A dead man's switch for the messages that matter

The letter your family will need,
delivered only if you can't.

Compose the digital messages you'd want them to read. Reset a weekly timer to keep them from sending.

Start · 30-day trial · $1/month No card until the trial ends.

You already know who it's to. You've drafted it in your head on long drives and lost it every time. Some of it is instructions: the safe combination, the account numbers, the passwords no one else knows. Some of it is a record. What happened, when, and who needs to know. Some of it isn't practical at all. Write it down. Send it only if you can't.

How it works

Three steps, quietly.

Step 01

Write your letters

Passwords, instructions, records, a note to your kid on their eighteenth birthday.

Step 02

Reset weekly

One tap from your phone. As the deadline nears, we email you reminders so you can reset in time.

Step 03

Only if you don't

A grace period you set, from 0 to 24 hours. Then every letter dispatches. Reset any time and nothing happens.

Time-sensitive dispatch? Set the grace period to zero. When your timer hits it, the messages go out immediately with no window for reset.

Safeguards

The failsafes we thought about first.

The whole product is a promise that nothing dispatches unless it should, and everything dispatches when it must. Two categories of protection: against the letters going out by mistake, and against anyone else being able to trigger, read, or block them.

Against misfire

Nothing goes out unless it should.

  • Multiple reminders before the deadline. Configurable per user, both count and timing.
  • Grace period after the timer expires. From 0 to 24 hours, your call. Reset during it and nothing dispatches.
  • One-tap reset from your phone. PWA-installable on iOS and Android. Home-screen icon takes you straight to the reset page.
  • Every reset is logged. You can see exactly when your timer was last reset, from what device.
  • A failed payment won't fire dispatch. If your card is declined we pause the charge, not the safety net. Your letters wait for you, not your bank.

Against unauthorized access

Only you can trigger a reset, and only you can read the letters.

  • Reset requires re-authentication. Even with the reset link, no one can reset your timer without your passkey or password.
  • Passkeys. Sign in with the biometric that unlocks your phone. Phishing-resistant by design.
  • Recovery codes. Ten one-time codes generated when you enable passkeys. Store them somewhere separate.
  • Auth lockout after five failed logins. Fifteen-minute lock, notification email to you. A honeypot field and submit-timing trap catch bots before they ever reach the login form.
  • Envelope encryption on every letter. Each message body, subject, and recipient detail is encrypted under a per-message key, wrapped by a key derived from your credential. A server breach or a leaked master key can't decrypt them. Only you can.
  • Recipient emails aren't stored as text. Only a salted hash sits in our database. The plaintext address exists in memory only long enough to send.
  • Full audit log. Every login, every reset, every letter edit is timestamped and IP-stamped in your account.
Zero-knowledge, by design. Because the encryption keys are derived from your credential, if you lose your password, every passkey, and every recovery code all at once, the letters can't be recovered. That's the price of an operator who genuinely can't read your mail.

Pricing

Pay for what you'll actually send.

Basic
$1/mo
  • 1 scheduled letter
  • 1 recipient
  • No attachments
Start · 30-day trial
Lite
$5/mo
  • 5 scheduled letters
  • 5 recipients
  • 25 MB of attachments
Start · 30-day trial
Pro
$15/mo
  • 25 scheduled letters
  • 25 recipients
  • 100 MB of attachments
Start · 30-day trial
Ultimate
$40/mo
  • 100 scheduled letters
  • 100 recipients
  • 500 MB of attachments
Start · 30-day trial

First month free on every plan. Cancel any time from your account.

Common questions

What people ask before they sign up.

How do you verify I'm actually gone?

We don't. The timer is the verification. If you're alive and reachable, you reset it. If you can't reset it for any reason, that's the trigger. This is the only definition of "gone" that works without asking a third party to be a judge.

Can I edit my letters after I've written them?

Yes, any time. Edit the body, swap the recipient, add a new one, delete an old one. The changes take effect immediately and are what dispatch if the timer expires.

What if I lose my password?

You can sign back in with any passkey you've registered, or any of the ten recovery codes we generated when you set up. If you've lost your password, every passkey, and every recovery code, your letters cannot be recovered. That's the price of an operator who genuinely can't read your mail.

Can I send myself a test dispatch to make sure it works?

Yes. Every letter has a preview button that emails the current draft to your own address. The main timer isn't affected.

What happens when I cancel?

Your plan pauses at the end of the billing period. Nothing dispatches while paused. You can resume any time, or delete the account entirely. Deletion is instant and permanent. All letters and account data are gone the moment you confirm.

What if the company shuts down?

We're independent and small. We can't promise runway. What we can promise is no lock-in. You can cancel or delete instantly. And envelope encryption means nothing about your letters depends on us continuing to exist.