Nº 001 · Private by design

Some secrets should outlive you. None should leak.

Encrypt seed phrases, passwords, wills and files on your own device. Split the key into coupons for the people you trust: any three can open it, two learn nothing. If you ever go silent, Legacy makes sure they know what to do.

Seal your first vault, free How it works

Encrypted: On your device
Held by: People you choose
Readable by us: Never

Zero-Trust Vault

Certificate of Custody

Nº ZTV-7F1A-0042

Contents: Sealed, 1 item
Opens with: Any 3 of 5 coupons
Sealed: 05 Oct 2026
Readable by issuer: No

IA3·91
IIC0·4E
III77·B2
IV5D·18
VE9·0C

The method

Three articles. No one to trust.

Everything happens in your browser. The key is created on your device, used once, then destroyed. What remains is a locked file nobody can read, and coupons nobody can use alone.

Seal

Type a secret or drop any file up to 100 MB. It's padded and encrypted with AES-256-GCM in an isolated worker before anything is saved.

Split

The key becomes coupons: hand one each to people you trust. Any three of five open it; fewer reveal nothing at all. Print them as a recovery kit.

III

Recover

Bring the vault and enough coupons. Typos are caught, forged coupons are named and set aside, and it opens, even offline.

Schedule of uses

For what can't be lost, or leaked.

01Crypto that outlives its ownerInheritance
Seed phrases your family can actually recover, without any one of them able to take it early.
02The family emergency fileHousehold
Accounts, policies, the will's location: everything someone would need on the worst day.
03Break-glass credentialsBusiness
Root access split between directors. Two of three can act; nobody acts alone.
04Off the gridField work
Air-gap mode makes the browser itself refuse every network request while you work. Proven, not promised.

Legacy · Pro · Opening soon

Your card expires when you do. Legacy doesn't.

Name the people. Keep living. If you ever go quiet, they receive your instructions, your encrypted vaults and one escrowed coupon, while we still hold nothing that opens anything.

Get early access

Be clear about what depends on us: your vaults never do, but Legacy's automatic emails do, so they need our service running on release day. Give your trustees a printed recovery kit and the offline app as a fallback. Legacy is a technical tool, not a will or legal advice: check what your trustees may lawfully do where you live. Details

Sealed instructionsNº L-0042

To be opened by my trustees

Day 0You check in. Simply opening the app counts.
Day 90You've gone quiet. Weekly reminders begin.
Day 104Grace period ends. No reply.
ReleaseTrustees receive everything you prepared, even if billing has lapsed.

Specifications

Verify, don't trust.

We built this so that we are never the weak point. Every claim below is testable. The security page publishes the file format, names the audited library, and says what we can't protect you from.

Encryption: AES-256-GCM, authenticated. The header is bound to the ciphertext, so altering any byte fails.
Key splitting: Shamir secret sharing over GF(2⁸), via an independently audited library. Forged coupons are identified.
Passphrases: Argon2id, 256 MiB memory-hard (64 MiB on devices that can't spare it).
Hardware keys: WebAuthn passkeys with the PRF extension: Touch ID, Windows Hello, YubiKey.
Isolation: Every key lives in a dedicated Web Worker, out of reach of the page and its extensions.
Hardening: Strict Content Security Policy and Trusted Types. No third-party scripts, no CDNs, no trackers.
Quantum: No public-key cryptography in the format. A quantum computer gets nothing better than brute force.
Longevity: One HTML file that runs offline. If we vanish, your vaults still open. Legacy's automatic emails are the one thing that needs us running.
Trusting the code: A website loads fresh code on every visit, like any web app. To avoid trusting our server at all, download the offline file, check its published SHA-256, and seal with that. See the fingerprint.

Compared

The usual ways people do this.

	Zero-Trust Vault	A note in a drawer	Telling one person
Safe if one copy is stolen	Yes	No	No
Survives losing a copy	Yes	No	No
Nobody can read it early	Yes	No	No
Delivered automatically when needed	Yes	No	Maybe
Works if the provider disappears	Yes	Yes	Yes

Pricing

Security is free. Peace of mind is Pro.

Every cryptographic feature is free, forever. Opening a vault never requires a plan.

Free$0Nº F-000000

Unlimited vaults on your devices
Coupons, passphrase, two-factor, passkeys
Your own Google Drive as storage
Recovery kits, drills, QR scanning
Offline app and air-gap mode

Start free

6060

Pro · yearly$60Nº P-060060

Everything in Free
Unlimited encrypted cloud vaults
Legacy: the dead man's switch
Up to 10 trustees and an escrow coupon
Releases even if billing lapses

Join the waitlist

199199

Lifetime$199Nº L-199199

Everything in Pro, forever
No renewals to forget
Made for estate planning

Join the waitlist

Prices in USD. Secure checkout by Dodo Payments, our merchant of record (tax included). Cancel anytime; your vaults keep working on Free.

Early access

Pro and Legacy are opening soon.

The vault itself is live and free today. Leave your email and we'll write to you once, when Pro and Legacy open, with first access.

Questions & answers

Questions worth asking.

The file format and threat model are published in full. Nothing here is a black box.

Q.Can you see my secrets?

A.No. Encryption happens on your device before anything is stored, and the keys never leave it. Our servers only ever hold locked files, plus, if you use Legacy, your trustees' contacts, your message to them, and at most one coupon, which on its own reveals nothing. The one thing visible is the optional label you type, so never write what's inside it.

Q.What if Zero-Trust Vault shuts down?

A.Your vaults still open. Keep the offline app (one HTML file) next to your coupons: it needs no server and no internet, and the file format is documented, so anyone can re-implement it. The one thing that needs us running is Legacy's automatic emails, so give your trustees a printed recovery kit too.

Q.What happens to Legacy if my payment fails after I'm gone?

A.It still fires. Pro is needed to set up or change a plan, but an armed plan is always delivered. A deceased person's card eventually fails, and Legacy is designed around that.

Q.What if a coupon is lost, or forged?

A.With "3 of 5" you can lose two safely. If someone hands over a tampered coupon, the app tells you which one and opens the vault from the rest. You can re-key at any time to issue fresh coupons.

Q.Has it been audited?

A.The secret-sharing library (shamir-secret-sharing) was audited by Cure53 and Zellic. The app itself hasn't been third-party audited yet, so treat it as beta and keep a backup of anything critical. We'll publish the review on the security page when it happens.

Q.Do I need an account?

A.No. Everything works without one. Sign in with Google, Apple or email only for vaults synced across devices or for Legacy. You can also keep vaults in your own Google Drive.

Q.Does it work on my phone?

A.Yes. Open it in your browser and choose "Add to Home Screen". It works offline, scans coupons with the camera, and supports Face ID and fingerprint passkeys.

Five minutes now. Peace of mind for good.

Seal the one thing your family would need if something happened to you. It's free, and nobody, including us, can read it.

Open Zero-Trust Vault Sign in