Everything your family will need,
in one encrypted place
Six sections, one rule: everything is encrypted on your device before it's saved. Here's what lives inside a vault.
Create your free vaultThe six rooms of your vault
Credentials
Logins, account numbers, and the notes that explain them. Each item is sealed with its own key on your device, so even a single leaked record is impossible by construction.
- Per-item encryption keys
- Organized and searchable
- Decrypted only in your browser
Assets & investments
Property, brokerage accounts, term deposits, super and pensions — with the context your family will actually need: where it is, who to call, what it's worth.
- Any asset, any country
- Encrypted file attachments
- Notes only your people will read
Documents & records
Wills, deeds, insurance policies, and the paperwork that proves things. Files are encrypted before upload; our storage only ever holds ciphertext.
- Encrypted before upload
- Wills, deeds, and policies
- Originals stay yours
Beneficiaries
Name the family and loved ones who should receive your information, and invite them by email. They get an account — never your keys.
- Email invitations
- You choose who sees what
- Revocable at any time
Trustees
Add the lawyers or firms who'll execute your wishes, so the professionals are connected to the plan before they're needed.
- Professional executors
- Clear responsibilities
- Connected ahead of time
Shared with me
When someone shares their vault with you, it decrypts in your browser — the same zero-knowledge rules protect their trust in you.
- Live sharing between vaults
- Decrypted client-side
- Respect on both sides
And underneath it all
The platform features that make the vault trustworthy — most of them invisible, all of them deliberate.
Zero-knowledge by architecture
Encryption happens on your device with keys derived from your passphrase. There is no server-side decryption path — not hidden, not disabled: absent.
Recovery that doesn't betray you
A 24-word recovery phrase is the second — and only other — way into your vault. We can't reset your passphrase, because we never have it.
Auto-lock
Your unlocked vault re-locks itself after 10 minutes of inactivity, and the key is wiped from memory. Lock it yourself anytime with one click.
Invitations without exposure
Invites carry only who invited whom — never vault contents. The email pipeline can't read your data, because nothing readable ever reaches it.
Encrypted attachments
Attach statements, scans, and photos to any item. Files are sealed with AES-256-GCM client-side before they're stored.
Honest by default
We tell you plainly what we can't do — including that losing both your passphrase and recovery phrase means your data is gone. No false promises.
Want the cryptographic detail?
Read the security architecture