new switch

step 1 of 6
payload
recipient
timer
pins
review
test fire
// payload
What should we deliver?
↑ encrypted in your browser before it leaves
// recipient
Who receives it?
We email this person a one-time enrollment link. They generate a keypair in their browser and download a rescue file. Without their half, your message stays sealed forever — even to us.
// timer
How long between check-ins?
warning emails before expiry
grace period
// pins
Two 6-digit PINs. Same length, different effect.
defuse PIN — resets timer
duress PIN — releases & purges
Same length, different effect. Only you should know which is which. PINs are hashed in your browser; the server stores both hashes in randomized order so a database leak can't tell them apart.
// review
Last look before we send the recipient an enrollment email.
// arm
Submit creates the switch and emails an enrollment link to your recipient.