New to crypto?We've got you.
Three principles. No jargon. The same mathematics that maps the heavens protects your legacy.
Client-Side Encryption
Your password never leaves your device. Not once. Not during setup. Not ever.
When you add your seed phrase to the vault editor, it is encrypted inside your browserusing the Web Crypto API before anything is sent to our servers. We receive only a block of scrambled data (ciphertext). To deliver your vault to your heir when the dead man's switch fires, we hold the encrypted heir and sentinel shards and combine them then — never before.
Client-Side Encryption vs. Centralized Storage
A centralized password manager encrypts your data on their server, which means they hold the key. We encrypt on your device before the data ever moves. The distinction is the difference between trusting a company and trusting mathematics.
LastPass (2022), Norton LifeLock (2023), and RockYou2024 are examples where centralized key custody resulted in mass exposure. Client-side encryption architecture makes that category of breach structurally impossible.
The Trinity Shard Protocol
Your vault is divided into three. Any two fragments can reconstruct the original. One alone reveals nothing.
Using Shamir's Secret Sharing (a 2-of-3 threshold scheme), your encrypted vault is split the moment you finish setup. The mathematics guarantees that holding just one shard is informationally useless — equivalent to holding nothing at all.
The Inheritance Mechanism
No lawyer. No court. No lost crypto. Automated, private, and irreversible only when truly necessary.
You lock your crypto instructions in a vault
Write which wallets you own, lock it with a password only you know. VaultPass never sees your password or your crypto.
You check in regularly — like pressing a button
Once a week or month, tap I'm here. Your vault stays locked. Takes 5 seconds.
You choose who receives it if you can’t check in
Pick a trusted person, add their email. They receive nothing until it’s needed. No snooping while you’re alive.
After missed reminders, they receive your vault
Three warning emails before the switch fires. Only a sustained, unresponsive period triggers heir notification.
How It All Fits Together
From your first keystroke to your heir's secure access — the complete lifecycle.
Words you'll hear us use
Using a Ledger, Trezor, or Coldcard?
VaultPass works perfectly with hardware wallets. Store your 24-word recovery phrase — not the device itself. Your heir uses it to restore access to any compatible wallet software.
Your family deserves access.
Set it up in 2 minutes.
Secure My Legacy →No credit card required · Takes 2 minutes · Cancel anytime
How it works
The Protocol
Cryptographic Vault
Data swallowed whole. Inaccessible to the outside.
Your credentials are encrypted locally, on your own device. Once sealed with AES-256-GCM, the ciphertext is what reaches our servers — the data cannot be read without the vault key, which is split 2-of-3 and never transmitted whole.
Read the security protocol