The cryptography is free and runs in your browser. Personal and Guardian deliver a complete digital archive you download immediately. Legacy ships physical kits, assembled individually in Orlando, within two weeks. Three tiers, one promise: we hold zero of your secrets.
Every tier sets up the same real threshold cryptography. What changes is how much of the human system around it we build for you, and whether we make it physical.
Your secret is encrypted with AES-256-GCM and the key is split with Shamir's Secret Sharing, entirely on your device. We see nothing. The split happens before the archive is generated.
Your own master record: ceremony ID, scheme parameters, holder names and shard fingerprints. Not for distribution. Lives with your will or trust documents so your estate knows the scheme exists and where to begin.
Reconstruction without our website, without internet, written for heirs with no technical background. Includes step-by-step instructions for reconstruction by hand if every digital tool fails.
A self-contained HTML recovery tool and a Node.js command-line tool, both bundled in the archive, both run with no network connection, both implement the same AES-256-GCM + Shamir algorithm that split the secret.
All three tiers use the same cryptography. They differ in how much of the human system around the cryptography we install, and, for Legacy, whether we make it physical.
Self-hosted on your own infrastructure: if you stop checking in, it delivers a message you wrote to people you chose. Choose how much we help: run it yourself, have us build it, or let us watch it.
Comfortable with the command line? The switch is open source. Verify it or build it yourself on GitHub.
Guardian is the tier most people choose, because it is where the scheme stops being a pile of cards and becomes a system the people around you can actually run. The cryptography is the easy part. The hard part is the moment, years from now, when someone contacts a holder with a convincing story and a deadline. Guardian is the set of documents that prepares each holder for exactly that moment, before it happens, in calm conditions, in writing.
Guardian installs a protocol into the people who hold the secret, not just a card in their drawer. If you are protecting something that matters and want the holders to know what to do when it matters, this is the tier.
Legacy is the same protocol as Guardian, made physical and set up with you. The documents are identical; what you are paying for is the time we spend, and the materials that make holders treat the scheme with the gravity it deserves.
The sixty-minute live setup call is where the cryptographic split actually happens. You perform it on your own device while we walk through the procedure with you in real time. We see nothing. The call ends; the scheme exists.
Legacy is for someone who wants to do this once, properly, with help. The cryptography is identical to Guardian. What changes is the gravity of the objects, and the time we put in to set it up with you.
These physical materials ship with Legacy only. Every component is chosen to be archival, tamper-evident, and obviously serious, so holders treat the materials with the gravity they deserve.
100% cotton, acid-free, lignin-free. Designed for fifty-year archival use. Each card carries a single shard in the Threshold Vault compact recovery format, with reconstruction guidance and a QR code on the back.
Signature paper with a sealed perimeter and a holographic strip. Any attempt to open the envelope leaves visible evidence. Holders can verify their shard has not been examined.
A traditional sealing wax in deep oxblood with a brass sigil stamp. Not for show: wax is the cheapest, most reliable physical tamper-evidence ever invented, and it survives temperatures paper does not.
The cryptography runs in your browser. The kit arrives by mail. The scheme outlives us, or never depended on us in the first place.