Your registration has been received.
The vault administrator will review and approve your access shortly.
You will receive an email notification once a decision has been made.
🔒
Access Denied
—
Your request to access The Sealed Vault has been denied by the administrator.
If you believe this is a mistake, please contact the vault owner directly.
⚙ Admin
—
Access Control
Manage who can access The Sealed Vault
✉ Invite a Trusted Person
Send a personalised invitation email with your app URL and registration instructions.
When they register, their request will appear in the Pending tab for your approval.
Previously Sent Invitations
The Sealed Vault
Sign in to access your vaults
By signing in you agree to our Terms of Service and Privacy Policy
·
I have read and agree to The Sealed Vault's Terms of Service and Privacy Policy.
I understand that vault contents are encrypted and the service is provided as-is.
·
Your vault contents are encrypted client-side. We never see your passphrase or your documents.
—
The Sealed Vault
A message hidden by time and secret
The vault cannot be opened before this moment, even with the correct passphrase.
If a trusted person needs access before the unlock date in an emergency, they can bypass
the time lock by correctly answering this question — but they will still need the passphrase to decrypt the vault.
Secret QuestionSecret AnswerThe answer is hashed with SHA-256 — only its fingerprint is stored, never the raw text.
Attachments
📎
Click to browse or drag & drop files here
PDFs, images, Word docs, Excel — up to 20MB each
No sealed documents found. Create one in the Seal tab first.
Vault ID — click to copy
—
Share the Vault ID with a trusted person. They paste it in the "Trusted Recipient" section to access this vault.
Checking conditions…
⏳Time lock: —
⚠Emergency override available
🔑Passphrase: not yet entered
or bypass time lock
⚠ This bypasses the time lock only. The passphrase above is still required.
Secret Question
—
Your Answer
Unsealed
Attachments
Vault Management
⟳ Reseal & Rotate
Change passphrase, reset time lock and update emergency override. Content is re-encrypted with the new passphrase immediately.
Permanently delete this vault and all its contents.
Trusted Recipient
📋 Personal Information Vault
Fill in your personal details across all 12 sections, then seal the entire form with encryption.
Section 1
First 48 Hours Guide
Immediate actions and key contacts for the first 48 hours of an emergency.
Emergency Contacts
Professional Contacts
Critical Locations
Section 2
Emergency Medical Snapshot
One-page summary for EMTs or hospital staff.
Basic Medical Info
Physicians
Current Medications
Medication
Dose
Frequency
Doctor
Pharmacy
Section 3
Essential Identification
Personal IDs, employment details, and direct deposit information.
Identity Documents
Employment & Income
Section 4
Medical Directives & Legal
Advance directives, power of attorney, and legal document locations.
Advance Directives
Power of Attorney
Will & Trust
Section 5
Digital Access
Online accounts, passwords, and digital asset locations.
Primary Accounts
Key Digital Accounts
Service / Platform
Username / Email
Password / Hint
2FA Method
Notes
Devices
Section 6
Financial Assets
Bank accounts, investments, and retirement funds.
Bank Accounts
Bank Name
Account Type
Last 4 Digits
Branch / Phone
Beneficiary
Investments & Retirement
Institution
Account Type
Account # (last 4)
Advisor / Contact
Beneficiary
Debts & Liabilities
Lender
Type
Balance (approx)
Monthly Payment
Account # (last 4)
Section 7
Insurance Policies
Life, health, auto, home and other insurance details.
Insurance Inventory
Type
Company
Policy #
Agent / Phone
Beneficiary
Premium
Health Insurance
Section 8
Real Estate & Vehicles
Property, vehicle, and title information.
Real Estate
Address
Type
Ownership
Mortgage Lender
Title Location
Vehicles
Year / Make / Model
VIN (last 6)
License Plate
Lien Holder
Title Location
Section 9
Business Interests
Business ownership, succession plans, and key contacts.
Business Information
Succession Plan
Section 10
Subscriptions & Recurring Payments
Monthly and annual subscriptions to cancel or transfer.
