The message you hope no one ever needs.
A dead-man's switch for your digital estate. Your note is encrypted in your browser before it reaches us, and released to the person you choose only if you stop checking in.
$5 a month. Cancel whenever — a cancelled plan delivers nothing.
Your switch
Every 30 days · 7 days of grace
All is well.
30 days until your next check-in. Nothing has been sent.
- Day 0Start
- Day 30Due
- Day 37Sent
How it works
Three moments, and only one of them asks anything of you.
Seal your note
Write down the logins, recovery codes, or last words someone will need. It is encrypted with AES-256 in your browser, using a secret key that never leaves your device. We store only ciphertext we cannot read.
Keep checking in
Check in every 30, 60, or 90 days. Miss a check-in and a grace period of 7 or 14 days begins. If that passes too, the switch trips.
Your beneficiary opens it
They get an email with a link to the note, and open it with the secret key you gave them yourself. There is no reset: if the key is lost, so is the note.
Safeguards
A switch that trips by accident is worse than no switch at all.
You set the pace
30, 60, or 90 days between check-ins. Pick the interval you will actually keep, not the one that sounds careful.
A grace period, not a hair trigger
A missed deadline starts a 7 or 14 day countdown. One check-in inside it and everything resets, as though the deadline had never passed.
Delivered once, retried if it fails
Each vault is claimed exactly once, so two runs of the switch can never send the same note twice. A failed send is retried on the next run instead.
A paused plan sends nothing
Without an active subscription your switches pause: no check-ins, and no delivery. Renewing restarts every countdown from that day.
Privacy
Zero-knowledge is a claim about what we are able to do, not a promise about what we choose to do.
Encrypted before it leaves you
AES-256-GCM through the browser's own Web Crypto, with your key stretched by PBKDF2. The server is handed an opaque payload and nothing else.
Your key is never sent
Not in a request, not in a database row, not in a log. That is also the cost: there is no reset link, and a lost key is a lost note.
The link is the whole address
A beneficiary's page lives at an unguessable URL that is kept out of search engines and out of the referrer header of anything it touches.
Write it once, while it is still easy.
The people who will need this cannot ask you for it later. Five dollars a month, and the note is waiting if it is ever needed.
Create your plan