Text note bodies (client-encrypted vaults)
On your device, before it leaves
Title, type, pin state, size, timestamps
Everything LifeVault Secure does
Most people meet LifeVault as "an encrypted place to put important documents." That is roughly a tenth of it.
Behind the vault is a password manager with TOTP codes, breach checking, and a health report. A catalog of 29 legal and legacy document templates that generate finished PDFs. Release rules that hand a vault to the right person on a date, after a period of silence, or when a declared life event is verified. Family seats. Time-limited collaborator access. And an encrypted memory API your AI agents can read and write without the server ever seeing the contents.
Any one of those is a product somebody else sells on its own.
This page lists all of it — the actual list, with the plan each capability is on, and an honest account of what is encrypted where.
What's encrypted, and exactly how
We will tell you precisely where the encryption boundary is
Plenty of vaults say "encrypted." Fewer will tell you which of their own features sit on which side of the line. Here is ours, by content type.
The one-line version: Notes and web password secrets, ordinary uploaded files in account-key client vaults, and agentic item bodies are encrypted on your device. Generated legal PDFs use server-side AES encryption. Operational metadata — vault names, file names, member lists, policy schedules, audit records — remains readable by our servers so the product can actually run.
What you store
Where it's encrypted
What our servers can still see
Ordinary uploaded files — web (client-encrypted vaults)
On your device, before upload
Name, type, size, category, status, timestamps
Ordinary uploaded files — iPhone/iPad (account-key client vaults)
On your device, before upload
Same operational metadata as web
Password secrets created in the web app (client-encrypted vaults)
On your device — username, password, notes, and TOTP secret in one encrypted blob
Entry name, URL, category, tags, strength and breach state, timestamps
Agent memory item bodies, structured fields, and tags
On the client, before the API receives them
Title, item type, namespace, expiry, size, owner and vault IDs
Generated legal document PDFs
Server-side AES envelope — the server can unwrap and serve the document
Full template and provenance metadata, filename, size, timestamps
Audio notes
Not client-encrypted today. We are saying so rather than letting you assume otherwise.
Filename, type, note linkage, size, timestamps
Vault names, member lists, roles, invitations
Readable by our servers by design
All of it — this is how sharing and access control work
Release policies, life-event declarations, trusted contacts, family seats
Readable by our servers by design
All of it — this is how a timer fires and a verification completes
Audit records, notifications, billing, sign-in records
Readable by our servers — operational account data
All of it
Store it: vaults, files, and notes
Encrypted vaults you can actually search, preview, organize, and open on your phone.
23 entries.
Standard vaults
Keep mixed notes and files together in a vault you named, with an icon you'll recognize at a glance.
How it works: create a named vault with a description and icon, and put both notes and files in it.
Plan:All plans — 2 vaults on Free, 40 on Pro, unlimited on Vault and Family Legacy
Password-manager vaults
A vault built for credentials, so your logins are not mixed in with your tax returns.
How it works: create a purpose-built vault type that stores credential records rather than files.
Plan:All plans — 1 on Free, 40 on Pro, unlimited on Vault and Family Legacy
Agentic vaults
Give a software agent its own encrypted memory without giving it your personal vault.
How it works: create a vault dedicated to AI-agent memory and receive its API key once, at creation.
Plan:All plans — 1 on Free, 5 on Pro, unlimited on Vault and Family Legacy
Vault dashboard statistics
Open a vault and know immediately what's in it and who else is in it.
How it works: each vault reports item counts by type, storage used, member count, and last activity.
Plan:All plans
Recently accessed vaults
Get back to what you were doing without hunting through a list.
How it works: your five most recently used vaults are surfaced first.
Plan:All plans
Vault customization
Rename and re-label a vault when its purpose changes, which it will.
How it works: change a vault's name, description, and icon at any time from its settings.
Plan:All plans
Vault deletion
Remove a vault permanently, but never by accident.
How it works: deletion requires an explicit confirmation flow before anything is removed.
Plan:All plans
Storage meter with a write lock
Know how much space you've used before you run out, not after something fails.
How it works: your storage consumption is shown continuously, and writes are blocked once you exceed your plan's capacity rather than failing silently.