Subscriptions
Service
Monthly / Annual
Amount
Login Email
Cancel Instructions
Recurring Bills
Bill / Utility
Provider
Account #
Amount
Autopay?
Section 11
Letters, Legacy & Family
Personal legacy messages, family arrangements, and special wishes.
Pets & Animal Care
Pet Name
Species / Breed
Vet Name & Phone
Medications
Feeding Schedule
Dependents
Legacy Documents & Messages
Section 12
Annual Review Checklist
Review and update this document at least once per year.
Review Items
Signature & Certification
Section 1 of 12
✓
Personal Vault Complete
✦All 12 sections reviewed
Your Personal Information Vault is ready to be sealed with encryption
or exported as a professional PDF document.
⚡ Vault Buckets
Three secure vaults in one — Emergency, Legacy and Password. Fill each bucket, then seal with encryption.
Emergency Vault
🚨 Emergency Access Vault
Critical information needed immediately in a medical, legal or personal crisis. Seal and share with your emergency contacts.
Section 1
Identity & Personal
Personal Identifiers
Emergency Contacts
Document Locations
Section 2
Medical Information
Medical Profile
Current Medications
Medication
Dose
Frequency
Doctor
Pharmacy
Health Insurance
Section 3
Legal & Authority
Advance Directives
Power of Attorney
Section 4
Financial Access
Primary Accounts
Bank / Institution
Account Type
Last 4 Digits
Phone
Beneficiary
Key Financial Contacts
Section 5
Work / Employment
Employment Details
Section 6
Designated Roles
Key People & Their Roles
⚠ The two-person security principle: give the vault passphrase to one person and the emergency override answer to a different person.
🔑 Passphrase Keeper
⚠ Emergency Key Holder
⚖ Executor / Trustee
👨👩👧 Guardian for Dependents
Section 7
Home & Daily Life
Home Access
Pets & Dependents
Section 8
Digital Life
Primary Digital Access
Legacy Vault
🕊 Legacy & Estate Vault
Your final wishes, estate details and personal legacy. Seal and share with your attorney and executor.
Section 1
Legal Documents
Will & Trust
Power of Attorney
Section 2
End of Life Wishes
Memorial Preferences
Section 3
Financial & Estate
Assets Overview
Asset Type
Institution / Location
Estimated Value
Beneficiary
Notes
Real Estate
Address
Ownership
Mortgage Lender
Title Location
Section 4
Digital Estate
Digital Asset Instructions
Section 5
Personal Legacy
Letters & Messages
Section 6
After-Death Checklist
Tasks for Family / Executor
Password Manager
🔵 Secure Password Manager
All critical credentials, access codes and recovery information. Seal with strong encryption and store securely.
Section 1
Core Accounts
Essential Logins
Service
Username / Email
Password / Hint
2FA?
Notes
Section 2
Financial & Banking
Banking & Financial Logins
Institution
Username
Password / Hint
PIN Hint
Notes
Section 3
Social & Entertainment
Social Media & Streaming
Platform
Username / Handle
Password / Hint
Email Used
Notes
Section 4
Work & Productivity
Work Accounts & Tools
Service / Tool
Username
Password / Hint
License Key
Notes
Section 5
Home & Recovery Codes
Home Access Codes
Backup & Recovery Codes
⚠ Store 2FA backup codes here. Also print and keep in your physical safe.
Service
Backup / Recovery Code(s)
Date Generated
Notes
✓
Vault Buckets Complete
⚡All sections reviewed
Your Vault Buckets are ready to be sealed with encryption
or exported as a professional PDF document.
🔐
The Sealed Vault
A secure, time-locked document vault. Your content is encrypted in your browser before it ever reaches the cloud — no one, not even this app, can read it without your passphrase.
⏳
Time Lock
Set a date before which the vault cannot be opened — even with the correct passphrase.
🔑
Passphrase
A secret passphrase encrypts all content. Without it, the vault is permanently unreadable.
⚠
Emergency Override
An optional secret Q&A that lets a trusted person bypass the time lock — but still needs the passphrase.
