Dashboard
Your estate plan at a glance
Documents
0
Beneficiaries
0
Witnesses
0
Allocated
0%
Estate Progress
Step 1
Sign Your Will
No documents yet
Step 2
Invite Your Witnesses
0 / 2 confirmed
Step 3
Automatic Distribution
Pending trigger
Beneficiary Distribution
No beneficiaries yet.
Check-in Status (Server)
Loading...
--:--:--
Create Document
Encrypt and sign a will, trust deed, or message
Use your full legal name exactly as it appears on your government-issued ID. A clear title helps executors and attorneys identify the document quickly. Example: “Last Will and Testament of John Mitchell” or “Financial Instructions — John Mitchell.”
Everything you write here is AES-256-GCM encrypted before it is saved. Your family only sees this content after the trigger fires, and only if they have the passphrase you share separately. Write freely — this is completely private.
For a Last Will & Testament: State your executor, asset distribution (percentages to each beneficiary), guardians for minor children, and a digital assets clause authorizing your executor to transfer cryptocurrency. For legally binding effect, have a signed witnessed copy reviewed by a solicitor.
For a Last Will & Testament: State your executor, asset distribution (percentages to each beneficiary), guardians for minor children, and a digital assets clause authorizing your executor to transfer cryptocurrency. For legally binding effect, have a signed witnessed copy reviewed by a solicitor.
Everything you write here is AES-256-GCM encrypted before it is saved. Your family only sees this after trigger conditions are met, and only with the passphrase you share with them separately. Write freely — this content is completely private.
For a legally binding Will, this document should be reviewed, witnessed, and signed with your attorney. The encrypted version here serves as your digital record of intent.
For a legally binding Will, this document should be reviewed, witnessed, and signed with your attorney. The encrypted version here serves as your digital record of intent.
No recipients yet.
🔑 NEVER stored anywhere. Share with recipients separately — verbally, via Signal, or sealed envelope. Without it, the document is permanently unreadable.
Must match exactly. There is no password recovery — if you lose this passphrase, the document is permanently unreadable by anyone, including TrustVault. Consider writing it on a physical card stored with your estate documents.
⚠ Share this passphrase with your beneficiaries separately and securely. TrustVault cannot recover it.
Beneficiaries & Allocations
Password protected — edit and delete require your beneficiary password
🔒 Editing or deleting a beneficiary requires your beneficiary password.
Total Allocation
0%
Use the exact full legal name as it appears on their government-issued ID. This name appears in all distribution files.
Used to notify this beneficiary when documents are distributed. Optional but strongly recommended — without an email address they must be contacted by the executor manually. Keep this current; an outdated address means they may not receive their encrypted package.
Percentage of the residuary estate. All allocations must total exactly 100%.
Specific assets, conditions, or reminders for the executor regarding this beneficiary. This note appears in distribution files. Example: “Receives primary residence and joint Chase savings account. Contact attorney before transferring real estate.”
Witness Panel
Two witnesses confirm your will is legitimate
Witnesses will receive an email with a confirmation link. They click it to record their confirmation on the server.
○
○
0 / 2 confirmed
Add at least 2 witnesses.
Use the witness’s full legal name exactly as it appears on their ID. This name will appear on your will document and in all witness confirmation records. Witnesses cannot be beneficiaries or related to beneficiaries in most jurisdictions.
The witness will receive their invitation and confirmation link at this address. A professional email (solicitor, notary firm) adds legal weight. This email is included in all distribution records as proof of witness identity.
Both witnesses must be physically present when you sign. Witnesses cannot be beneficiaries. A Solicitor or Notary provides the strongest legal witness.
All Documents
Your encrypted vault documents
Recipients
People who can receive specific documents
The email address where the encrypted document package is delivered when the trigger fires. Verify this is correct and current — a wrong address means the document never reaches your family. Keep it updated if they change email providers.
Check-in System
Confirm you are alive — server sends email reminders and triggers distribution on missed deadline
🔌 Check-in records are stored on the server. The cron job monitors your deadline daily and emails reminders when the warning threshold is reached.