Plan:All plans — 256 MB Free, 5 GB Pro, 15 GB Vault, 30 GB Family Legacy
File uploads up to 100 MB
Full-resolution scans, long recordings, and large PDFs go in without splitting them first.
How it works: each file can be up to 100 MB, uploaded directly, and encrypted on your device first in client-mode web vaults.
Plan:All plans — total storage capped by your tier
Add files from your phone's document library
The document already on your phone goes straight into the vault.
How it works: pick any file from the iOS document picker and add it to a vault.
Plan:All plans · iPhone and iPad app
Photograph a document straight into a vault
The passport, the deed, the insurance card — captured and filed in one motion.
How it works: use the camera to photograph or scan a document directly into a vault.
Plan:All plans · iPhone and iPad app
File search, filters, and sorting
Find the one document you need out of hundreds, without scrolling.
How it works: search filenames and filter by category, file type, and status, with sort order you choose.
Plan:All plans
Inline preview
Check that it's the right file before you download anything.
How it works: preview images, PDFs, audio, video, and text-like files in place.
Plan:All plans
Downloads that decrypt in your browser
Your file is put back together on your machine, not on ours.
How it works: client-encrypted files are fetched still encrypted and decrypted locally in the browser.
Plan:All plans — client-side encryption is on every tier
File rename
Fix a filename your scanner chose for you, without re-uploading a thing.
How it works: change a stored item's display name in place.
Plan:All plans
File categories
Organize by what a document is, not by what it happens to be called.
How it works: assign and change categories on any vault item.
Plan:All plans
Multi-item deletion
Clean up a vault in one pass instead of one file at a time.
How it works: select multiple stored items and delete them together.
Plan:All plans
Encrypted text notes
The account numbers, the safe combination, the instructions for your family — written down somewhere that isn't a Notes app.
How it works: create, read, edit, and delete notes; in client-encrypted vaults the body is encrypted on your device before it's saved.
Plan:All plans
Markdown notes
A real document, not a wall of text — headings, lists, links, and code, with a rendered preview you can toggle on.
How it works: format notes with a Markdown toolbar, then toggle between editing and the rendered preview.
Plan:All plans · iPhone and iPad app
Note autosave
Stop losing edits because you closed a tab.
How it works: note edits save after a short idle period, without a manual save.
Plan:All plans
Pinned notes
The three notes you actually reference stay at the top.
How it works: pin notes and sort or filter by pin state.
Plan:All plans
Note search and sorting
Find a note by title, or by when you last touched it.
How it works: search note titles and sort by update time, creation time, or title.
Plan:All plans
Audio notes
Say it out loud when writing it down isn't practical.
How it works: record an audio note and store it alongside the notes in a vault. Audio bytes are stored on our servers and are not client-encrypted today — the encryption table above says so plainly, and it is on the fix list.
Plan:All plans
Passwords, passkeys, and two-factor codes
A full password manager, including the parts most people pay a second subscription for.
13 entries.
Password entries with everything attached
One record holds the login, the site, the notes, and the two-factor secret — so you stop keeping them in three places.
How it works: create, view, edit, and delete credential entries with username, password, URL, notes, and a TOTP secret. In client-encrypted vaults, the web app encrypts those secrets on your device before they're saved.
Plan:All plans — unlimited entries on every tier
Search, categories, tags, and favorites
Two hundred logins stay navigable.
How it works: search credentials and organize them with categories, tags, favorites, and sort modes.
Plan:All plans
Generate a password while you're creating the entry
No switching to another tool mid-signup.
How it works: generate a strong password inside the entry editor.
Plan:All plans
Public password generator
Generate a strong password right now, without an account.
How it works: a public page with composition and length controls, strength feedback, and one-click copy.
Plan:Free — no account needed
Passphrase generator
Four words you can actually remember, instead of eleven characters you can't.
How it works: generate multi-word passphrases with configurable word count, separator, and capitalization.
Plan:Free — no account needed
Password strength analysis
Find out a password is weak before it's protecting something.
How it works: a proposed password is evaluated and scored.
Plan:All plans
Breach checking against Have I Been Pwned
Know whether a password you're still using has already leaked.