📎
File Attachments
Attach PDFs, images, and documents. Each file is encrypted before upload.
How It Works
1Create an account and sign in
2Write your message and attach any files
3Set a passphrase and an unlock date
4Optionally set an emergency override question
5Seal the vault — everything is encrypted in your browser
6Share the Vault ID and passphrase with your trusted person via separate channels
7When the time comes, they enter the passphrase and the vault opens
Sealing a Document
Sealing encrypts your message and locks it until your chosen date and time.
Message Content
Type or paste the text you want to seal. Encrypted with AES-256-GCM before saving.
Vault Name
A memorable label (e.g. "Letter to My Children"). Visible to recipients who look up the vault.
Secret Passphrase
The key that encrypts everything. Share it via a separate secure channel — never in the same message as the Vault ID.
Unlock Date & Time
The earliest moment the vault can be opened. The open button is blocked until this time passes.
⚠ Passphrase Warning: There is no passphrase recovery. If you lose it, the vault contents are permanently inaccessible. Store it safely.
💡 Tip: After sealing, note your Vault ID — you will need it to share the vault with your trusted recipient.
File Attachments
Attach multiple files to any vault. Each file is encrypted with your passphrase before upload.
📄 PDF
📝 Word (.doc, .docx)
📊 Excel (.xls, .xlsx)
📋 PowerPoint (.ppt, .pptx)
🖼️ Images (JPG, PNG, GIF, WebP)
📎 Plain text (.txt)
Maximum 20MB per file · Multiple files per vault
How to Attach Files
1In the Seal tab, scroll to the Attachments section
2Click the zone to browse, or drag and drop files directly
3Files appear in a list — click ✕ to remove any before sealing
4When you seal, each file is encrypted then uploaded with a progress bar
5After opening the vault, click ⬇ Download per file to decrypt and save it
🔒 Security: Files are encrypted in your browser before upload. Firebase only holds unreadable ciphertext.
Opening a Vault
Two conditions must both be met before a vault can be opened.
✔
Time Lock Lifted
Current date and time must be past the unlock date.
🔑
Correct Passphrase
The exact passphrase used when the vault was sealed.
Standard Opening
1Click the Open the Vault tab
2Select your vault from the dropdown
3Confirm the time lock shows ✔ lifted
4Enter the passphrase and click Attempt to Open
5Your message and attachments appear below
Emergency Override (time-locked vaults)
1Expand the ⚠ Emergency Override section
2Answer the secret question
3Enter the passphrase above
4Click Override Time Lock & Open
⚠ Note: The emergency override bypasses the time lock only — the passphrase is always required.
Sharing a Vault
Share a vault with a trusted person using the Vault ID. They access it from their own account.
What your recipient needs
1. The app URL 2. Their own account (free registration) 3. The Vault ID 4. The passphrase — shared separately 5. The emergency answer — if you set one
Share via Email
1In the Open tab, select your vault
2Click ✉ Share via Email
3Enter recipient email and preview the message
4Click Open in Gmail, Open in Outlook Web, or copy the text
How Your Recipient Opens It
1They register their own account at the app URL
2In the Open tab, scroll to Trusted Recipient
3Paste the Vault ID and click Look Up
4The vault appears — they open it with the passphrase
⚠ Security Rule: Never send the Vault ID and passphrase in the same message. Use separate channels.
Security & Encryption
No one — including this app — can read your content without the correct passphrase.
Algorithm
AES-256-GCM — military-grade symmetric encryption for both text and file attachments.
Key Derivation
PBKDF2 with SHA-256 and 200,000 iterations — makes brute-force attacks extremely slow.
Where encryption happens
Entirely in your browser via the Web Crypto API. Your passphrase and plaintext never leave your device.
Emergency answer
SHA-256 hashed before saving. The raw answer is never stored anywhere.
Firebase Firestore
Stores vault name, unlock date, and encrypted ciphertext only. Never the passphrase or plaintext.
Firebase Storage
Stores encrypted file blobs only. Permanently unreadable without the passphrase.
