Zero-Knowledge
Your vault is private, even from us
LifeWyn encrypts your vault contents and documents on your device before they are ever transmitted. We hold the ciphertext, you hold the keys — so privacy rests on the architecture, not on our good intentions.
Encrypted before it leaves you
Everything you put in your vault — credentials, notes, documents — is encrypted on your own device. What travels to our servers, and what we store, is ciphertext; opening it needs keys that stay with you, released only when a verified policy event (death or incapacity + identity + your rules) is met.
XChaCha20-Poly1305
We protect your content with XChaCha20-Poly1305 authenticated encryption. Its extended nonce and built-in integrity tag mean tampering is detected and decryption fails safely.
Keys derived from you
Your master key is derived on your device from a passphrase only you hold, using scrypt — a memory-hard KDF chosen to make brute force expensive. Every key beneath it comes from HKDF. Because derivation happens client-side, we never receive the material needed to reconstruct it.
A layered key hierarchy
A Master key derives Category keys, and each Category key derives per-Asset keys and unwraps the individual key on each document. Access is scoped by category, so authorising someone for one part of your vault never hands them the rest.
We store ciphertext only
Your vault contents and documents reach our database only as encrypted blobs, and the keys that open them are not sent to us. We do store the account and contact details we need to run the service — your name and email, and your nominees' names and contact details — because we cannot notify or verify someone whose address we cannot read. A breach reaches those details and the ciphertext, not your vault contents.
Verifiable, not just promised
Zero-knowledge is an architecture, not a marketing line. The encryption boundary sits on your device: vault content is stored only as ciphertext, and access needs your keys plus a verified event — death or incapacity, identity, and the policy you set.
Protection without surveillance
See exactly how LifeWyn secures your digital legacy — or ask our team anything about the cryptography behind the vault.
Contact us