Security
Private by design, not by promise.
Here is exactly what protects your messages today, and what we can and cannot see.
Encrypted on your device
Letters, photos and videos are encrypted on your phone or computer (AES-256-GCM) before they are uploaded. What we store is unreadable without your keys.
A vault password only you know
Your keys are derived from your vault password with Argon2id. The password never leaves your device and we cannot reset it.
A recovery code
When you create your vault you receive a recovery code. It is the only way back in if you forget your vault password, so keep it somewhere safe.
Signing in is separate
You sign in with a code sent to your email. Even if someone gets into your email, your vault stays locked without your vault password.
Opened only by your recipient
Each recipient's messages need two halves to open: one we keep encrypted, and one that comes from the answer to your question. Neither half alone opens anything, and the answer is never sent to us.
Contact details encrypted
Recipients' email addresses and your secret questions are stored encrypted, and are used only to deliver your messages.
Stored in the European Union
Your data is stored in Frankfurt, Germany. Our emails are sent from Ireland.
What we can see
Your account email and name, when you last confirmed you're here, how many items you have prepared and how large they are. We cannot see what you wrote, the photos, the videos or the answers to your questions.
Honest limits
- If you lose both your vault password and your recovery code, nobody can open your messages, not even us.
- Messages reach recipients by email. Keep their addresses up to date.
- UntoldToYou is not a legal will and does not replace one.