Protect your critical recovery phrases, legal instructions, and sensitive evidence. Everything is encrypted inside your browser before it ever leaves your device. Check in on your schedule to keep the timer quiet—or enter your Duress PIN under threat to open a harmless decoy while silently alerting your emergency contact.
Click any scenario below to see how ZeroCanary responds:
Standard password managers protect you from remote hackers, but they fail completely if you are incapacitated, detained, or forced to unlock your device in person. ZeroCanary solves all three.
If an accident happens to you tomorrow, can your family or co-founder recover your hardware wallets, bank mandates, and server keys? With ZeroCanary, you don’t have to hand over your keys while you are alive—they are only released if you stop checking in.
When crossing borders or operating in hostile jurisdictions, refusing to unlock a vault raises immediate suspicion. ZeroCanary gives you a second Duress PIN that unlocks a believable, harmless decoy vault while silently notifying your security team.
Timestamp sensitive documents with a public SHA-256 Proof of Existence before going into the field, and configure a 24-hour or 48-hour Dead Man’s Switch. If you are detained and miss your check-in, your evidence is automatically dispatched to your newsroom or counsel.
You do not need to install any software or manage complex cryptographic keys. Everything runs directly in your browser using standard W3C WebCrypto.
Enter the confidential information you want to protect—plus a harmless decoy note that will be displayed on screen if you are ever forced to unlock under duress.
Choose your Primary PIN, your Duress PIN, and how often you want to check in (every 24h, 48h, 72h, or 7 days). Both vaults are encrypted in your browser with AES-256-GCM.
Only unreadable ciphertext is uploaded to Cloudflare R2 (European Union jurisdiction) and anchored to an autonomous countdown timer with a signed SHA-256 receipt.
Check in with your Primary PIN to reset the clock. If the timer reaches zero—or if you enter your Duress PIN—your real encrypted package is dispatched to your trusted contact.
Test the real production engine right now. Encrypt a vault in your browser, seal it to European Union R2 storage, and test both your Primary PIN and Duress PIN in real time.
Your client-side AES-256-GCM encryption receipt, Vault ID, and signed SHA-256 timestamp will appear here after sealing.
Enter your Vault ID and either your Primary PIN (resets timer & unlocks real secret) or your Duress PIN (unlocks harmless decoy while silently firing emergency delivery).
Notice how both PINs return an identical structure so an observer looking over your shoulder sees zero warning signs.
Enter a Vault ID and PIN on the left to inspect the live server attestation and decrypted browser payload.
Verify mathematically when a vault payload was sealed—or compute a SHA-256 hash of any text right in your browser without uploading the text.
Signed HMAC-SHA256 timestamp receipt from the ZeroCanary EU Registry.
Query any 64-character SHA-256 digest to verify its registration timestamp and attestation signature.
Password managers and cloud drives are built for everyday convenience—not for physical coercion, border searches, or sudden incapacitation.
| Capability | Standard Password Managers | Cloud Drive / Inactive Account | ZeroCanary Continuity Vault |
|---|---|---|---|
| Forced Unlock Protection (Duress PIN) | None — unlocking reveals all real secrets | None — full account exposed | Yes — opens believable Decoy Vault + silent alert |
| Dead Man’s Switch Windows | Manual emergency access (days/weeks delay) | 3 to 18 months of inactivity | 24 hours, 48 hours, 72 hours, or 7 days |
| Zero-Knowledge Browser Encryption | Yes | No — provider holds decryption keys | Yes — W3C WebCrypto AES-256-GCM in browser |
| Public SHA-256 Proof of Existence | No | No | Yes — signed timestamp receipt for every seal |
| Storage Jurisdiction | US / Mixed Cloud | US Big Tech Cloud | Strict European Union R2 + ICP Canister Timer |
Pay once for a high-risk trip or investigation, or run continuous year-round protection for your estate, keys, and organization.
Ideal for a single border crossing, investigative trip, or notarized legal escrow.
Continuous protection for founders, crypto holders, journalists, and families.
For newsrooms, legal practices, and security teams requiring multi-custodian continuity.
No. When you create a vault, your browser encrypts two separate payloads (your Real Secret and your Harmless Decoy). On the server, both PIN hashes are evaluated in constant time and return the exact same HTTP 200 JSON structure. Your browser simply decrypts and displays the Decoy Vault on screen while the server silently dispatches your emergency notification in the background.
Never. Encryption happens entirely inside your web browser using the W3C WebCrypto API (PBKDF2-HMAC-SHA256 with 210,000 iterations and AES-256-GCM). Only the encrypted ciphertext and SHA-256 verification digests leave your browser. Even if our EU storage were subpoenaed or breached, attackers would only see unreadable ciphertext.
You choose your own check-in window (24h, 48h, 72h, or 7 days) based on your situation. If you fail to check in before the countdown expires, ZeroCanary releases the encrypted recovery bundle to your designated trusted contact (such as your lawyer, spouse, or co-founder), who can unlock it using the recovery instructions you shared with them.
Immediately after sealing a vault in the Studio, you can download a self-contained JSON Recovery Kit containing your encrypted ciphertext, initialization vectors, salt, and signed server attestation. Even without our web interface, any standard WebCrypto or OpenSSL tool can decrypt your vault using your PIN.