--:--:--
Since last server check-in
Loading...
Configure
Reminder emails are sent by the server. You can also check in by clicking the link in reminder emails.
Check-in History (Server)
Death Certificate & Distribution Trigger
Three-step process to authenticate and release the estate
Step 1 — Death Certificate
Awaiting Certificate
No certificate uploaded
Step 2 — Guardian Votes
Awaiting Votes
0 / 0 voted
Step 3 — Distribution
Pending
Waiting for Steps 1 & 2
Step 1 — Upload Death Certificate
Upload an official government-issued death certificate. This must be signed by a licensed medical professional or government registrar. Most jurisdictions issue 10–20 certified copies when registering a death — request enough, as each institution (bank, exchange, probate court) will require an original certified copy. A photograph or scan of a certified copy is acceptable here for TrustVault records, but institutions will require physical originals.
The full legal name of the person uploading this certificate — typically the executor named in the Will. This name is recorded in the immutable audit log as the person who triggered the distribution process. The executor must be authorized in the Will to access and transfer digital assets.
The official date of death as stated on the death certificate. This date is critical for two reasons: (1) it establishes the date-of-death valuation for all assets including cryptocurrency — your heirs inherit at this value for tax purposes; (2) it is recorded in the audit log as the legal trigger date for the distribution process.
Optional but recommended. Include the death certificate number, the name of the issuing authority (county registrar, hospital), probate court case number if filed, attorney name and contact, and any special instructions for beneficiaries. This note is included in every distribution package sent to recipients.
Step 2 — Guardian / Executor Votes (0 / 0 required)
Guardians receive an email vote link when a certificate is uploaded. They click it to confirm. You can also vote here directly on behalf of a local guardian.
No guardians configured. Distribution will trigger without guardian votes if you skip this step.
Guardian’s full legal name. Guardians receive an email vote link when a death certificate is uploaded. They click it to confirm or deny. M-of-N guardians must confirm before distribution is triggered — this prevents false triggers from a single bad actor.
Guardian’s email address. This is where their voting link is sent. Choose people you trust completely and who are likely to still be reachable when needed — family members, a solicitor, a close friend in a different household. Avoid using only people who live together (one event could affect all of them).
Step 3 — Distribution
The server cron job will automatically email documents to beneficiaries once the challenge period elapses. You can also generate download files below.
Trustless Execution
Your wishes execute exactly as written — no intermediaries, no delays
Your Documents Are the Contract
In TrustVault, your AES-256-GCM encrypted documents are the single source of truth. The server cannot read them — it only distributes the ciphertext. Once trigger conditions are met, distribution is deterministic and automatic.
How Trustless Execution Works
1
You Encrypt & Sign
Your document is encrypted in-browser with AES-256-GCM using your passphrase. The server only stores the ciphertext — it cannot decrypt it. Your passphrase is never sent to the server.
2
Conditions Are Defined
You configure check-in interval, guardian vote threshold (M-of-N), and challenge period. These are stored server-side and enforced by the daily cron job.
3
Server Monitors Daily
Every day at 9 AM, the cron job checks all user heartbeats, warns via email when deadlines approach, and triggers distribution when the interval expires. No manual action needed.
4
Encrypted Documents Emailed
Each beneficiary receives their encrypted documents by email with decryption instructions. They need the passphrase you shared with them separately to decrypt. Server cannot read the content.
Execution Audit Log (Server)
Loading...Fetching audit entries from server...
Guardian Network
M-of-N consensus — your trusted circle, no single point of failure
M-of-N Consensus
Your trusted circle confirms events through a configurable vote threshold. Require 2-of-3, 3-of-5, or any M-of-N combination. Each guardian receives a unique email vote link — no account required. No single guardian can trigger or block distribution alone.
Configure Voting Threshold
Required votes (M)
2
of
Total guardians (N)
3
Requiring 2 of 3 guardian votes to confirm distribution.