Reseal & Rotate
After opening a vault, the owner can change the passphrase, reset the time lock and update the emergency override in one step. All content and attachments are re-encrypted with the new passphrase. The old passphrase becomes permanently invalid immediately.
Two-person principle
For maximum security, give the passphrase to one trusted person and the emergency override answer to a different trusted person. Neither can open the vault alone — both must collaborate in an emergency.
🔒 Zero-knowledge design: Even if Firebase were compromised, your vault contents would remain encrypted and unreadable.
⟳ After emergency access: If your vault was opened via emergency override, consider using Reseal & Rotate immediately to issue a new passphrase and reset the time lock — especially if you believe the old passphrase may have been compromised.
Frequently Asked Questions
What if I forget my passphrase? ▾
There is no recovery. Without the passphrase, the vault contents are permanently inaccessible — even to app administrators. Always store it safely.
Can I change the passphrase after sealing? ▾
Yes — use the Reseal & Rotate feature. Open the vault with your current passphrase, then click "⟳ Reseal & Rotate" in the Vault Management section. You can update the passphrase, time lock and emergency override all at once. The old passphrase becomes permanently invalid immediately.
Can I change the unlock date after sealing? ▾
Yes — use Reseal & Rotate. Open the vault, click "⟳ Reseal & Rotate" and set a new unlock date. You must also confirm your passphrase and set a new one as part of the rotation.
What should I do after emergency access is used? ▾
We strongly recommend using Reseal & Rotate immediately after an emergency override is used. This lets you issue a new passphrase, reset the time lock and update the emergency override — ensuring the vault is fully secured again with fresh credentials.
Can I edit a sealed vault's contents? ▾
No. Once sealed, contents are encrypted and cannot be modified. Delete and re-create if needed.
Can multiple people be trusted recipients? ▾
Yes — share the same Vault ID and passphrase with as many trusted people as needed. Each needs their own account.
Can a trusted recipient delete my vault? ▾
No. Only the vault owner can delete or reseal it. Trusted recipients can only read it.
Is the app available on mobile? ▾
Yes — works in any modern browser on any device. No installation required.
What happens to attachments when a vault is deleted? ▾
Both the Firestore record and all Firebase Storage file attachments are permanently deleted immediately.
Are attachments re-encrypted during Reseal & Rotate? ▾
Yes — every attachment is downloaded, decrypted with the old passphrase and re-uploaded encrypted with the new one. This ensures all vault content is protected by the new credentials.
Is there a storage limit? ▾
Firebase Storage includes 5GB free — far more than enough for personal use. Individual attachments are capped at 20MB each.
⬇ Export / Print Sections
Choose which sections to include in the printed document
Security reminder: This document will contain sensitive personal information.
Only print or save to a trusted, private device. Store printed copies securely.
⟳ Reseal & Rotate
Re-encrypt with a new passphrase, time lock and emergency override
⚠ The vault will be decrypted using your current passphrase and immediately
re-encrypted with the new one. The old passphrase will no longer work.
All attachments will be re-encrypted too.
Current Passphrase (required to authorise rotation)
New Credentials
New Passphrase
Confirm New Passphrase
New Unlock Date & Time Time Lock
Leave both fields blank to remove the emergency override entirely.
New Secret QuestionNew Secret Answer
⊗ Delete Vault
This action is permanent and cannot be undone
You are about to permanently delete: —
The encrypted data will be removed from Firestore. This cannot be recovered.
Type DELETE to confirm
✉ Share via Email
Two separate emails — one per trusted person
🔐 Two-Person Security Principle:
Send each email to a different trusted person. Neither person alone can open the vault —
both must collaborate in an emergency.
Passphrase Holder — Email Address
Email Preview
—
Security reminder: This email does NOT include the passphrase.
Share the passphrase with this person separately — in person, by phone, or via a secure channel.
Never send the Vault ID and passphrase in the same message.
Send via your preferred email service
⚠ This vault has no emergency override question set. To enable the Emergency Key Holder email,
please reseal the vault with an emergency question and answer configured.
Emergency Key Holder — Email Address
Email Preview
—
Security reminder:
This email shows the secret question but NOT the answer.
