If Something Happens to You, Your Family Gets Everything. Automatically.

You can reset it. Request a password reset link from the sign-in page and we'll email it to you - no recovery codes to keep track of, and you lose nothing in the process.

Your notes, filenames, and metadata are encrypted at rest with AES-256-GCM, and every transfer is protected in transit. Files are stored as private objects locked to your account. Learn more on our Under the Hood page.

Yes — but you won't be charged until your 30-day trial ends, and you can cancel anytime in one click. We'll email you before your trial ends.

Every plan comes with a 30-day free trial — a full month to try everything, and you can cancel anytime before the trial ends without being charged. After that, monthly plans simply cancel at the end of the current period — you're never on the hook for more than one month at a time.

Your deadman switch still fires. Once you've set up a switch with documents and beneficiaries, it triggers on schedule regardless of subscription status — that's our always-fires guarantee. While your subscription is inactive your account becomes read-only (you can still log in, view, download, and check in via email/SMS reminders), but you can't upload new files or modify switches until you resubscribe. Your existing files and switches stay protected indefinitely.

Your data is never locked in. You can download every file you've stored at any time, so you always hold your own copy independent of us. Access is locked to your account and to the beneficiaries you name — nobody else gets a way in. The automatic delivery does depend on the service running, which is exactly why we keep your files fully exportable. We recommend downloading a copy of your files periodically. If we ever wind down, we commit to at least 6 months' notice and a guaranteed export window.

Any file type - PDFs, images, documents, spreadsheets, and more. Common uses include wills, insurance policies, tax documents, and family photos.

When a deadman switch triggers, beneficiaries receive a unique secure link via email. They don't need a Killswitch account - they can download their assigned files directly.

There is a grace period you can set to give you extra time to check-in. If one does trigger and you didn't want it to, you have full control of the share links and can revoke them immediately.

Yes. When you set up a switch, choose "On a date" instead of a check-in schedule and pick the exact date and time in your timezone. You'll get reminders 7 days, 3 days, and 1 day out, plus a final heads-up 3 hours before it fires — and you can edit or pause it any time until then. No check-ins required, which makes it a natural fit for a birthday letter, an anniversary message, or documents you want released on a specific day.

Your notes and metadata are encrypted at rest, and every transfer is protected in transit. A file only becomes accessible to a beneficiary in two cases you control: you share it, or you add it to a deadman switch. Each share is its own record with its own access token, so you can revoke any one at any time without affecting the others. All share access is logged with IP and location for full transparency. Learn more on our Under the Hood page.

Only when you say so, and only for as long as you say. Claude can't reach anything until you click "Unlock for Claude" to start a time-boxed session — no session, no access. While a session is open, Claude can read and author across your library, so treat it as granting access to your library rather than to particular files: access follows the session, not individual items. End the session and access stops immediately. Learn more on our Under the Hood page.

Your data is never deleted when you cancel. At the end of your billing period your vault becomes read-only: you can still log in, view and download everything you've stored, and keep checking in to your deadman switches — you just can't add new files or edit switches until you resubscribe. If you have an active switch with items and beneficiaries, your account stays alive indefinitely so the switch can still fire on schedule. Cancelling alone never schedules deletion — we only do that when we can no longer deliver email to your account (repeated hard bounces), and we send several warning emails first.