Current Guardians (Server)
Loading...
How the Guardian Network Protects You
✓
No Single Point of Failure
Even if one guardian is compromised, coerced, or unavailable, distribution cannot be triggered without meeting the threshold. Likewise, no single guardian can block distribution indefinitely.
✓
Email Vote Links
Each guardian receives a unique, one-time email vote link when a death certificate is uploaded. They do not need a TrustVault account — just click the link to confirm.
✓
Transparent Voting Record
Every vote is timestamped and recorded in the server audit log. The cron job checks guardian status daily before triggering distribution.
Death Verification
Three-layer protection against fraud and premature distribution
Three-Layer Protection
Guardian consensus, official death certificate, and a challenge period work together. The server cron enforces all three layers — no distribution can occur until all conditions are satisfied.
The Three Verification Layers
1
Guardian Consensus
Your guardian network must reach the configured M-of-N vote threshold via email vote links. Each guardian reviews and confirms independently. No single person can authorize alone.
2
Professional Death Certificate Review
An official death certificate must be uploaded and recorded. The file hash is stored on the server as immutable proof of receipt.
3
Challenge Period
A configurable waiting period enforced by the server cron job. Distribution is blocked until the challenge period elapses after all other conditions are met.
Challenge Period Configuration
Challenge Period
Not Active
No death certificate has been uploaded yet. Once triggered, the countdown will appear here.
Server cron enforces this period. Distribution cannot occur until it elapses after all conditions are met.
Current Verification Status (Live)
Layer 1: Guardians
Loading...
Layer 2: Certificate
Loading...
Layer 3: Challenge
Pending
Inventory — Step 1 of 3
Document every digital asset you own — if your family does not know it exists, it is gone forever
📋 What is Inventory? Crypto leaves no paper trail. No bank, no court, no authority can recover what your family does not know exists. This step does NOT include passwords or seed phrases — this is the map, not the keys.
Step 1 Progress
0/0
📊
Complete Crypto Roster
List every token and coin you hold
Required
▼
⚠ Why this matters: Over $140 billion in crypto is permanently lost because heirs had no idea the assets existed. Your crypto roster is the single most important document in this entire plan.
Your Holdings — Fill In Each Row
| Ticker | Full Name | Network / Chain | Stored Where | Amount | USD Value | Done | Remove |
|---|
Ticker: Type the ticker symbol (e.g. BTC, XRP, HBAR) and the full name and network will auto-fill from a list of 292 tokens. If your token is not listed, type the ticker manually and fill in the other fields.
Network: Select from the dropdown or choose “Enter manually” for unlisted networks. This tells your family which blockchain the token lives on — critical for recovery.
Stored Where: Select your exchange or wallet. Choose “Enter manually” if not listed.
Done: Check when you have fully documented this token. Remove: Click ✕ if you have sold this token and it is no longer in your estate — this keeps your inventory accurate.
Network: Select from the dropdown or choose “Enter manually” for unlisted networks. This tells your family which blockchain the token lives on — critical for recovery.
Stored Where: Select your exchange or wallet. Choose “Enter manually” if not listed.
Done: Check when you have fully documented this token. Remove: Click ✕ if you have sold this token and it is no longer in your estate — this keeps your inventory accurate.
Checklist
🏢
Platform & Wallet Locations
Document exactly where each asset is held
Required
▼
Checklist
📈
Valuation & Tax Records
Value at death determines tax basis — critical for your heirs
Important
▼
Tax note: Your heirs inherit crypto at a stepped-up cost basis equal to the date-of-death value. Pre-death gains are not taxed. Any gains after that date are taxable when they sell. Get a professional valuation on the exact date of death before selling anything.
Checklist
📅
Keep It Updated
An outdated inventory is almost as dangerous as no inventory
Ongoing
▼
Checklist
The date you last verified that all exchange accounts, wallet locations, and token information in this checklist is current and accurate. Update this every time you buy or sell a token, move funds between wallets, or change exchange accounts. Your executor will use this date to judge how current the information is.