Share the answer with this person separately — in person or by phone.
The answer must never be written in any digital message.
Send via your preferred email service
Gmail and Outlook Web open in your browser — no email app needed.
Send each email to a different trusted person.
Terms of Service
The Sealed Vault · Effective April 14, 2026
✦ By creating an account you agree to all terms below. Please read carefully.
Introduction
Welcome to The Sealed Vault. By creating an account or using the Service, you agree to be bound by these Terms. The Sealed Vault is a secure, encrypted document storage service. All vault contents are encrypted in your browser — we cannot read your documents.
1. Acceptance
You must be at least 18 years of age to use this Service. By registering, you confirm you have the legal capacity to enter this agreement.
2. Account & Access Control
Access requires administrator approval. You are responsible for maintaining the confidentiality of your passphrase. Lost passphrases cannot be recovered — vault contents will be permanently inaccessible.
3. Encryption & Security
All encryption uses AES-256-GCM with PBKDF2 (200,000 iterations), performed entirely in your browser. Your passphrase never leaves your device. While we use industry-standard security, no system is 100% secure and you accept this inherent risk.
4. Acceptable Use
You agree NOT to use the Service to:
• Store illegal, harmful, or abusive content
• Violate any applicable laws or regulations
• Attempt to access other users' vaults or our systems
• Facilitate fraud, identity theft, or criminal activity
5. Data Ownership
You retain full ownership of your content. We store only encrypted ciphertext and cannot access your plaintext data.
6. Data Retention & Deletion
Data is retained while your account is active. Upon closure, all data is deleted within 30 days. Deleted vault contents cannot be recovered.
7. Limitation of Liability
THE SERVICE IS PROVIDED "AS IS". WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES, INCLUDING LOSS OF DATA DUE TO FORGOTTEN PASSPHRASES.
8. Disclaimer
The Sealed Vault is not a substitute for professional legal, medical, or financial advice. Documents stored do not constitute legally binding instruments unless properly executed under applicable law.
9. Modifications
We may update these Terms. Material changes will be communicated via email at least 14 days before taking effect.
10. Third-Party Services
The Service uses Google Firebase. By using our Service you also agree to Google's applicable terms.
Effective: April 14, 2026 · Version 1.0 · The Sealed Vault
🔒 Your vault contents are encrypted before reaching our servers. We cannot read them.
Our Privacy Commitment
The Sealed Vault was built on a foundation of privacy. All vault contents are encrypted in your browser before reaching our servers. We cannot read your documents, messages or files.
1. What We Collect
We collect:
• Your email address (for authentication and notifications)
• Encrypted vault data (ciphertext only — we cannot decrypt this)
• SHA-256 hash of your emergency answer (not the answer itself)
We do NOT collect:
• Your vault passphrase — it never leaves your device
• The plaintext contents of your vaults
• Your emergency answer — only its hash is stored
2. How We Use Your Information
• Providing authentication and vault storage
• Sending email notifications for vault access events
• Security monitoring and fraud prevention
• We do NOT sell, rent or trade your personal information
3. Third-Party Services
We use Google Firebase for authentication, database, storage and hosting. Your encrypted data is stored on Google's servers subject to Google's Privacy Policy.
4. Data Retention
• Account data: retained for the lifetime of your account
• Vault data: retained until you delete it or close your account
• Deleted data: permanently removed within 30 days
5. Your Rights
• Access, correct or delete your personal data
• Request data portability
• Contact us at richmax32@gmail.com to exercise any right
6. Security
AES-256-GCM encryption, PBKDF2 key derivation (200,000 iterations), SHA-256 hashing for emergency answers, Firebase Security Rules, and HTTPS/TLS for all data in transit.
7. Children's Privacy
The Service is not directed to children under 18. We do not knowingly collect information from minors.
8. Contact — Privacy Officer
The Sealed Vault · Email: richmax32@gmail.com · App: https://d-vault-301b5.web.app · Response time: Within 30 days
Effective: April 14, 2026 · Version 1.0 · The Sealed Vault