive decline that leaves you alive but unable to manage your keys. A plan that only triggers on a death certificate does nothing for the family watching assets they can't reach while the holder is incapacitated. A dead-man trigger keyed to your activity — rather than to a legal event — quietly handles this case too: it responds to the fact that you've stopped operating the device, whatever the underlying reason, while a threshold-approval option lets a named quorum step in when circumstances warrant. The mechanism is built around the real continuum of "no longer able to act," not just the single legal moment of death.

Why it matters to estates of size

Crypto holders and whales

If a significant part of your wealth is self-custodied, an undocumented key strategy is an unfunded promise to your family. Dead-hand inheritance turns "I hope someone can figure it out" into a defined, tested handover — without writing your seed into a document anyone can read while you're alive.

Family offices and funds

For an institution, key succession is a governance requirement, not a nicety. Who can reconstitute control of the treasury, under what conditions, with what quorum — these are questions trustees and auditors must be able to answer. An M-of-N Shamir scheme with a defined trigger gives a clean, demonstrable answer: control passes only to a named quorum, only under the agreed condition, with no single point of compromise in between.

OTC desks and principals

A desk whose treasury depends on one principal's keys carries a continuity risk that dead-hand handover directly addresses — the business can survive the loss of an individual without ever having exposed the keys to a standing back door.

How Helix does it

This is the same Shamir engine that powers the self-custody wallet's everyday recovery — the difference is the trigger and the audience. For recovery, the shares are yours to reassemble if you lose a device. For inheritance, they're your guardians' to reassemble when you're gone. One mechanism, two life events, the same guarantee: no single point of failure and no standing back door. And because all of it lives on a device that runs live spyware detection and the full anti-coercion kit, the handover plan is protected by the same shield as everything else in Helix.

Estate planning for crypto isn't about trusting a lawyer with your seed. It's about making sure your absence — and only your absence — opens the door, to exactly the people you named.

Choosing your numbers: M, N and who holds what

The power of the scheme is in the parameters, and choosing them well is the real work. There's no universally correct answer — it's a deliberate trade-off between two failure modes, and naming them out loud makes the choice clearer.

The first failure mode is loss: not enough shares survive to reach the threshold, and your heirs are locked out forever. The defense is redundancy — more total shares (N) than your threshold (M) requires, so a few can be lost, destroyed, or held by people who become unreachable without sinking the plan. If you need three to recover, distributing five or six gives real slack.

The second failure mode is collusion: too few shares are needed, and a small group can gang up to seize your keys before they should. The defense is a high enough threshold that any plausible colluding subset still falls short. If a majority of your guardians would have to conspire to act, casual betrayal becomes impractical.

The art is balancing them. A common shape is something like three-of-five: it tolerates losing two shares (redundancy against loss) while requiring three independent parties to agree (resistance to collusion). Then think carefully about who holds each share — spread them across people and places that don't share a single risk. Don't give two shares to spouses who keep them in the same house, or to colleagues who'd be in the same accident; the math assumes the shares fail independently, so your distribution should make that true. A lawyer or professional trustee holding exactly one share is often ideal: they add a stable, findable custodian to the quorum without ever being able to act alone.

The honest limits

• You must actually set it up and choose well. Dead-hand inheritance is only as good as the guardians and thresholds you pick. Choose guardians who'll keep their share safe and be reachable, and set a threshold that balances "enough redundancy to survive losses" against "high enough that a colluding minority can't act."
• Guardians need to know their role. A share is useless to a guardian who doesn't know they hold it or what to do when the time comes. The mechanism handles the cryptography; you still have to handle the human briefing — ideally documented alongside, not inside, your estate paperwork.
• The trigger window is a trade-off. Too short, and a long off-grid trip risks an unwanted handover; too long, and your heirs wait. Set the dead-man window thoughtfully, and prefer threshold approval if you travel dark for long stretches.
• Coordinate with your real estate plan. Dead-hand handover delivers access; it doesn't write your will or settle questions of who legally inherits what. Treat it as the technical mechanism that makes your legal intentions executable, and align it with your actual estate documents and counsel.

Used well, dead-hand inheritance closes the one gap that self-custody otherwise leaves wide open. It lets you hold your own keys with full conviction — knowing that "your own keys" doesn't have to mean "keys that vanish with you."

That conviction is the real payoff. Many people who understand self-custody perfectly well still leave wealth on a custodian for one unspoken reason: it's the only place their family could plausibly recover the money if something happened to them. They accept counterparty risk every day to buy peace of mind about a single day that may never come. Dead-hand inheritance removes that bargain entirely. You no longer have to choose between owning your keys and protecting your heirs, because the same device that gives you full custody also carries a tested, no-single-point-of-failure plan for handing it on. The wall stays as high as you want it while you're alive, and it opens — to exactly the people you named, under exactly the condition you set — only when you can no longer hold it yourself. That's not a compromise on self-custody. It's the piece that finally makes self-custody complete.

Helix Core $199 · Helix Operator $499 · Helix Sovereign $999 (USD). Shamir recovery, dead-hand inheritance and the self-custody wallet are part of the suite.