How it works: credentials are checked against the Have I Been Pwned range API using k-anonymity — only a partial hash prefix leaves your session, never the password.
Plan:All plans
Password health dashboard
One screen that tells you which of your logins are a problem.
How it works: a health score plus counts and lists of weak, reused, old, and breached passwords.
Plan:All plans
Password health over time
See whether your security posture is actually improving.
How it works: health snapshots are charted across a window you choose, from 1 to 365 days. New accounts show a single current reading until snapshots accumulate.
Plan:All plans
Built-in two-factor codes
Your authenticator app and your password manager stop being two separate problems.
How it works: any entry with a TOTP secret generates its current six-digit code on demand.
Plan:All plans
Password change history
Know when you last rotated a credential — the question that decides whether you need to again.
How it works: the dates of previous password versions are recorded and shown. Dates only; previous secret values are not retained.
Plan:All plans
Sign in with a passkey
No password to type, phish, or forget.
How it works: register a WebAuthn passkey and sign in with it.
Plan:All plans — 3 devices on Free, 10 Pro, 25 Vault, 40 Family Legacy
Manage multiple passkeys
Your laptop, your phone, and your hardware key can all be enrolled — and any one of them removed.
How it works: add, name, inspect, and remove multiple WebAuthn authenticators from settings.
Plan:All plans — device counts as above
Hand it over: release rules, emergency access, and 29 legal documents
This is the section people buy LifeVault for, and it is the one the homepage says least about.
16 entries.
Scheduled release
The vault opens on a date you choose, whether or not you're there to open it.
How it works: set a release rule for a future date on a specific vault.
Plan:Pro and up
Inactivity release
If you go quiet for long enough, the right person still gets in.
How it works: set a rule that releases a vault after a defined period without account activity.
Plan:Pro and up
Life-event release
Access that turns on when something specific happens, confirmed by someone you named.
How it works: tie a vault's release to a declared life event backed by trusted-contact evidence.
Plan:Pro and up
Emergency access requests
Someone can ask for the vault in an emergency — and you decide, in the moment, whether they get it.
How it works: an authorized person requests emergency access; the owner approves, denies, or revokes it.
Plan:Pro and up — 1 policy per vault on Pro, unlimited on Vault and Family Legacy
Policy simulator
Find out what your release rules would actually do, before they do it.
How it works: pick a simulated date and see whether your scheduled and inactivity rules would release.
Plan:Pro and up
Life-event declarations you can review and cancel
A declaration is a process with a waiting period, not a switch someone flips.
How it works: review a declaration's status, its evidence, the waiting period, and vote counts — and cancel it.
Plan:Pro and up
29 document templates
Wills, directives, trusts, emergency cards, family plans, inventories, and financial summaries — twenty-nine of them.
How it works: answer the template's questions and LifeVault produces a finished document.
Plan:Free subset; the rest on Pro and up, or by one-time purchase
Ten templates free, permanently
The documents a family needs in the first hour of an emergency cost nothing.
How it works: emergency contacts, document locator, medical summary, emergency ID, family emergency plan, medication list, child consent, babysitter instructions, go-bag list, and medical info card are available without upgrading.
Plan:Free
Wills, power of attorney, directives, and trusts
The paperwork people put off for years, in a form you can finish in an evening.
How it works: the paid catalog includes wills, POA, healthcare directives, trusts, and succession plans.
Plan:Pro and up, or by one-time purchase
Documents land back in your vault
The finished PDF doesn't go to your Downloads folder to be lost.
How it works: answers are validated, a PDF is generated, and it's installed as a vault item with a record of which template produced it. Generated PDFs use server-side AES encryption — see the encryption table above.
Plan:Pro and up, or by one-time purchase
Reusable signature
Sign once; use it on every document that needs it.
How it works: draw or type a signature, save it, and insert it into supported documents. Saved signatures are readable by our servers — they are not in the client-encrypted set.
Plan:All plans — template access still applies
Buy one document
You need a will. You do not need a subscription.
How it works: purchase access to a single paid template outright — $19.99.
Plan:One-time purchase — no subscription required
Essential Estate Plan bundle
The three documents that do most of the work, together.
