ForeverVault Features & Security

ForeverVault is built on client-side encryption: your files are encrypted in your browser, before they leave your device, and they are stored and transmitted encrypted. Your password is never sent to us.

We also hold a recovery key for your account, and we think you should know that before you sign up rather than after. It is what lets you reset a forgotten password without losing everything, and what lets us deliver your documents to your family when you are no longer here to enter a password.

ForeverVault staff do not view or browse your files. The people who can see them are you, anyone you share with or nominate, and — only if the law requires it — a party named in a valid legal order. Our systems restrict the recovery key to five jobs — a password reset you request, legacy delivery, delivering an item you shared, a trusted contact release, and sending an emergency message using a contact detail you stored — and anything else is refused by the software itself. Every use of the key is recorded. The full explanation is in our FAQ.

The plan limits and feature list below match Plans. Prices and upgrade buttons are on that page.

Storage and limits

Documents and secret notes both count toward your item limit and storage.

Plan Items Storage Max upload
Basic 3 500 MB 50 MB
Premium 500 5 GB 100 MB
Platinum Unlimited 10 GB 250 MB

Basic — included on every plan

  • Secure document vault for PDFs, images, and notes.
  • Client-side encryption: your master key is encrypted in your browser with a key derived from your password.
  • The ForeverVault recovery key is held in AWS Key Management Service, restricted to five named purposes, and every use is logged.
  • Two-factor authentication (SMS or authenticator app).
  • Secret Notes.
  • Scan with your phone or computer camera to save a multi-page PDF.
  • Immediate Share: send a document or note to a specific person now, and change or revoke access.
  • Geo-redundant encrypted backups. No plaintext files stored on the server.

Premium — delayed, legacy, and audit tools

Everything in Basic, plus:

Personal Wallet

Store logins, cards, IDs, insurance, and notes behind an extra PIN.

Delayed and legacy sharing

Schedule a share for a later date and cancel it before it goes out, or release an item only after verified death or long inactivity.

Trusted Contact

Name people who can receive access under rules you set. Adding a Trusted Contact does not open your vault by itself.

Security Activity and Access History

See account-level events such as logins and device activity, and a history of who opened what.

Platinum — legacy and blockchain proof

Everything in Premium, plus:

Blockchain proof of document existence

ForeverVault creates a SHA-256 fingerprint of the file and anchors it with OpenTimestamps on the Bitcoin blockchain. That proves the document existed at a point in time without publishing the file itself.

Automatic Legacy Bundle Builder

The Legacy Portfolio Builder organizes the papers your family would need and can prepare a bundle for the people you name.

Legacy Binder (PDF export)

Export a formatted PDF binder of those critical documents.