new switch

step 1 of 6
payload
recipient
timer
pins
review
test fire
// payload
What should we deliver?
↑ encrypted in your browser before it leaves
// recipient
Who receives it?
// or invite someone new (switch waits for them to enroll)
Pre-enrolled recipients arm the switch immediately — no waiting, no rescue files. They tap a passkey on their phone or laptop to decrypt later. Inviting someone new sends them a one-time enrollment link; the switch stays pending until they accept.
// timer
How long between check-ins?
warning emails before expiry
grace period
// pins
Two 6-digit PINs. Same length, different effect.
defuse PIN — resets timer
duress PIN — releases & purges
Same length, different effect. Only you should know which is which. PINs are hashed in your browser; the server stores both hashes in randomized order so a database leak can't tell them apart.
// review
Last look before we send the recipient an enrollment email.
// arm
Submit creates the switch and emails an enrollment link to your recipient.