Digital Legacy Vault

When you can't be there, your words still can.

Lastkey keeps your important instructions, documents, and recovery info encrypted and safe — and releases them to your family only when needed.

Set up in 5 minutes. Beneficiaries join for free.Zero-knowledge encryption means only you control access.

How Lastkey works

Set it up once, keep it current with quick check-ins, and know your people can act when it matters.

1) Create your vault

Choose an interval (e.g. 30 days). Lastkey tracks missed check-ins with a 3‑strike engine.

2) Add essentials

Use guided templates to add “Read this first”, documents, notes, and recovery info — encrypted before upload.

3) Invite beneficiaries

They accept via a secure claim link and can be ready without ever seeing your vault content early.

4) Check in (or release)

A quick “I’m alive” resets the timer. If you stop checking in, release can be triggered.

For families

Keep clear instructions for executors and loved ones — accounts, utilities, insurance, and “who to call”.

For security‑forward users

Zero‑knowledge storage and local decryption so your vault stays private even from the service provider.

For high‑risk travel & work

Use shorter intervals, pause/snooze when needed, and keep beneficiaries prepared with minimal friction.

Zero‑knowledge designClient-side encryption3‑strike check‑in engineBeneficiaries are freeMinimal PII by default

Make the hard day easier.

When something happens, your family shouldn’t be stuck guessing which accounts exist, which bills are due, or where documents live. Lastkey gives them a clear, secure path forward.

Templates-first setup

Capture essentials fast with guided templates, including a pinned “Read this first” note that keeps things clear.

3‑strike check‑ins

Quick check-ins keep everything calm. If you stop checking in, the 3‑strike engine helps prevent false triggers.

Minimal PII by default

Collect only what’s needed for your vault and beneficiaries. No extra data unless you choose it.

Zero‑knowledge by design

Notes and files are encrypted before upload. Lastkey stores ciphertext and can’t read your vault contents.

What you can store

Keep it simple with six familiar categories that map to the essentials.

Identity
Money
Home
Insurance
Devices & accounts
Wishes & messages

Security & privacy

Lastkey is designed so the service can’t read your vault content — even if it wanted to.

Zero‑knowledge invariants
  • Vault items are encrypted client-side before upload.
  • Lastkey stores ciphertext + minimal metadata for scheduling.
  • Decryption happens locally for owners and beneficiaries.
  • Invite links use a URL fragment key that never reaches the server.
Minimal PII

Collect the minimum needed for core functionality. Beneficiary emails are used for invites, then replaced with account IDs after claim when possible.

Resilient key flow

Vault access is based on secret shares and local reconstruction, helping reduce single points of compromise.

Built for trust (not fear)

The goal is simple: your people can act quickly with clear instructions, while your private information remains private until release conditions are met.

FAQ

The short answers to the questions people ask before they trust a vault.

What does “zero‑knowledge” mean here?

Your vault content is encrypted before it leaves your device. Lastkey is designed to store ciphertext and can’t decrypt notes or files without the user-held keys.

How fast can I set this up?

Most people can create a vault, add a beneficiary, and capture essentials in a few minutes using templates and a pinned “Read this first” note.

What triggers a release?

A server-authoritative 3‑strike check‑in engine: if you miss check-ins across the configured window, your vault can be released to beneficiaries.

Can Lastkey read my vault?

No — Lastkey is designed so decryption happens locally. The backend stores encrypted data plus minimal metadata needed for scheduling and user experience.

What does Lastkey store about me?

Only what’s needed to run the service. Vault contents are encrypted before upload, and we aim to keep personal data minimal by default.

How do beneficiary invite links stay safe?

Invite links can include a decryption key in the URL fragment (the part after #). Browsers don’t send fragments to servers, so the server never receives that key.

What can beneficiaries do before a release?

They can accept their role via the claim flow so they’re ready. They won’t see your vault content unless release conditions are met.

Can I revoke or reissue an invite?

Yes. Owners can revoke and reissue invites, and beneficiaries can be managed over time as your situation changes.

Is this a replacement for a will?

No. Lastkey is a secure place for instructions, documents, and access details — it doesn’t replace legal estate planning.

Articles

Learn how to protect your digital legacy.

Practical guides on planning, security, and the steps to make things easier for the people you trust.

View all articles