Set a recurring calendar reminder to review this entire checklist. Recommended: every 3–6 months, and immediately after any major transaction. Crypto estates become worthless if the information is stale — exchange accounts close, wallets move, and hardware gets lost.
Authority — Step 2 of 3
Give legal power to your heirs — knowing assets exist means nothing without the legal right to claim them
⚖ What is Authority? Even if your family finds every wallet, they may not have the legal right to access or transfer assets. Authority means putting legal documents in place so your chosen person can act on your behalf.
Step 2 Progress
0/0
📝
Will & Trust — Name Your Crypto Specifically
Your legal documents must explicitly name digital assets
Critical
▼
⚠ Critical gap: A Will saying “all my property to your executor” may not protect your crypto if your executor does not know it exists. Crypto must be specifically described, and your executor must be given explicit digital access authority in the Will language.
Recommended Will language for crypto:
“I give all my digital assets, including but not limited to cryptocurrency, non-fungible tokens, and digital wallet contents, to my executor [Sarah Mitchell]. I authorize my executor to access, manage, transfer, and liquidate all digital accounts and wallets on my behalf, including using login credentials and recovery phrases stored in my digital estate documents. This authorization is intended to comply with the Computer Fraud and Abuse Act and any applicable state law.”
Ask your attorney to add language like this to your Will and your DPOA. Without it, your executor is legally exposed even if [Your Executor Name] has the seed phrases.
“I give all my digital assets, including but not limited to cryptocurrency, non-fungible tokens, and digital wallet contents, to my executor [Sarah Mitchell]. I authorize my executor to access, manage, transfer, and liquidate all digital accounts and wallets on my behalf, including using login credentials and recovery phrases stored in my digital estate documents. This authorization is intended to comply with the Computer Fraud and Abuse Act and any applicable state law.”
Ask your attorney to add language like this to your Will and your DPOA. Without it, your executor is legally exposed even if [Your Executor Name] has the seed phrases.
Checklist
The attorney who drafted or is holding your Will and Trust documents. Your executor will contact them first to begin the probate process. Include full name, law firm name, direct phone number, and email. If you do not have an estate attorney, record your nearest estate planning law firm as a starting point for your executor.
The date your current Will was signed and witnessed. If you have updated your Will since creating this checklist, update this date. Your executor needs to confirm they have the most recent version. An outdated Will may be superseded by a newer one — always store the signed original with your attorney and a certified copy with your estate documents.
The date your revocable living trust was last amended or restated. If you have no trust, leave blank. Trusts avoid probate and can pass crypto assets more efficiently than a Will — your attorney can advise whether a trust makes sense for your digital asset portfolio size.
👤
Executor & Trustee Digital Authority
Explicit legal authorization to access crypto accounts
Critical
▼
⚠ Computer fraud laws: Without explicit authorization in your estate documents, your executor may technically be violating computer fraud laws (18 U.S.C. §2701) by logging into your exchange accounts — even to recover assets for your family.
The person named as executor in your Will. Your executor has legal authority to access, manage, transfer, and liquidate your digital assets. Confirm with your attorney that your Will includes explicit digital asset authorization language — without it, some exchanges will not release funds even to a named executor.
The backup executor named in your Will if your primary executor is unable or unwilling to serve. Having an alternate is critical for digital assets because the process requires technical knowledge — choose someone who is comfortable with technology or who can work alongside your trusted crypto helper.
Checklist
✍
Durable Power of Attorney
Covers digital assets while you are alive but incapacitated
Important
▼
Note: A Will only takes effect after death. If you become incapacitated through illness or accident, your family needs a Durable Power of Attorney (DPOA) to manage your crypto while you are still alive. Without it, they may need an expensive court conservatorship proceeding.
Checklist
🏛
Exchange Beneficiary Designations
Some exchanges offer TOD designations — use them if available
Check Each
▼
Note: Coinbase, Kraken, and some other exchanges now allow Transfer on Death (TOD) beneficiary designations. This bypasses probate entirely — the fastest and cleanest transfer method available.
