The $5 Wrench Attack, Revisited

XKCD made it famous: no amount of encryption survives a $5 wrench and someone willing to use it.

If an attacker physically coerces you — at gunpoint, with a kidnapping, through threats to your family — you WILL give up your password. This is the correct response. Your life is worth more than any amount of money.

But what if the password you give them isn't the real one? What if entering a specific password triggers a completely different set of actions?

The Duress Password Concept

A duress password is a secondary credential that, when entered, performs a pre-configured set of defensive actions while appearing to grant normal access.

What the attacker sees: Normal login, app opens, data appears What actually happens behind the scenes:

  1. Local sensitive data is wiped and overwritten
  2. A pre-drafted emergency alert is sent to your trusted contacts
  3. Your ZeroLatch dead man's switch is immediately triggered
  4. Location data or a distress signal is transmitted
  5. A decoy dataset is displayed (small balances, fake documents)

The attacker believes they have your real data. They don't. And help is already on the way.

Building a Duress Response with ZeroLatch

While ZeroLatch doesn't currently have a built-in duress password feature, you can architect a duress response using its core mechanics:

  1. Set an aggressively short check-in interval (12-24 hours) when traveling to high-risk areas
  2. Pre-draft a duress vault containing: • "I am being coerced. Contact [lawyer] at [number] and [family member] at [number]" • Your known travel itinerary and last known location • Instructions for initiating a missing persons report
  3. If detained or kidnapped, simply do nothing — the switch triggers automatically

The beauty of a dead man's switch is that inaction IS the trigger. You don't need to smuggle a message, remember a code, or perform any action under duress. Your absence activates your protection.

For high-net-worth individuals in travel-heavy roles, this isn't paranoia. It's insurance.