Dead switch.
A vault that stays shut until you stop checking in. Encrypted on your device. Released only by silence.
Active · waiting for check-in
Releases on silence — not on request.
It opens when you go quiet.
Three steps. No account. The server never sees the words, the passphrase, or the keys.
- 01
Encrypt here
Title and message are sealed with Argon2id and AES-GCM before upload.
- 02
Check in
A private link rolls your deadline forward. Miss it and the vault opens for your recipient.
- 03
They unlock
After it triggers, they open it with their unlock link and the shared passphrase.
What you can seal.
A template is only a starting point. The vault holds whatever you write, plus files encrypted the same way.
Last letter
A personal message that stays sealed until you stop checking in.
Recovery codes
Backup codes for accounts, held for someone you trust.
Seed phrase
Wallet words or key material, sealed with its own passphrase.
Executor notes
Where papers live, who to call, and what to do first.
If unreachable
A plan for when you cannot be reached for a stretch of time.
Files
Attachments are encrypted on your device, the same way as the message.
How long it waits.
You set the clock. Nothing opens because someone requested it.
- 01
Check-in interval
You choose the gap, often 7, 14, or 30 days. Each check-in rolls the deadline forward and retires the old link.
- 02
Grace period
After a missed check-in, an extra wait can run before the vault opens. You set how many days.
- 03
Travel mode
A longer interval for a trip, so a flight or a dead phone does not open the vault.
- 04
Time-lock
An optional calendar date. The vault can also wait until that moment, not only until silence.
Why people use it.
No account
A passphrase and a private link. Nothing to log into, and nothing for us to reset.
Encrypted first
The title, the message, and the files are sealed in the browser before upload.
Silence, not a request
It opens because you stopped checking in, not because someone asked.
A witness can stay blind
You can notify someone when it triggers without giving them a way to read it.
What can go wrong.
A lost passphrase is gone
We never see the message, so we cannot recover it. Share the passphrase only with the person who should open it.
A missed check-in still counts
If you forget, the grace period is the only pause. After that, the people you named can open it.
Not a will
This is not legal, medical, or financial advice, and a triggered vault is not proof of death.
Email can fail
Release depends on the note reaching your recipient. Keep the unlock link somewhere they can find it.
One vault is free. The next one is paid.
The first vault for an email is free. Each later vault from that same email is $12, paid once. There is no subscription.
First vault
$0
- One recipient
- Encrypted message
- Check-ins and a grace period
- A dry-run test
Comfort, once
$2–$5
- Extra recipients · $3
- Encrypted files · $3
- A time-lock · $2
- Travel mode · $5
Another vault
$12
- Same email, next vault
- Paid again for each one after that
- The email address alone does not open it
What we never see.
Create your vault- Passphrases never leave the browser
- Titles are encrypted like the message
- Check-in tokens rotate after every ping
- Unlock needs a recipient token and the passphrase
- The payload stays withheld until the vault triggers
- An HMAC check runs before anything decrypts