Exchange Beneficiary Status
| Exchange | TOD Available? | Beneficiary Named | Date Set | Done |
|---|---|---|---|---|
Checklist
👔
Brief Your Estate Attorney
Your attorney must know about your crypto to protect it
Required
▼
Checklist
Access — Step 3 of 3
Ensure your family can actually get in — authority is useless without the actual keys
🔑 What is Access? Your family can have every legal document in place, but if they cannot physically get into your wallets and exchanges, the assets may still be permanently lost. Access means ensuring the right person can get in, safely, without being scammed.
Step 3 Progress
0/0
🌿
Seed Phrase & Private Key Security
The most sensitive piece — handled correctly it protects everything
Most Critical
▼
🚨 NEVER do these with your seed phrase: Never photograph it. Never type it into any computer or phone. Never email it. Never store it in cloud storage. Never enter it on any website — not even one that looks like Ledger or Coinbase. The seed phrase should ONLY ever be entered directly into a physical hardware device during recovery.
How to store your seed phrase safely:
Best: Stamp or engrave the 24 words onto a metal plate (Cryptosteel, Bilodal, or DIY stainless steel). Metal survives fire, floods, and decades of time. Store one copy in a fireproof safe at home and a second copy in a bank safety deposit box.
Acceptable: Write legibly on paper, seal in a waterproof pouch, store in fireproof safe. Keep a duplicate at a second location.
Never: Digital photos, screenshots, cloud notes (iCloud, Google Drive, Dropbox, OneDrive), email drafts, password managers, USB drives — all are hackable. The seed phrase must ONLY ever exist on physical media.
Who should know where it is: Only [Your Executor Name] and your trusted crypto helper should know the location of the seed phrase storage. Not family members who may be pressured. Not attorneys who may not keep it secure.
Best: Stamp or engrave the 24 words onto a metal plate (Cryptosteel, Bilodal, or DIY stainless steel). Metal survives fire, floods, and decades of time. Store one copy in a fireproof safe at home and a second copy in a bank safety deposit box.
Acceptable: Write legibly on paper, seal in a waterproof pouch, store in fireproof safe. Keep a duplicate at a second location.
Never: Digital photos, screenshots, cloud notes (iCloud, Google Drive, Dropbox, OneDrive), email drafts, password managers, USB drives — all are hackable. The seed phrase must ONLY ever exist on physical media.
Who should know where it is: Only [Your Executor Name] and your trusted crypto helper should know the location of the seed phrase storage. Not family members who may be pressured. Not attorneys who may not keep it secure.
Seed Phrase Storage Plan (location reference ONLY — do NOT write the actual words here)
| Wallet / Device | Backed Up? | Format | Primary Location | 2nd Location | Done |
|---|---|---|---|---|---|
| Ledger Nano X | |||||
| XUMMXRP + SOLO | |||||
| HashPackHBAR | |||||
| BifrostFLR + SGB |
Checklist
🔐
Exchange Access Instructions
Step-by-step guide for your executor to access each exchange
Critical
▼
Important: Most exchanges have a formal estate/bereavement process. Do NOT simply log in using the deceased’s credentials — contact each exchange’s estate team with a death certificate first.
Per-Exchange Estate Process
| Exchange | Estate Contact | Documents Required | Credentials Location | Done |
|---|---|---|---|---|
Checklist
🔒
Hardware Wallet Recovery Plan
Plain-language instructions for recovering your Ledger
Critical
▼
Checklist
🤝
Trusted Crypto Helper
Someone to guide your executor through the technical process
Recommended
▼
Why this matters: Crypto recovery is technical. A trusted, knowledgeable friend who can sit with your executor and guide her through the process protects against scams that specifically target grieving families. This person must have NO financial interest in your estate.
Your trusted crypto helper is the person your executor calls first when dealing with your digital assets. This should be someone who understands cryptocurrency — how wallets work, how to use a hardware wallet, how exchanges process inheritance claims. They act alongside the executor, not instead of them. Choose someone you trust completely with sensitive financial information.
