Permanently delete your account

Deleting your account erases it and everything in it. There is no recovery, no grace period and no bin to restore from. Read this page before you start.

What is removed

• Every vault, including its message, recipient and settings. Armed vaults are destroyed without delivering.
• Every file, deleted from encrypted storage along with the keys that opened it.
• Any upload still in progress, and its working files.
• Your entire activity and audit history.
• Your profile, password, two factor secret and backup codes.
• Every active session, on every device.
• The account itself.

Your subscription

An active subscription is cancelled first, before anything is deleted, so deletion can never leave you paying for an account that no longer exists. If you are within 30 days of a payment and want a refund, ask for it first: once the account is gone there is nothing left to refund against.

What stays behind

One anonymous line in our security records, noting that an erasure happened, when, and how many vaults and files it covered. It contains no name, no email address and nothing that identifies you: the reference on it is a one way hash, which can confirm a specific address only if that person writes in and supplies it themselves. This is what lets us answer "was my account deleted?" honestly, and it is the minimum a payment dispute or an audit requires.

Support conversations and any chat transcripts are detached from you rather than deleted, which leaves them anonymous.

How to do it

1. Go to Profile and scroll to the bottom.
2. Open the deletion section.
3. Type DELETE to confirm you mean it.
4. Enter your current password.
5. Confirm. Everything is removed there and then, and you are signed out.

Before you do

Download anything you want to keep. Warn anyone relying on a vault, because armed vaults are destroyed rather than delivered. And consider whether pausing your vaults and moving to the Free plan does what you actually want, since that keeps your files and history and costs nothing.

Administrator accounts

An account with administrator rights on the site cannot be deleted this way, so that a site can never be left with nobody able to run it. Remove the role in WordPress first.