This is what it does
Try it
LegacyVault splits a secret three ways with Shamir and releases it to the people you named only after an inactivity dead man’s switch fires. Create a vault to start.
Runs in your browser — nothing to install
- What it does: splits a secret into three Shamir shards and releases it to a named recipient only after the inactivity ladder for that secret fires.
- What to try: create a vault, split the key 2-of-3, add an encrypted secret for a beneficiary, then run the switch check through to a release.
- What it does not do yet: there is no hosted service and no real e-mail, SMS or push delivery — release notices land in the demo mailbox on the page.
Status
What is built, and what is not
- The running build is the product’s own GUI. The server role it needs runs inside the page against this browser’s storage — no server, no build step, no network call, and nothing leaves the device.
- The vault runs end to end, and it is proven by running it. The shard-parity check reports PARITY PROVEN and the headless suite reports ALL GREEN 61/61, covering the 2-of-3 split, tamper rejection, single-use and expiry, the reminder ladder, and a full create → release → claim → decrypt.
- It is not a hosted service, and it is not identity verification. A vault lives with the browser profile that created it, the paper shard is text rather than a scannable code, and a release is proved by the single-use link plus that shard.
Under the hood
What it is built on
- Stack
- Plain HTML, CSS and JavaScript in the browser: WebCrypto for PBKDF2-SHA256 at 310,000 rounds and AES-256-GCM, and a browser port of Shamir 2-of-3 over GF(256).
- Runs where
- Entirely in your browser. The server role is a single module that runs inside the page; a Node copy of it exists for local use and binds the loopback address only.
- Data
- Ciphertext envelopes, the server shard and token hashes in this browser’s storage. No master password, no master key and no plaintext leaves the device.
- Payments
- None. Billing is outside this build, so nothing here can charge anyone.
Tell us what broke
What a handover looks like from the recipient’s side, how a vault is kept, or anything the build did that it should not have — the feedback form is the way in.