How this person is related to you — e.g. “Brother”, “Close friend since 2010”, “Financial advisor”, “Crypto accountant”. Your executor uses this context to understand how well this person knew you and how much to trust their guidance about your intentions.
Primary phone number for your trusted crypto helper. Include country code for international numbers. Your executor should call this person before touching any hardware wallet or exchange account. If this person is also a guardian in TrustVault, make sure their contact details match.
Email address for your trusted crypto helper. This may be different from their TrustVault guardian email. Your executor will email them the access instructions and hardware wallet recovery guide from your estate documents.
Checklist
🛡
Anti-Scam Safety Guide for your executor
Grieving families are the #1 target for crypto scammers
Safety
▼
🚨 Read this to your executor now, before anything happens. Print this page and keep it with your estate documents.
Rules for your executor — No Exceptions
🗺
Token-by-Token Access Guide
Specific notes for each of your 13 crypto holdings
Your 13 Tokens
▼
Encryption Tools
AES-256-GCM — All operations run entirely in this browser, passphrase never leaves your device
Encryption and decryption are performed client-side only. Your passphrase is never sent to the server.
Encrypt
Type or paste the content you want to encrypt. This could be a seed phrase, a password, a personal message, or any sensitive text. The content is encrypted entirely in your browser using AES-256-GCM — it never leaves your device unencrypted. Click Clear All when done so nothing remains visible on screen.
This passphrase is never stored. You must remember it or record it somewhere secure — without it, the encrypted output is permanently unreadable. Use a passphrase that is long and memorable: 4–5 random words (e.g. correct-horse-battery-staple) are stronger than a short complex password. Use a different passphrase for each document.
Decrypt
Paste the encrypted text you want to decrypt. This is the output from a previous Encrypt operation — a long Base64-encoded string. You must use the exact same passphrase that was used to encrypt it. If even one character of the passphrase is wrong, decryption will fail completely.
Enter the exact passphrase that was used when this content was encrypted. AES-256-GCM decryption is all-or-nothing — even a single character difference produces a complete failure. If the passphrase came from someone else, confirm it character by character. Capitalization, spaces, and punctuation all matter.
Export & Backup
Download your vault data from the server
Vault Stats (Server)
-
Documents
-
Beneficiaries
-
Recipients
-
Witnesses
Export Vault
Download a JSON snapshot of all your vault data from the server. Documents remain encrypted — you need your passphrase to decrypt them.
Import / Merge (Offline Vault)
Import documents from an offline TrustVault backup or air-gapped vault file. Encrypted documents will be saved to the server.
Import a vault JSON file exported from TrustVault (either this online version or the USB air-gap edition). Encrypted documents are merged into your server vault — they remain encrypted and require your passphrase to decrypt. This is useful for migrating from the offline USB edition to the online server, or restoring from a local backup. Your existing vault data is not deleted; new items are added alongside it.
Settings
Profile and notification preferences
🔒 Vault Passcode
A passcode locks your vault after idle time. Even if someone accesses this browser, they cannot see your estate data without the correct PIN.
Status:
Not Set
After this many minutes of inactivity, your vault locks automatically and requires your passcode.
Profile
Used in document headers, distribution files, and audit logs. Use your name exactly as it appears on your government-issued ID. This is the name that will appear on all documents generated by TrustVault when the trigger fires — it must match your Will and legal identity precisely.
This is your vault login email — set when you first created your account. Check-in reminder emails are sent here. To change it, contact your vault administrator or create a new access code with the updated email.
💾 Save to External Device (USB)
CRITICAL
🚨 BACK UP REGULARLY. Your TrustVault data lives on the server. If the server is lost, reset, or corrupted without a backup, your estate plan is gone permanently. Export after every session where you make changes.
