Spare Key Get your key
Keyholders and locks

Who gets in, when, and why nobody else can.

Everything is locked on your own phone or laptop before it leaves. A break-in at our end hands a thief a pile of locked boxes and nothing to open them with.

Keyholders

Four ways a door opens.

Your keyholders are the people you trust to ask: one to five of them, and two is best. Nothing opens for anyone but you until one of these happens, and three of the four give you time to say no. The full steps are below.

You share it.

The house manual, the Fridge Card, the wifi password. Whenever you like, to whoever you like. No waiting, because you're the one holding the door.

A keyholder asks, because you can't.

You're emailed straight away. Seven days later the everyday file opens to the people you chose. The last chapter stays shut.

Two keyholders say you've died.

Or your only keyholder does, if you've named just one. You're told anyway, just in case. Fourteen days later the last chapter opens, note by note, each to its own person.

Silence.

With Keeper: six months without a sign-in and a month of email reminders, then your keyholders are asked to check on you. Silence alone never opens anything.

Security

We store your vault. We can't open it.

A veto is one tap and your passphrase. Every sign-in, request, release and opening is written to a log you can read.

Locked on your device.

Your passphrase never leaves your hands. Each note and document has its own small key, locked by yours, so sharing one note hands over one small key and never the master.

We can't read it.

Our server only ever holds locked boxes. Until your keyholders hand over their pieces after the waiting time, nobody can read a word, us included.

No trackers.

No ad pixels, no analytics that leave the building. This page carries none, and you're welcome to check.

Take it all out any time.

One button downloads everything, unlocked, as a zip: every note, photo and recording, plus a readable copy of the whole vault. It opens without us.

If you lose the passphrase. You've lost the vault, which is the price of us not having a key. That's why you print a recovery sheet the day you open it. Keep it with the will. The code on it sets a new passphrase, and nothing else can.
Step by step

How your last chapter opens.

The same five steps every time. Every one is written to a log you can read.

  1. A keyholder asks. They sign in to their own Spare Key account and say you've died. An email alone can't start it.
  2. You're emailed. Straight away, with a link to stop it.
  3. A second keyholder agrees. If you've named two or more, nothing moves until another one confirms. If you named one, their word is enough.
  4. Fourteen days pass. You're emailed again when the clock starts. One tap and your passphrase stops it at any point.
  5. The pieces come together. Each keyholder holds a locked piece of the key. Once the waiting time is over, their pieces are handed over and each person gets a private link to the notes addressed to them, and nothing else.
What if

The hard questions.

What if two keyholders say I've died and I haven't?

You're emailed as soon as the first one asks, and again when the second agrees. You then have 14 days to stop it. Choose keyholders who would never act together against you, and name more than two if you can.

What if I'm in hospital and can't answer?

A keyholder can ask to open the everyday file instead: the house manual, bills and the like. That opens after 7 days. Your last chapter stays shut until keyholders say you've died.

Can a keyholder read my notes early?

No. A keyholder's piece of the key is locked and useless on its own. The notes stay locked on our server until a release finishes, and then only the person each note is addressed to can open it.

What if a keyholder's email is hacked?

Asking needs them to sign in to their own Spare Key account with their own passphrase. Access to their email isn't enough.

What does the recovery sheet do?

Its code, with your email address, sets a new passphrase and opens your vault. Treat it like a spare house key and keep it with your will. If you think someone has seen it, make a new sheet in Settings and the old one stops working.

Is anything not locked?

Two things you choose yourself. The Fridge Card page is readable by anyone with the card, so an ambulance crew can use it. And a Paper Edition PDF you send us to print is readable by us and our printer until the book is posted.

Get your key

Open your vault today.

$199 once. No subscription, and a 30-day change-of-mind refund. Add Keeper for $49 a year for check-ins and more room.

Giving it? Buy it, then send them the sign-up link from your receipt page. They open it, and you never see inside. Already have one? Sign in.