Inactivity Switch · Zero-Knowledge · Arweave Permanent Storage

When you can no longer speak,it speaks for you._

PingVaults is a zero-knowledge digital vault — encrypt wallet keys, passwords, important notes, or anything you want to preserve forever, store it on-chain, and access it anytime. Add an inactivity switch: if you go silent for too long, decryption hints are automatically delivered to your trusted emergency contact.

// No password · Email verification login · Cancel anytime

local_encryption.ts
// 1. Plaintext (In Browser Memory)
const vaultData = {
  secret: "abandon ability able...",\n  contact: "family@email.com",\n  notes: "Wallet in safe."\n};\n\nconst key = deriveKey(answers);\nawait encrypt(vaultData, key);
// 2. Ciphertext (Sent to Server)
// No keys, no answers, no plaintext ever leaves your device
0x7a8b9c...[encrypted_blob]... e4f5a6b7c8d9e0f1a2b3c4d5e6f7 a8b9c0d1e2f3a4b5c6d7e8f9a0b1 c2d3e4f5a6b7c8d9e0f1a2b3c4d5 f6a7b8c9d0e1f2a3b4c5d6e7f8a9

// how_it_works

Three steps. Zero trust required.

STEP 01

Passwordless Login

Email OTP or Google login — no password to forget or leak. The platform verifies your identity only; your encrypted secrets stay untouched in the vault.

STEP 02

Browser-Local Encryption

Your knowledge-based answers (name, ID, custom questions) derive an AES-256-GCM key via PBKDF2 — entirely in your browser. The server receives only ciphertext, never your decryption keys.

STEP 03

Inactivity Switch Delivery

Configure your ping schedule. If you stop responding, the system sends your emergency contact the key schema, guiding questions, and an offline decryptor link. Answers are never transmitted.

// core_features[]

Zero-Knowledge Architecture

Zero-Knowledge

Identity (email) and decryption (personal answers) are fully separated. Your backend record contains only ciphertext — no passwords, no keys, no plaintext ever stored server-side.

Arweave Permanent Storage

Arweave

Encrypted vault data is uploaded to Arweave's decentralized blockchain, generating an immutable TxID. Even if PingVaults shuts down, your ciphertext remains accessible forever via any Arweave gateway.

Open Source & Verifiable

Open Source

Full source code on GitHub. The /verify page provides SHA-256 build-time source hashes and step-by-step JS bundle integrity checks — so you can confirm exactly what code is running.

Configurable Inactivity Switch

Inactivity Switch

Set your initial wait (up to 365 days), reminder interval, and max ping count. AWS Lambda checks daily; your emergency contact is notified only after all reminders go unanswered.

// trust

You don't have to trust us — verify it yourself

Our architecture makes "going rogue" technically impossible. Three independent proof chains anyone can check — no trust in our promises required.

OPEN SOURCE

Encryption core is fully open source

PBKDF2 key derivation, AES-256-GCM encryption, offline decryptor — every line that touches plaintext is on GitHub. Audit it, run the tests, clone it.

CSP ENFORCED

Browser enforces outbound request limits

Content-Security-Policy is enforced by your browser, not our server. JS can only reach whitelisted origins. Even if answers were written into a request, the browser itself would block it.

DEVTOOLS PROOF

Network tab shows exactly what's sent

Open DevTools → Network while encrypting. Inspect the /api/vault/save payload. You'll see ciphertext, salt, iv — zero answer fields. See for yourself.

decrypt.html — offline mode
$

Offline Decryptor — No Server, No Account

Your emergency contact needs zero technical skills. Download this standalone HTML file, open it offline in any browser, paste the TxID + metadata JSON + their personal answers — and the vault decrypts instantly. No internet, no login, no PingVaults dependency.

// Single HTML file · Pure WebCrypto · No external requests · Works forever

Download Offline Decryptor

$ sudo ./create_vault.sh

Your digital legacy, secured today.

Free to start. Zero-knowledge crypto inheritance planning for individuals who take privacy seriously.

Create My Vault →