⚙ Admin

Access Control

Manage who can access The Sealed Vault

By signing in you agree to our Terms of Service and Privacy Policy
·

Your vault contents are encrypted client-side.
We never see your passphrase or your documents.

The Sealed Vault

A message hidden by time and secret

The vault cannot be opened before this moment, even with the correct passphrase.

If a trusted person needs access before the unlock date in an emergency, they can bypass the time lock by correctly answering this question — but they will still need the passphrase to decrypt the vault.

Secret Question Secret Answer The answer is hashed with SHA-256 — only its fingerprint is stored, never the raw text.
Attachments
📎
Click to browse or drag & drop files here
PDFs, images, Word docs, Excel — up to 20MB each
No sealed documents found.
Create one in the Seal tab first.
Trusted Recipient
📋 Personal Information Vault Fill in your personal details across all 12 sections, then seal the entire form with encryption.
Section 1
First 48 Hours Guide
Immediate actions and key contacts for the first 48 hours of an emergency.
Emergency Contacts
Professional Contacts
Critical Locations
Section 2
Emergency Medical Snapshot
One-page summary for EMTs or hospital staff.
Basic Medical Info
Physicians
Current Medications
MedicationDoseFrequencyDoctorPharmacy
Section 3
Essential Identification
Personal IDs, employment details, and direct deposit information.
Identity Documents
Employment & Income
Section 4
Medical Directives & Legal
Advance directives, power of attorney, and legal document locations.
Advance Directives
Power of Attorney
Will & Trust
Section 5
Digital Access
Online accounts, passwords, and digital asset locations.
Primary Accounts
Key Digital Accounts
Service / PlatformUsername / EmailPassword / Hint2FA MethodNotes
Devices
Section 6
Financial Assets
Bank accounts, investments, and retirement funds.
Bank Accounts
Bank NameAccount TypeLast 4 DigitsBranch / PhoneBeneficiary
Investments & Retirement
InstitutionAccount TypeAccount # (last 4)Advisor / ContactBeneficiary
Debts & Liabilities
LenderTypeBalance (approx)Monthly PaymentAccount # (last 4)
Section 7
Insurance Policies
Life, health, auto, home and other insurance details.
Insurance Inventory
TypeCompanyPolicy #Agent / PhoneBeneficiaryPremium
Health Insurance
Section 8
Real Estate & Vehicles
Property, vehicle, and title information.
Real Estate
AddressTypeOwnershipMortgage LenderTitle Location
Vehicles
Year / Make / ModelVIN (last 6)License PlateLien HolderTitle Location
Section 9
Business Interests
Business ownership, succession plans, and key contacts.
Business Information
Succession Plan
Section 10
Subscriptions & Recurring Payments
Monthly and annual subscriptions to cancel or transfer.
Subscriptions
ServiceMonthly / AnnualAmountLogin EmailCancel Instructions
Recurring Bills
Bill / UtilityProviderAccount #AmountAutopay?
Section 11
Letters, Legacy & Family
Personal legacy messages, family arrangements, and special wishes.
Pets & Animal Care
Pet NameSpecies / BreedVet Name & PhoneMedicationsFeeding Schedule
Dependents
Legacy Documents & Messages
Section 12
Annual Review Checklist
Review and update this document at least once per year.
Review Items
Signature & Certification
Section 1 of 12
Personal Vault Complete
All 12 sections reviewed
Your Personal Information Vault is ready to be sealed with encryption
or exported as a professional PDF document.
⚡ Vault Buckets Three secure vaults in one — Emergency, Legacy and Password. Fill each bucket, then seal with encryption.
Emergency Vault
🚨 Emergency Access Vault
Critical information needed immediately in a medical, legal or personal crisis. Seal and share with your emergency contacts.
Section 1
Identity & Personal
Personal Identifiers
Emergency Contacts
Document Locations
Section 2
Medical Information
Medical Profile
Current Medications
MedicationDoseFrequencyDoctorPharmacy
Health Insurance
Section 3
Legal & Authority
Advance Directives
Power of Attorney
Section 4
Financial Access
Primary Accounts
Bank / InstitutionAccount TypeLast 4 DigitsPhoneBeneficiary
Key Financial Contacts
Section 5
Work / Employment
Employment Details
Section 6
Designated Roles
Key People & Their Roles
⚠ The two-person security principle: give the vault passphrase to one person and the emergency override answer to a different person.
🔑 Passphrase Keeper
⚠ Emergency Key Holder
⚖ Executor / Trustee
👨‍👩‍👧 Guardian for Dependents
Section 7
Home & Daily Life
Home Access
Pets & Dependents
Section 8
Digital Life
Primary Digital Access
Legacy Vault
🕊 Legacy & Estate Vault
Your final wishes, estate details and personal legacy. Seal and share with your attorney and executor.
Section 1
Legal Documents
Will & Trust
Power of Attorney
Section 2
End of Life Wishes
Memorial Preferences
Section 3
Financial & Estate
Assets Overview
Asset TypeInstitution / LocationEstimated ValueBeneficiaryNotes
Real Estate
AddressOwnershipMortgage LenderTitle Location
Section 4
Digital Estate
Digital Asset Instructions
Section 5
Personal Legacy
Letters & Messages
Section 6
After-Death Checklist
Tasks for Family / Executor
Password Manager
🔵 Secure Password Manager
All critical credentials, access codes and recovery information. Seal with strong encryption and store securely.
Section 1
Core Accounts
Essential Logins
ServiceUsername / EmailPassword / Hint2FA?Notes
Section 2
Financial & Banking
Banking & Financial Logins
InstitutionUsernamePassword / HintPIN HintNotes
Section 3
Social & Entertainment
Social Media & Streaming
PlatformUsername / HandlePassword / HintEmail UsedNotes
Section 4
Work & Productivity
Work Accounts & Tools
Service / ToolUsernamePassword / HintLicense KeyNotes
Section 5
Home & Recovery Codes
Home Access Codes
Backup & Recovery Codes
⚠ Store 2FA backup codes here. Also print and keep in your physical safe.
ServiceBackup / Recovery Code(s)Date GeneratedNotes
Vault Buckets Complete
All sections reviewed
Your Vault Buckets are ready to be sealed with encryption
or exported as a professional PDF document.
🔐

