Question 1

Setting up your vault for the first time

Accepted Answer

Create your account, then set your vault passphrase. These are two different secrets: the account password signs you in, and the passphrase decrypts your vault. Only the first one ever reaches us. Before you add anything, save your recovery shares. Setup asks for them first on purpose — they are the only way back in if you forget your passphrase.

Question 2

What to add first, and what can wait

Accepted Answer

Ten things cover most of the gap: your salary account and branch, any fixed deposit, your term policy and insurer, your demat account, your provident fund number, the locker and where its key is, any crypto and how to reach it, your PAN and Aadhaar, any loan running in your name, and the one person who should be told first. Everything else can follow on a later Sunday. A partial vault is far more useful than an empty one.

Question 3

Creating your recovery shares

Accepted Answer

Recovery works through a recovery phrase plus trusted contacts who each hold a sealed share. You choose how many shares exist and how many are needed to rebuild access. Keep the recovery phrase somewhere separate from your devices. If you lose both your passphrase and your shares, nobody can open the vault — including us.

Question 4

Choosing your check-in schedule

Accepted Answer

Weekly is the default and suits most people. App activity, a biometric unlock or a scheduled confirmation all count, so most people never consciously do anything. If you travel to places without signal, lengthen the intervals. Every window in the sequence is configurable.

Question 5

Adding a record

Accepted Answer

A record is more than a login. Add the institution, the reference or account number, who to contact there, and what a claim would need. That context is what turns an account number into something usable. A password alone tells your family nothing about what exists.

Question 6

Attaching documents to a record

Accepted Answer

Attach policy documents, deeds, statements or scans directly to the record they belong to. Files are encrypted on your device before upload, exactly like everything else. Keeping the document with the record means the 'what to do' never gets separated from the 'what it is'.

Question 7

Editing or deleting a record

Accepted Answer

Edit any record at any time. Version history keeps every prior revision, so you can roll back or compare. Deleting a record removes it from future releases. Recipients who have not yet received anything will simply never see it.

Question 8

Organising records into categories

Accepted Answer

Group records into categories — financial, legal, medical, personal. Each category has its own encryption key derived from your master key, which is also how per-category access works.

Question 9

Storage limits on Free and Premium

Accepted Answer

Each plan's asset, nominee and storage limits are listed on the Pricing page and in Settings, then Billing. Upgrading raises them; records above a lower limit stay readable and exportable. Encryption is identical on both. It is never a paid feature.

Question 10

Exporting your entire vault

Accepted Answer

Export any time, on any plan including Free. The export is a documented open format you decrypt with your own passphrase and recovery shares, and it opens without our servers. Export before you delete anything, because a deleted vault cannot be recovered.

Question 11

Adding a recipient

Accepted Answer

Add the person with their contact details and their role. They are told they have been named, so it is not a shock later — but they see nothing else until your conditions are met. This is separate from the nomination forms your bank or insurer holds. Those still need updating with the institution itself.

Question 12

Assigning a record to a specific person

Accepted Answer

Open the record, choose Recipients, and assign it. Permissions are per person and per item, so one person can get a single document and another your full financial folder.

Question 13

Adding a backup recipient

Accepted Answer

Configure primary, secondary and tertiary recipients so access always reaches someone you trust. If the first person cannot act, the chain continues.

Question 14

What each person will see

Accepted Answer

Only the records assigned to them, with a short written list of what to handle first and who to call. There is no mode in which anyone receives everything. A nominee cannot tell what else exists, and one person's access reveals nothing about anyone else's.

Question 15

Changing or removing someone

Accepted Answer

Any time, as often as you like, with no notice to anyone. If you revoke a share, the old one is invalidated and new shares are issued to everyone affected.

Question 16

Adding a trusted contact

Accepted Answer

Trusted contacts are different from recipients. They are asked to confirm whether you are well when check-ins go unanswered — they never see your vault, and their answer alone releases nothing.

Question 17

How check-ins work

Accepted Answer

A tap on your phone, or a quiet scheduled confirmation, keeps everything sealed. Weekly by default and configurable. If one is missed, a grace period of 24 hours runs before any reminder goes out.

Question 18

What happens when you miss one

Accepted Answer

Reminders come to you first: push in hours 1 to 4, WhatsApp in 12 to 24, email in 24 to 48. Nothing opens during any of that. Only at hour 48 are your trusted contacts asked, and they have 48 hours to respond. A single reply from you resets everything to zero.

Question 19

Setting a waiting period

Accepted Answer

A time lock is set per item and per recipient. Even after everything is verified, the lock has to elapse before anything moves — and a cancellation check runs throughout it.

Question 20

Setting rules for emergencies and incapacity

Accepted Answer

Emergency mode is armed separately from inheritance. You choose who can invoke it, what counts as emergency information, and how long the waiting period is. A hospital stay opens the medical layer only. Nothing financial, nothing private, nothing permanent.

Question 21

Cancelling a release in progress

Accepted Answer

From your phone, at any stage before it completes, without giving a reason. If a trusted contact triggered something by mistake, you can stop it.

Question 22

What a recipient sees when a release completes

Accepted Answer

They open a portal with a one-time code sent to the contact details you recorded — no account, no password, nothing to install. Inside is only their own part, plus guidance for each institution they will need to approach.

Question 23

Upgrading to Premium

Accepted Answer

From Settings, then Billing. Each plan shows its current price and any free trial there; nothing is charged during a trial. Tax is shown separately at checkout before you pay, in the currency you will be charged.

Question 24

Switching between monthly and yearly

Accepted Answer

Change it from Settings, then Billing, where the current monthly and yearly prices are shown side by side.

Question 25

Updating your payment method

Accepted Answer

Settings, then Billing. Updating the card does not change your plan or your renewal date.

Question 26

Cancelling your subscription

Accepted Answer

Settings, then Billing, then Cancel. Cancellation stops the next renewal; Premium keeps working until the end of the period you already paid for. Cancelling and refunding are separate requests. If you also want the last charge returned, contact us; the Refund and Cancellation Policy sets out the window and what is covered.

Question 27

What happens when Premium ends

Accepted Answer

Your account moves to the Free plan and your vault stays intact. Records beyond the Free limits become read-only — you can still see and export them. Nothing is deleted because you cancelled, and nothing is deleted if a payment fails.

Question 28

Deleting your account permanently

Accepted Answer

Contact us to request it. The request is held for a grace period during which you can cancel it, then final destruction is carried out by our team. The Terms set out how long that period lasts. It cannot be undone, and a deleted vault cannot be recovered afterwards. Export first.

Question 29

Changing your passphrase

Accepted Answer

You can change it from Settings, then Security, while you still know the current one. Your records are re-wrapped under the new key on your device. Changing the passphrase does not change your recovery shares. Reissue those separately if you want to.

Question 30

Where to keep your recovery shares

Accepted Answer

Somewhere separate from your devices, and ideally not all in one place. A recovery phrase written down and stored physically, plus trusted contacts holding sealed shares, is the common arrangement. Do not store the phrase in the same password manager you use to sign in. That defeats the point of splitting it.

Question 31

Signing in on a new device

Accepted Answer

The new device generates its own keypair and you approve it from an existing device, by QR code or push notification. Your master key is never exposed to our servers during enrolment.

Question 32

Reissuing recovery shares

Accepted Answer

If a share is lost or a trusted contact is no longer the right person, revoke and reissue. The old share is invalidated and everyone affected is re-issued.

在你需要时提供帮助

Start here

Your vault

The people you name

Check-ins and releases

Account and billing

Passphrase and recovery

如果你丢失了口令

仍需帮忙？