Documentation

Create an account with your name, an email address you actually read, and a password of at least 8 characters. A confirmation link arrives straight away. Until you follow it you can look around, but you cannot arm a vault, because reminders have nowhere reliable to go.

The Free plan gives you one vault and 100MB of encrypted storage with no card and no time limit. Everything in these guides works on it except self destructing files and custom timer lengths.

From the dashboard you can see every armed vault, the one closest to its deadline, and how much storage you have left. The check in button in the top bar resets every armed vault at once, which is the fastest way to answer a reminder.

A vault holds a written message, any files you attach to it, one recipient address, and a check in interval. It has three states. Paused means nothing will ever be sent. Active means it is counting down. Delivered means the deadline passed, the email went out, and the vault is closed.

Arming a vault starts the clock immediately. From that moment you have the full interval before the deadline. Every check in resets it to the full interval again, whether you check in on the first minute or the last.

Reminder emails are sent when 75 percent and 90 percent of the interval have elapsed. On a 30 day timer that is day 22 and day 27. On a one hour timer it is 45 minutes and 54 minutes. If you have push notifications on, the same reminders reach your phone.

Pausing a vault clears its deadline and its reminder history. Arming it again starts a fresh full interval. Editing an armed vault keeps the clock where it is, unless you change the interval, in which case the deadline moves with it.

A delivered vault cannot be edited, rearmed or delivered a second time. If you want the same thing to be able to send again, create a new vault.

The preset intervals run from 1 hour to 30 days. Pro and Lifetime accounts can set any interval in that range to the hour.

Short intervals are for situations where absence is the signal: a reporter working somewhere dangerous, a specific trip, a defined window of risk. They demand attention, and a missed morning triggers delivery.

Long intervals are for estate style vaults that sit for years. Thirty days is the common choice. The reminder at day 22 is usually the first time you think about it, and answering takes five seconds.

Pick the longest interval that still delivers in time to be useful. A timer that is too tight gets triggered by a holiday with bad signal.

Every file is encrypted on the server with AES-256-GCM before it is written anywhere. Each file is given its own randomly generated key, and that key is then encrypted with the account master key. Storage never holds readable content.

Uploads are sent in 5MB pieces, so a large file survives a shaky connection and an interrupted upload can simply be started again. Nothing is recorded until the whole file arrives and is encrypted.

Downloading decrypts the file on the server and streams it to you. The decrypted copy is never written to a public location and is removed as soon as the transfer finishes.

Executable file types are refused: exe, bat, sh, js, php and similar. If you need to store one, put it in a zip archive first.

A file can belong to a vault or simply sit in your storage. Attaching it to a vault means it is emailed with the message when that vault delivers. Detaching it does not delete it.

Pro and Lifetime accounts can put a countdown on an individual file, from five minutes to one year. When the countdown reaches zero the file is deleted permanently, including the copy in storage.

This is not reversible and there is no recycle bin. If the file is attached to a vault that has not delivered yet, that vault will simply deliver without it.

The timer is checked by the same scheduler that checks vault deadlines, so deletion happens within a few minutes of the time you set rather than to the second.

Two factor authentication uses any standard authenticator app. Scan the QR code, enter the first code it shows, and you are given eight backup codes. Each backup code works once. Save them somewhere that is not the phone holding the authenticator.

Three wrong passwords in a row from one address locks that address out for twenty minutes. If it happens a second time the lockout is twenty four hours, and so is every time after that. The count returns to zero once the address has gone a full day without a failure, and an address on the allow list is never locked out. The same policy covers the WordPress sign in form. Every endpoint is rate limited, with tighter limits on sign in, registration and the contact form.

Changing your password signs out every other device immediately. So does signing out of all devices from the security page. Armed vaults keep counting down either way, because the timer belongs to the vault and not to the session.

Everything you do is recorded in the activity log with the address it came from. If you ever see something there you did not do, change your password and turn on two factor.

Check in reminders, delivery notices and security alerts are sent by email and can each be turned off individually. Turning off check in reminders is possible but rarely wise: it removes the only warning before a vault fires.

Browser notifications are optional and per device. Turning them on asks your browser for permission and registers a small service worker. Turning them off removes the subscription immediately.

Delivery notices to the recipient are not optional. A vault that delivers always emails its recipient, because that is the entire point of the vault.

Free gives 100MB and one vault. Basic gives 1GB and five vaults. Pro gives 10GB, unlimited vaults, self destructing files and custom timers. Lifetime is a single payment for every Pro feature with no recurring fee.

Annual billing saves 20 percent. Payment goes through Stripe checkout, so card details never touch this site.

Cancelling moves the account to Free at the end of the paid period. Files above the Free allowance stay readable and downloadable, you simply cannot add more until you are back under the limit.

There is a 30 day money back guarantee on every payment, including Lifetime. Write to support within 30 days and it is refunded in full.

The recipient gets one email. It names you, explains that a vault was set up with them as its recipient, and that its deadline passed. Your written message is shown in full, and any attached files are attached to that email.

They do not need an account and there is nothing to sign in to. There is also no way for them to know a vault exists before it delivers.

Email providers limit attachment size. Files that are too large to attach are left out rather than causing the whole delivery to fail, so for very large material it is worth putting a link or an instruction in the message itself.

You are emailed at the same time to tell you the vault delivered, unless you have turned that notice off.