The Sealed Vault

A secure, time-locked document vault. Your content is encrypted in your browser before it ever reaches the cloud — no one, not even this app, can read it without your passphrase.

Time Lock
Set a date before which the vault cannot be opened — even with the correct passphrase.
🔑
Passphrase
A secret passphrase encrypts all content. Without it, the vault is permanently unreadable.
Emergency Override
An optional secret Q&A that lets a trusted person bypass the time lock — but still needs the passphrase.
📎
File Attachments
Attach PDFs, images, and documents. Each file is encrypted before upload.
How It Works
1Create an account and sign in
2Write your message and attach any files
3Set a passphrase and an unlock date
4Optionally set an emergency override question
5Seal the vault — everything is encrypted in your browser
6Share the Vault ID and passphrase with your trusted person via separate channels
7When the time comes, they enter the passphrase and the vault opens

Sealing a Document

Sealing encrypts your message and locks it until your chosen date and time.

Message Content
Type or paste the text you want to seal. Encrypted with AES-256-GCM before saving.
Vault Name
A memorable label (e.g. "Letter to My Children"). Visible to recipients who look up the vault.
Secret Passphrase
The key that encrypts everything. Share it via a separate secure channel — never in the same message as the Vault ID.
Unlock Date & Time
The earliest moment the vault can be opened. The open button is blocked until this time passes.
⚠ Passphrase Warning: There is no passphrase recovery. If you lose it, the vault contents are permanently inaccessible. Store it safely.
💡 Tip: After sealing, note your Vault ID — you will need it to share the vault with your trusted recipient.

File Attachments

Attach multiple files to any vault. Each file is encrypted with your passphrase before upload.

📄 PDF
📝 Word (.doc, .docx)
📊 Excel (.xls, .xlsx)
📋 PowerPoint (.ppt, .pptx)
🖼️ Images (JPG, PNG, GIF, WebP)
📎 Plain text (.txt)

Maximum 20MB per file · Multiple files per vault

How to Attach Files
1In the Seal tab, scroll to the Attachments section
2Click the zone to browse, or drag and drop files directly
3Files appear in a list — click ✕ to remove any before sealing
4When you seal, each file is encrypted then uploaded with a progress bar
5After opening the vault, click ⬇ Download per file to decrypt and save it
🔒 Security: Files are encrypted in your browser before upload. Firebase only holds unreadable ciphertext.

Opening a Vault

Two conditions must both be met before a vault can be opened.

