We would rather tell you exactly how INHERIT works today than make a promise we can't yet keep. This page is written plainly, and we update it as the system hardens.
Your capsule's content — your letter, voice, video or photo — is encrypted in your browser, before it is uploaded, using AES‑256‑GCM. What reaches our storage is ciphertext. Traffic is protected in transit with TLS 1.3.
Each capsule has its own encryption key. That key is never stored in our database. It travels only inside the private link's URL fragment (the part after #), which browsers never send to any server, and it is cached in the opener's own browser so the moment survives a refresh.
Your content is encrypted with keys we don't hold, so no one at INHERIT could read it regardless. Our commitment is to give advance notice and an export path so you can retrieve your ciphertext and keys before any wind‑down. This is a stated intention today, not yet a contractual guarantee.
If you sent a capsule, you can re‑share its link from your vault. If you received one and never opened it on a device you still use, and you no longer have the link, we may be unable to recover it — by design, because the key isn't on our servers.
Found something? Please email security@inheritthemoment.com. We read every report and respond.