Free, Pro, and Shield limits, same encryption, and canceling anytime.
50 MB vault storage, up to 3 beneficiaries, 3 groups, 10 folders, and a custom check-in schedule from 7 to 365 days. Same leave-and-claim path as Pro and Shield. Your live vault is protected by end-to-end, zero-knowledge encryption. That means HeirVault stores ciphertext and cannot decrypt it. Pro raises vault storage first, then contacts and folder limits, plus witnesses, session history, and milestone unlock dates. Shield adds the device check-in API, shorter intervals, configurable waiting period, audit history, and a priority claim and reminder email queue.
Yes. On every plan, each file or folder can unlock immediately on vault release or after a delay in days. Pro and Shield can also set a milestone date with a label, like an 18th birthday, so a letter stays locked until the vault is released and that date has arrived. If you downgrade, milestone schedules you already saved keep working exactly as set; Free just cannot add new ones.
Pro is $49.99 per year or $4.99 per month. Shield is $129.99 per year or $12.99 per month. Both are billed through Stripe. Cancel renewal anytime from billing.
Shield is for people who need device or script check-ins without opening the web app, a duress passphrase with a decoy vault and silent alert, intervals as short as one day, configurable waiting period, check-in audit history, higher contact limits, and a priority claim and reminder email queue. Reminder emails (pre-due, mid waiting period, countdown) ship on every plan. Same leave-and-claim path as Free and Pro. It is not anonymity tooling, and a duress passphrase cannot help if your real passphrase was already captured.
Duress means being forced under threat. On Shield you can set a second passphrase for when you are forced to unlock. Signing in with it looks like a normal login but opens a separate decoy vault, quietly emails a trusted contact, does not reset your check-in timer, and locks primary vault access for a configurable window. You can also create panic or kill API keys for hardware buttons, with a cancellable destruction delay you choose (1 to 72 hours). Practice in a safe place first. It does not create a fake identity, and it cannot protect you if someone already has your real passphrase or a passkey that unlocks the real vault. See the Duress passphrase page for the full threat model and honest limits.
On Shield, create up to 10 device API keys under Security → API keys. Call GET /api/v1/verify with a Bearer token to confirm any key works with no side effects (safe for panic and kill keys). Call POST /api/v1/check-in to reset your timer, or GET /api/v1/check-in/status to read due dates. Panic-scope keys call POST /api/v1/panic to arm lockdown and alert. Kill-scope keys call POST /api/v1/kill to start a cancellable vault destruction using the delay you configured (1 to 72 hours). Keys never unlock vault contents. A stolen check-in key can delay release the same way a leaked check-in email link can, so revoke keys you no longer trust.
Yes. On every plan your live vault is protected by end-to-end, zero-knowledge encryption the same way. Contents encrypt in your browser before upload. Paid plans raise capacity and unlock extras; they do not give TrueWear, LLC your vault keys. Delivery mode still decides who can hold each beneficiary handoff key.
Vault storage is the main limit: 50 MB on Free, 5 GB on Pro, and 25 GB on Shield. Per-file limits are 25 MB on Free, 100 MB on Pro, and 250 MB on Shield. Allowed types include common documents (PDF, Word, Excel, PowerPoint, text, CSV, RTF), images, audio, short video, and ZIP archives. Executables and other archives are not accepted. For longer video, split or compress the file; the vault is built for final messages and evidence copies, not raw-footage archives.
On Shield, priority release means claim and reminder emails drain ahead of standard queue items when release starts. Free and Pro still release after your check-in rules are met; Shield prioritizes that email processing path, not a separate release engine.
Share your personal link from Account → Referrals (or learn more on the public Referrals page). When a friend signs up through your link and pays for Pro or Shield the first time, you both get one free month of Pro as Stripe account credit. Self-referrals and payment-method reuse for abuse are blocked. The program can change or end under the Terms.
Yes. Cancel renewal anytime from billing. After a paid plan ends you keep Free-plan access, subject to Free limits. Leaving Shield revokes check-in API keys and clamps short intervals back to Free/Pro rules.
After Pro or Shield ends, Free limits apply. You may need to reduce beneficiaries, storage, or folders to fit Free, and witnesses, session history, and Shield-only tools are no longer available.
Yes. Export and account deletion are available in Settings. Export while you still control your passphrase and keys. After deletion, we schedule removal of account and vault records subject to short backup and legal retention windows.