A privacy-first vault for memories, letters, and encrypted assets — released to your loved ones only when verified conditions fire. A dead man's switch. A quorum of trusted hands. The choice is yours.
Compose a letter, attach a file, mark a beneficiary. Your master password derives a key locally via PBKDF2; content is sealed with AES-256-GCM. The ciphertext never leaves your machine unless you choose to export it.
A dead man's switch releases the vault if you stop checking in. A multi-party consensus requires M of N trusted custodians to attest before the seal breaks. Combine both for layered safety.
When a deadline passes — or enough custodians come forward — the vault becomes UNLOCKABLE. At that point, your beneficiary presents their claim code and the contents decrypt in their browser.
Unlock shares are split with Shamir's Secret Sharing — no individual custodian can release the vault alone, and missing shares do not lose the secret as long as the threshold is met. The bundle is exportable; you decide where it lives.
Each entry is encrypted at rest. Check in regularly to keep your dead man's switches from arming.
Walk through four steps. Everything is encrypted before it ever touches storage.
Re-enter your master password to seal this vault. It will derive the encryption key locally; the password itself is never stored.
If a vault has been left to you and its conditions have fired, enter the vault ID and the claim code you were given.
This password derives the key that protects every vault you create. It is never stored anywhere. If you forget it, no one — including us — can recover it.
Required to perform this action. The password stays in memory only for the duration of this session.
—