End-to-end encrypted · Digital legacy
Some things should only be said
when you can't.
The Goodbye Vault keeps your most sensitive information encrypted on your phone. Check in once a week. If you ever stop — and don't respond to reminders — your records are delivered privately to the people you chose.
Android & iOS · Server never sees your data · Free to start
How it works
A dead-man's switch,
designed with care
Store your secrets
Passwords, account details, documents, final messages. Everything is encrypted on your device before it ever leaves it — we only ever hold ciphertext.
Choose your nominees
Assign people, organisations or institutions to each record. Every record can have multiple nominees — each one gets their own independently wrapped key.
Check in weekly
Any activity in the app resets your timer. Miss a week and we email you a gentle reminder — nothing is released while you respond.
Delivery when it matters
If reminders go unanswered, each nominee receives a private, expiring link. Their browser decrypts the record locally — no account required.
Features
Everything in one ecosystem
Zero-knowledge vault
Records are encrypted on your device with AES-256-GCM. Our servers store only ciphertext and wrapped keys — there is nothing for anyone to steal or leak.
Per-record nominees
Different secrets, different people. Assign multiple nominees per record — family, a lawyer's office, a trustee institution, or your business partner.
Automatic watchdog
A weekly check-in rhythm with email reminders and a configurable grace period. You stay in control as long as you're here.
Private delivery links
Nominees receive a one-of-a-kind secure link by email. The decryption key lives in the URL fragment and never touches our servers.
Android & iOS
A native Flutter app with biometric-friendly unlock. Your master password derives the encryption key — it is never transmitted or stored anywhere.
Built for institutions too
Nominees aren't limited to individuals — assign records to an organisation or institution with a shared delivery mailbox.
Security
We designed the vault we can't open
Your master password derives a 256-bit key with PBKDF2-HMAC-SHA256 (210,000 iterations) on your device. Record payloads use AES-256-GCM with fresh random keys. Nominee copies are wrapped independently, so revoking one never touches the others.
- Server stores ciphertext, wrapped keys, and SHA-256 token hashes only
- Delivery tokens encrypted at rest with a separate server-held release key
- Every signed-in action counts as a check-in — no extra taps needed
- TLS everywhere; delivery links decrypt in the browser, not on our servers
FAQ
Honest answers
What happens if I forget my master password?
Your data is lost — permanently, by design. The encryption key is derived from your password and exists only in your device's memory. We cannot reset or recover it, because we never had it.
Can The Goodbye Vault read my records?
No. We store ciphertext and wrapped keys. Unwrapping requires your password or a nominee's delivery token — neither is available to us in plaintext.
What if I miss a check-in by accident?
You get an email reminder first. Only if you ignore it through the grace period does the release process start. Any login or app activity resets the timer instantly.
Do my nominees need the app?
No. When a record is released, each nominee receives a secure link. They open it in any modern browser and the record decrypts locally on their device.
Can I change nominees later?
Any time. Re-assigning nominees re-creates the delivery packages and invalidates old links, and you can edit or delete records until they're released.
Write it down today.
We'll keep it until it's needed.
Set up your vault in under two minutes.
Get started