AmberKeyEnd-of-life planning for your digital life
When you're gone, your family finds a map — and a key.
AmberKey prepares two things: a plain-language packet that tells the people you leave behind exactly what to do, and a sealed vault holding the few secrets that genuinely need to outlive you. The vault opens only when a circle of people you chose agrees it's time.
Security-minded? Start with the threat model.
What you create, in about 30 minutes
Not a form you fill and forget — a small, concrete set of things your family can actually use: a map of your accounts, a sealed vault, a circle of people, and a rehearsal that proves it works.
Every account, colored by whether it's ready.
Plain steps for the person settling your affairs.
You pick who, together, can open the vault.
Prove it works before it has to.
Two layers, because most of it isn't secret
Layer 1 · The executor packet
The map. Which accounts exist, what to do about each one, in what order, with letters and per-service playbooks written for a stressed, grieving reader. It never contains passwords for banks, brokerages, or credit cards. Survivors handle those the legal way, and the packet shows them how.
Layer 2 · The bearer-secret vault
The key. Crypto wallet seeds, your password manager's master credential, Apple Legacy Contact access keys, device passcodes: secrets that are useless as metadata and priceless as bearer instruments. Encrypted on your device; opened only by your recovery circle, together.
The split matters. Your executor gets clarity immediately; the dangerous secrets stay sealed until several people you trust agree the moment has come, with a veto window that protects you if they're wrong.
The kit is paper, on purpose
Each person in your recovery circle receives a printed card carrying part of the vault key: twenty ordinary words and nothing else. No card names you, names its holder, or reveals who else has one. A found card identifies nobody and unlocks nothing on its own.
Paper needs no charger, no account, no app, and no company. Your circle needs nothing from us but a web page they can save, or never visit at all.
What if AmberKey disappears?
An honest answer, up front: your family still recovers everything. We designed for our own absence. Your vault is encrypted on your devices with standard, open formats. The recovery tool is a single file that runs offline in any browser, is open source, and is mirrored on GitHub, Codeberg, Software Heritage, and the Internet Archive. Your printed cards plus that file are enough: no AmberKey servers, no AmberKey company, no AmberKey anything.
Our servers never hold your keys or your plaintext, so there is nothing our bankruptcy could take with it. If we ever wind down, our terms commit us to twelve months' notice and a final release that converts the product to a fully offline flow.
Our bankruptcy is survivable
- Open specification, open recovery tool (Apache-2.0)
- Standard formats only: SLIP-39 + age + tar
- Tool mirrored in four independent places
- Recovery works fully offline, from printed cards
- 12-month wind-down commitment, in the terms
Pricing
Planning is free forever. The watch (check-ins, health checks, ceremony coordination) is $79 a year at launch, and free while we're in development. And leaving is always free: your continuity bundle and printed cards keep working without us, forever.
Thirty minutes now. Years of calm later.
The first session covers your password manager, Google, Apple, and your phone: the four accounts that unlock nearly everything else.
Start with the 30-minute setup