INHERIT
The honest version

Security

Last updated: July 2026 · MVP

We would rather tell you exactly how INHERIT works today than make a promise we can't yet keep. This page is written plainly, and we update it as the system hardens.

What is encrypted

Your capsule's content — your letter, voice, video or photo — is encrypted in your browser, before it is uploaded, using AES‑256‑GCM. What reaches our storage is ciphertext. Traffic is protected in transit with TLS 1.3.

Where the keys live

Each capsule has its own encryption key. That key is never stored in our database. It travels only inside the private link's URL fragment (the part after #), which browsers never send to any server, and it is cached in the opener's own browser so the moment survives a refresh.

Because we don't hold the key, we cannot read your capsules on our servers. The trade‑off: if the only person who holds a link loses it and hasn't opened it on a device they still use, that capsule may become unrecoverable. Keep your links.

Who can open a capsule

What we're still hardening

If INHERIT shuts down

Your content is encrypted with keys we don't hold, so no one at INHERIT could read it regardless. Our commitment is to give advance notice and an export path so you can retrieve your ciphertext and keys before any wind‑down. This is a stated intention today, not yet a contractual guarantee.

If you lose a link

If you sent a capsule, you can re‑share its link from your vault. If you received one and never opened it on a device you still use, and you no longer have the link, we may be unable to recover it — by design, because the key isn't on our servers.

Reporting a vulnerability

Found something? Please email security@inheritthemoment.com. We read every report and respond.

Home · Privacy · Terms · Delivery · Delete my data