Questions, answered honestly

No. Your data is encrypted on your own device before it's ever saved. Our servers only ever hold scrambled data we have no way to read — that's what "zero-knowledge" means. There is no server-side decryption path in the product at all.

Yes. Anyone who reached our servers would find only encrypted blobs and no keys to open them. The keys never leave your device.

AES-256-GCM for data, Argon2id for turning your passphrase into a key, and a 24-word BIP-39 phrase for recovery — all via open-source, audited libraries. The full detail is on our Security page.

We could only ever hand over what we hold: ciphertext and the metadata needed to run the service. We cannot decrypt your vault for anyone, because the keys exist only on your devices.

Your account password signs you in — it's a normal login. Your vault passphrase is separate and unlocks the encryption itself. Signing in shows your vault exists; only the passphrase can open what's inside.

Your 24-word recovery phrase unlocks your vault and lets you set a new passphrase. That's exactly what it's there for — keep it somewhere safe, like with your important papers.

Because only you can open your vault, only you can recover it. If both are lost, your data can't be restored — not by us, not by anyone. We're upfront about this because it's the trade-off that keeps your vault truly private.

Yes. After 10 minutes of inactivity the key is wiped from memory and the vault locks. You can also lock it instantly from the sidebar.

You name the people who should receive your information and invite them by email. They create their own account — your keys are never sent to them or to us.

Only who invited whom and a signup link. No vault content ever travels by email — the email system physically can't read your data.

Yes, at any time, from the Beneficiaries or Trustees section of your vault.

No. You can create a vault and start saving what matters right away — no credit card required, and the free plan never expires.

No — every plan gets identical zero-knowledge encryption. Paying unlocks more features (assets, documents, unlimited beneficiaries), never more security.

Nothing is deleted and nothing is ever decrypted by us. Sections beyond your plan's limits become read-only until you upgrade again.

Billing is handled entirely by Stripe's hosted checkout and billing portal — we never see or store your card details.