Time Lock Lifted
Current date and time must be past the unlock date.
🔑
Correct Passphrase
The exact passphrase used when the vault was sealed.
Standard Opening
1Click the Open the Vault tab
2Select your vault from the dropdown
3Confirm the time lock shows ✔ lifted
4Enter the passphrase and click Attempt to Open
5Your message and attachments appear below
Emergency Override (time-locked vaults)
1Expand the ⚠ Emergency Override section
2Answer the secret question
3Enter the passphrase above
4Click Override Time Lock & Open
⚠ Note: The emergency override bypasses the time lock only — the passphrase is always required.

Sharing a Vault

Share a vault with a trusted person using the Vault ID. They access it from their own account.

What your recipient needs
1. The app URL
2. Their own account (free registration)
3. The Vault ID
4. The passphrase — shared separately
5. The emergency answer — if you set one
Share via Email
1In the Open tab, select your vault
2Click ✉ Share via Email
3Enter recipient email and preview the message
4Click Open in Gmail, Open in Outlook Web, or copy the text
How Your Recipient Opens It
1They register their own account at the app URL
2In the Open tab, scroll to Trusted Recipient
3Paste the Vault ID and click Look Up
4The vault appears — they open it with the passphrase
⚠ Security Rule: Never send the Vault ID and passphrase in the same message. Use separate channels.

Security & Encryption

No one — including this app — can read your content without the correct passphrase.

Algorithm
AES-256-GCM — military-grade symmetric encryption for both text and file attachments.
Key Derivation
PBKDF2 with SHA-256 and 200,000 iterations — makes brute-force attacks extremely slow.
Where encryption happens
Entirely in your browser via the Web Crypto API. Your passphrase and plaintext never leave your device.
Emergency answer
SHA-256 hashed before saving. The raw answer is never stored anywhere.
Firebase Firestore
Stores vault name, unlock date, and encrypted ciphertext only. Never the passphrase or plaintext.
Firebase Storage
Stores encrypted file blobs only. Permanently unreadable without the passphrase.
Reseal & Rotate
After opening a vault, the owner can change the passphrase, reset the time lock and update the emergency override in one step. All content and attachments are re-encrypted with the new passphrase. The old passphrase becomes permanently invalid immediately.
Two-person principle
For maximum security, give the passphrase to one trusted person and the emergency override answer to a different trusted person. Neither can open the vault alone — both must collaborate in an emergency.
🔒 Zero-knowledge design: Even if Firebase were compromised, your vault contents would remain encrypted and unreadable.
⟳ After emergency access: If your vault was opened via emergency override, consider using Reseal & Rotate immediately to issue a new passphrase and reset the time lock — especially if you believe the old passphrase may have been compromised.

Frequently Asked Questions

What if I forget my passphrase?
There is no recovery. Without the passphrase, the vault contents are permanently inaccessible — even to app administrators. Always store it safely.
Can I change the passphrase after sealing?
Yes — use the Reseal & Rotate feature. Open the vault with your current passphrase, then click "⟳ Reseal & Rotate" in the Vault Management section. You can update the passphrase, time lock and emergency override all at once. The old passphrase becomes permanently invalid immediately.
Can I change the unlock date after sealing?
Yes — use Reseal & Rotate. Open the vault, click "⟳ Reseal & Rotate" and set a new unlock date. You must also confirm your passphrase and set a new one as part of the rotation.
What should I do after emergency access is used?
We strongly recommend using Reseal & Rotate immediately after an emergency override is used. This lets you issue a new passphrase, reset the time lock and update the emergency override — ensuring the vault is fully secured again with fresh credentials.
Can I edit a sealed vault's contents?
No. Once sealed, contents are encrypted and cannot be modified. Delete and re-create if needed.
Can multiple people be trusted recipients?
Yes — share the same Vault ID and passphrase with as many trusted people as needed. Each needs their own account.
Can a trusted recipient delete my vault?
No. Only the vault owner can delete or reseal it. Trusted recipients can only read it.
Is the app available on mobile?
Yes — works in any modern browser on any device. No installation required.
What happens to attachments when a vault is deleted?
Both the Firestore record and all Firebase Storage file attachments are permanently deleted immediately.
Are attachments re-encrypted during Reseal & Rotate?
Yes — every attachment is downloaded, decrypted with the old passphrase and re-uploaded encrypted with the new one. This ensures all vault content is protected by the new credentials.
Is there a storage limit?
Firebase Storage includes 5GB free — far more than enough for personal use. Individual attachments are capped at 20MB each.