Everything included in the backup
📝 Estate Plan
✓ All encrypted documents (Will, Financial, Digital Assets, Letters, Medical, Legal, Trust)
✓ All beneficiaries with names, allocations, emails, notes
✓ All witnesses with names, emails, roles, confirmation status
✓ All recipients with names, emails, relationships
✓ Document-to-recipient assignments
✓ Your profile name and email
✓ All beneficiaries with names, allocations, emails, notes
✓ All witnesses with names, emails, roles, confirmation status
✓ All recipients with names, emails, relationships
✓ Document-to-recipient assignments
✓ Your profile name and email
⚖ Trigger & Security
✓ Complete check-in history (every timestamp)
✓ Last check-in date and current timer state
✓ Check-in interval & warning threshold settings
✓ All guardians with names, emails, voting records
✓ M-of-N voting threshold configuration
✓ Challenge period setting & death certificate record
✓ Last check-in date and current timer state
✓ Check-in interval & warning threshold settings
✓ All guardians with names, emails, voting records
✓ M-of-N voting threshold configuration
✓ Challenge period setting & death certificate record
📊 Crypto Estate
✓ Every checkbox tick across all 3 steps (Inventory, Authority, Access)
✓ All text inputs: exchange accounts, wallets, hardware device locations
✓ Attorney details, executor names, DPOA status
✓ Seed phrase storage plan (location references, NOT the words)
✓ Hardware wallet recovery instructions you wrote
✓ Trusted helper contact details & anti-scam notes
✓ Token-by-token access notes
✓ All text inputs: exchange accounts, wallets, hardware device locations
✓ Attorney details, executor names, DPOA status
✓ Seed phrase storage plan (location references, NOT the words)
✓ Hardware wallet recovery instructions you wrote
✓ Trusted helper contact details & anti-scam notes
✓ Token-by-token access notes
🔒 How It’s Protected
✓ Entire backup re-encrypted with AES-256-GCM
✓ Separate backup password (not your login or document passphrases)
✓ The .tvault file is completely unreadable without the correct password
✓ Safe to store on USB, email to yourself, or safety deposit box
✓ Restore on any device by running this installer → Import
✓ Separate backup password (not your login or document passphrases)
✓ The .tvault file is completely unreadable without the correct password
✓ Safe to store on USB, email to yourself, or safety deposit box
✓ Restore on any device by running this installer → Import
⚠ What is NOT backed up: Your encryption passphrases for individual documents. These are never stored anywhere by design. Store passphrases separately — sealed envelope, Signal “Note to Self”, or printed and kept with your estate documents.
Recommended routine: Export a new .tvault file after every session where you add or change anything. Keep one copy on a USB drive. Keep a second copy in a separate location — safety deposit box or trusted encrypted cloud folder. Test restoring at least once to confirm your backup password works.
Danger Zone
This deletes all your data from the server permanently. There is no undo.
License
TrustVault — MIT License
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
NOT A SUBSTITUTE FOR LEGAL ADVICE. CONSULT A QUALIFIED ATTORNEY FOR LEGALLY BINDING DOCUMENTS.
Access Codes
Each person you add gets their own private, isolated vault — completely separate from yours
🛡 You are logged in as Admin. Enter a name, email, and a private code for each family member. They will have their own vault with their own beneficiaries, wills, and settings — fully isolated from yours. Codes are stored as secure hashes and cannot be recovered, only revoked.
Add New Access Code
The name of the person you are granting vault access to. This creates a completely separate, isolated vault for them. They will have their own documents, beneficiaries, witnesses, check-in system, and settings — fully independent from yours. They cannot see your data and you cannot see theirs.
This email is used for check-in reminder notifications for this person’s vault. It is also used to associate their vault with their identity. Make sure it is an address they actively check.
This is the password this person uses to log in to their own vault. Choose something strong and share it with them securely — via Signal, in person, or written on paper handed directly to them. Access codes are stored as secure hashes and cannot be recovered by anyone, including the admin. If they lose their code, you must create a new one and delete the old one.
Active User Codes
⚠ Your master admin code (from docker-compose.yml) is always active and is not listed here.
Loading...