Create your vault

Your vault is encrypted in your browser before it reaches our servers. Set a strong passphrase — we cannot recover it if lost.

Name is required.
Valid email required.
Passphrase must be at least 10 characters.
Passphrases do not match.

Your passphrase encrypts your vault using AES-256 directly in your browser. It never reaches our servers and cannot be reset. Keep a copy somewhere safe.

Already set up a vault? Sign in here

Sign in

Sign in to access your vault.

Lost access to your email? Forgot password?
or
No account yet? Create one here

Create account

Set up your account. You'll create your vault passphrase in the next step.

Name is required.
Valid email required.
Password must be at least 8 characters.
Passwords do not match.
Already have an account? Sign in here

Welcome back

Enter your vault passphrase to decrypt and load your vault.

Incorrect passphrase. Please try again.
No vault yet? Create one here

Reset password

Enter your account email and we'll send you a reset link.

Lost access to your email? Recover your account

Set new password

Choose a new password for your account.

Active
Next check-in:
Unsaved changes

Your vault

Recipients

The people who will receive access to your vault if you stop checking in. Each recipient gets their own secure link.

Settings

Your profile
This name appears on your vault when it's delivered to recipients.
Check-in schedule
How often would you like to confirm you're okay? You'll receive an email with a one-click confirmation link.
Check in now
Confirm you're okay and reset your check-in timer. Useful before travelling or going somewhere without reliable email access.
Pause check-ins
Going on holiday or know you'll be unreachable? Pause your check-in schedule. Your vault stays safe and no escalation emails will be sent while paused. Resume when you're back.
Passphrase hint
Leave an optional hint to help your recipients remember the passphrase. This is not encrypted — it will be visible in the delivery email and on the vault open page.
0/200
Vault status
StatusActive
Next check-in due
Last check-inNever
Missed check-ins0
Check-in streak
Check-in frequencyMonthly
Export vault
Download a decrypted, human-readable copy of your vault as a PDF. Use it as a physical backup — print it, seal it, and store it somewhere safe.
Vault size — MB of 3.5 MB
Plan & Billing
You're on the Free plan — up to 5 entries and 1 recipient. Upgrade for unlimited entries, more recipients, and file attachments.
Personal — £5/mo · unlimited entries · 3 recipients
Family — £9/mo · 2 vaults · 5 recipients each
Sign out
Removes your vault from this device. Your encrypted vault remains on our servers — sign in again with your passphrase to access it.
Danger zone
Permanently delete your vault and all associated data — entries, recipients, check-in history, and your account. This cannot be undone. Your Stripe subscription (if active) will be cancelled immediately.
A Nexus Company · holdfast-co.uk
Confidential
This document contains the decrypted contents of a Holdfast vault. It was produced at the owner's request. Store securely — do not leave unattended.
Help & Support
No — not immediately. There is a grace period after a missed check-in before escalation emails begin. Log in and use the "Check in now" button in Settings to reset your timer immediately.
This usually happens when your browser's local storage has been cleared. Your vault is safely stored on our servers. Sign in on your usual browser and device and your entries will reappear.
This occasionally happens if the payment confirmation is briefly delayed. Wait 10 minutes and sign out then back in. If your plan still shows as Free after that, contact us with your account email and payment confirmation.
Recipient access links are valid for 30 days from delivery. If the link has expired, contact us — we can issue a new delivery token manually.
You can delete your account from Settings → Account → Delete account. This permanently removes your vault, entries, recipients, and all associated data and cannot be undone.
Your vault is encrypted using AES-256-GCM with a key derived from your passphrase using PBKDF2 with 250,000 iterations and a unique random salt. Encryption and decryption happen entirely in your browser — your passphrase and vault contents never reach our servers.
No results found
View all help topics →
Still need help?
We respond within 48 hours for Personal and Family plans, same day for Firm.
0 / 500