Choosing trusted contacts for account recovery

In a threshold recovery scheme, several people each hold a fragment of what is needed to restore access. No single fragment is useful on its own; a defined number of them together are. That number is the threshold — commonly two of three, or three of five.

The point is that no one person can act alone, including someone who compromises one contact's email. Recovery needs several independent people to agree at roughly the same time.

The most common mistake is choosing three people who share a life: partner, and two members of the same household. They are the people you trust most, and they are also the people most likely to be unavailable in exactly the situation where recovery matters — the same accident, the same house fire, the same phone left in the same taxi.

Spread the set. Different households, ideally different cities. One person who is organised and reachable beats two who are emotionally closer but rarely answer the phone.

A contact who means well but changed their email two years ago is not a contact. Before you finalise a set, check that each address is current and that each person knows they have been named and what it means.

Being told in advance matters more than it sounds. A recovery request that arrives unannounced looks exactly like a phishing attempt, and a cautious person's correct instinct is to ignore it.

A threshold of one is not recovery, it is a spare key. A threshold equal to the whole set means any single unreachable person blocks you forever — and people become unreachable, permanently, which is the event this is all about.

Two of three, or three of five, keeps both failure modes at bay: no one acts alone, and one loss does not lock you out.

Relationships end, people move, people die. A recovery set chosen at thirty and never revisited is a recovery set that no longer describes your life.

Look at it when something significant changes, and once a year regardless. It is a two-minute review that quietly protects everything else.