Questions, answered honestly

No. Your data is encrypted on your own device before it's ever saved. Our servers only ever hold scrambled data we have no way to read — that's what "zero-knowledge" means. There is no server-side decryption path in the product at all.

Yes. Anyone who reached our servers would find only encrypted blobs and no keys to open them. The keys never leave your device.

AES-256-GCM for data, Argon2id for turning your passphrase into a key, and a 24-word BIP-39 phrase for recovery — all via open-source, audited libraries. The full detail is on our Security page.

We could only ever hand over what we hold: ciphertext and the metadata needed to run the service. We cannot decrypt your vault for anyone, because the keys exist only on your devices.

Your account password signs you in — it's a normal login. Your vault passphrase is separate and unlocks the encryption itself. Signing in shows your vault exists; only the passphrase can open what's inside.

Your 24-word recovery phrase unlocks your vault and lets you set a new passphrase. That's exactly what it's there for — keep it somewhere safe, like with your important papers.

Because only you can open your vault, only you can recover it. If both are lost, your data can't be restored — not by us, not by anyone. We're upfront about this because it's the trade-off that keeps your vault truly private.

Yes. After 10 minutes of inactivity the key is wiped from memory and the vault locks. You can also lock it instantly from the sidebar.

You name the people who should receive your information and invite them by email. They create their own account — your keys are never sent to them or to us.

Only who invited whom and a signup link. No vault content ever travels by email — the email system physically can't read your data.

Yes, at any time, from the Beneficiaries or Trustees section of your vault.

Nothing right now. Every feature is free for everyone while we grow — no credit card, no time limit, no catch.

No. You can create a vault and start saving what matters right away — just an email address.

No. Passwords, assets, documents, wishes, unlimited beneficiaries and trustees — it's all unlocked for everyone, with the same zero-knowledge encryption.