Letter encryption
Letters can be password-encrypted or end-to-end encrypted. Password-encrypted content is encrypted in the browser before saving; the server stores only ciphertext and a hint.
Back to dashboard
Security & trust rules
What you need to know about how your data is protected
TimeWill's goal is not to collect more data, but to deliver the right information to the right people when it matters. We reduce risk through encryption, heartbeat checks, contact confirmation, backend audits, and minimal display.
No sensitive plaintext by defaultContact confirmationMulti-stage heartbeat
Vault encryption
Vault content is encrypted with AES-256-GCM. The backend shows only counts, categories, and status by default, never plaintext.
Advanced end-to-end keys
Premium users can generate RSA keys and encrypt content written to themselves with a public key; the private key is kept by the user.
Multi-stage heartbeat
A heartbeat is not proof of death, but a signal of missed check-ins. The system uses T1-T4 staged reminders, confirmations, and handover to reduce false triggers.
Trusted contact confirmation
Contacts can confirm their identity via email. Users can also confirm offline and skip email confirmation; the system records the status.
Revocable & deletable
Drafts, undelivered capsules, contacts, and vault entries can be managed in the dashboard. Delivered content is handled per user settings.
What we will not do
- • Never show vault plaintext to the backend.
- • Never export passwords, private keys, or seed phrases in legal PDFs.
- • Never display unmoderated memorial messages publicly (unless the user enables auto-display and no banned terms are matched).
What we suggest you do
- • Add at least one trusted contact.
- • Enable encryption for important letters, or write a clear password hint.
- • Regularly review your heartbeat settings and legal PDF contents.
More details
For the boundaries of legal effect, disclaimers, and digital estate guidance, please read the legal notice.