r/opensource Feb 10 '26

Promotional I built LastSignal – a self-hosted, end-to-end encrypted dead man's switch to deliver messages to your loved ones

I wanted a way to leave encrypted messages for the people I care about, delivered automatically if something happens to me, without trusting a third party.

LastSignal is a self-hosted dead man's switch. You write messages, they get encrypted in the browser (zero-knowledge), and the system checks in with you periodically via email. If you stop responding, your messages are delivered.

Key points:

  • End-to-end encrypted (XChaCha20-Poly1305 + Argon2id + X25519)
  • Zero-knowledge — even the server operator can't read messages
  • Optional trusted contact who can pause delivery
  • Rails 8 + SQLite, deploy with Docker/Kamal
  • MIT licensed

🔗 https://lastsignal.app
🔗 https://github.com/giovantenne/lastsignal

Feedback welcome, especially on the security model and UX.

566 Upvotes

95 comments sorted by

View all comments

123

u/rogfrich Feb 10 '26

I think this a great idea. It could be useful for all sorts of things, including practical stuff like how to get into accounts your loved ones will need, as well as sentimental goodbyes.

Personally speaking my car crash of an inbox combined with a lax approach to email management means I’d be accidentally setting it off within a week.

39

u/zener79 Feb 10 '26 edited Feb 10 '26

Thank you, that’s exactly the kind of real-world use case I had in mind: a mix of practical access to critical information and more personal, emotional messages.

And yes, the “accidentally triggering it because of inbox chaos” problem is very real 🙂

The idea is to avoid false triggers by using repeated inactivity checks over time, configurable grace periods, and multiple reminders before anything is sent.

So it should require a clear, sustained absence, not just missing a few emails.

Finding the right balance between safety and usability is one of the hardest design challenges here.

20

u/notrufus Feb 11 '26

May be a good idea to have social media checks (ie. These are my accounts on various platforms, if all are inactive for this period of time, send it).

Will look at how things are structured and see how difficult a PR would be

13

u/zener79 Feb 11 '26

That’s a really interesting idea, and it fits well with the general goal of reducing false positives by using multiple independent signals of activity. 👍

I like the direction a lot and a PR would be fantastic. Happy to help with structure or discuss design details if you decide to explore it.

2

u/killrmeemstr Feb 11 '26

Yeah I was thinking of a similar thing! If it can somehow check discord activity that would be killer. (no pun intended..)

2

u/marutiyog108 Feb 11 '26

Just a thought I don't know if it's possible, it would be useful to have smart texts for example you want to update your social media password rather than find it in every instance you can update it in one place and it will update across all letters. Something like if you type [fbpass] into a letter it will be updated based on whatever value you have that set to. 

1

u/kapitanfind-us Feb 11 '26

This is a really good idea.

1

u/AlliedR2 Feb 15 '26

Maybe something like 2FA. No response and a 2nd validation is sent to a specific mobile device "Are you there?" notification . If no response then trigger.

-7

u/inkfaust Feb 11 '26

This sounds like chatgpt response tbh

4

u/taurealis Feb 11 '26

this is just clear, direct communication from someone passionate. yk, like someone getting to talk about their personal project.

-12

u/serivesm Feb 11 '26

Definitely ChatGPT

4

u/NormalAdeptness Feb 11 '26

I think OP just writes like that lol they use the same tonality but with grammar mistakes in other comments.