About

You write a title and a message, choose a passphrase, and name recipients. CipherSwitch encrypts the title and message on your device before anything is uploaded. The server stores the ciphertext, a salt, and hashes of the check-in and unlock tokens. It does not receive your passphrase or the readable message.

A check-in link pushes the deadline forward and replaces the previous link. If the deadline passes, a grace period can start. When the vault triggers, recipients can request the ciphertext and decrypt it with the passphrase you shared with them. A witness can be notified without receiving a way to open the vault.

CipherSwitch is not a law firm, a bank, a doctor, or an estate planner. It is not a will, a trust, or a substitute for advice from a qualified professional. A triggered vault is not proof of death, and delivery of an email is not guaranteed.

If you lose the passphrase, nobody can recover the message, including the operator of this service. If you stop checking in by mistake, the vault can still open for the people you named.

“CipherSwitch” is the name of this software and of the service you are using. These pages describe that service. They do not create a separate company, and they do not name a registered office. The person or organization that operates the copy you are using is responsible for that deployment.