How it works: purchase the three-template Essential Estate Plan bundle — $49.99.
Plan:One-time purchase — no subscription required
Complete estate-plan pass
Thirty days, every paid template, one payment.
How it works: unlock any paid template for 30 days — $149.99.
Plan:One-time purchase — no subscription required
Estate planner
A map of what estate planning actually involves, so the size of the job stops being the reason you don't start.
How it works: browse seven planning categories covering twenty of the catalog's templates, and work through them in order.
Plan:All plans — individual template access still applies
Guidance after you generate a document
Producing the PDF is the middle of the job, not the end.
How it works: after a document is generated, a ten-message educational sequence walks you through what to do with it.
Plan:Template users — access follows your tier or purchase
Give your AI agents encrypted memory
A scoped API key, an encrypted body the server can't read, namespaces, TTLs, and a revoke button.
10 entries.
Scoped agent API keys
An agent gets one vault and one permission level — never your account.
How it works: create a key bound to a single vault with either read-only or full create/read/update/delete permission.
Plan:All plans — 1 key on Free, 5 on Pro, 10 on Vault and Family Legacy
Agent read and write
Your agent remembers things between sessions, in storage you control.
How it works: an authorized agent lists, reads, creates, updates, and deletes encrypted items over the HTTP API.
Plan:All plans — 20 calls/month on Free, 5,000 on Pro, unlimited on Vault and Family Legacy
Agent search
The agent finds what it stored instead of re-deriving it.
How it works: search an agentic vault through its scoped API.
Plan:All plans — call limits by tier
Namespaces and item types
Agent memory that has a shape, not a bucket of strings.
How it works: organize memory as notes, credentials, key/value data, contacts, documents, or file references, inside namespaces you define.
Plan:All plans
Encrypted structured fields and tags
The structure is inside the encrypted body, not exposed beside it.
How it works: structured fields and tags are stored within the client-encrypted item body.
Plan:All plans
Time-to-live on any item
Memory that is supposed to be temporary actually expires.
How it works: set an item to expire anywhere from one hour to 90 days.
Plan:All plans
Partial updates, re-encrypted locally
Change one field without round-tripping the whole record through our servers in the clear.
How it works: update content, type, namespace, tags, pin state, or TTL, and the body is re-encrypted on the client.
Plan:All plans — call limits by tier
Wrapped vault key for your client
The key your agent needs is delivered wrapped, so plaintext never reaches our servers.
How it works: fetch the client-wrapped vault key so an authorized client can encrypt and decrypt item bodies itself.
Plan:All plans
Instant key revocation
An agent you no longer trust loses access immediately.
How it works: revoke an agentic vault key from the web app; it stops working at once.
Plan:All plans — key limits by tier
Key rotation
Rotate a key on your schedule without tearing down the vault.
How it works: replace an agent key and receive the new raw value once, at rotation.
Plan:All plans — key limits by tier
Run the account: devices, activity, billing, and help
The unglamorous half. It is also the half you notice when it's missing.
20 entries.
Email verification
The account is tied to an address you actually control.
How it works: verify a new account with an emailed code, and request another if the first expires.
Plan:All plans
Password reset
Losing your account password doesn't mean losing your account.
How it works: request and complete a reset of your account password by email.
Plan:All plans
Account key setup
The key that makes client-side encryption work is established once, at the start.
How it works: create and register the wrapped account-key material that client-encrypted vaults use.
Plan:All plans — client-side encryption is on every tier
12-word recovery phrase
Written down once, it's the thing that gets you back in.
How it works: a 12-word recovery phrase is generated and shown during account-key setup in the app.
Plan:All plans · iPhone and iPad app
Face ID and fingerprint unlock
Open the vault the way you open your phone.
How it works: device biometrics unlock the locally stored account password in the app.
Plan:All plans · iPhone and iPad app
Device management
See every device with access to your account, and cut off the one you sold.
How it works: review devices with account access and remove any you no longer trust.
Plan:All plans — 3 devices Free, 10 Pro, 25 Vault, 40 Family Legacy · iPhone and iPad app
Profile and avatar
Collaborators see a person, not an email address.
How it works: change your display name and upload, replace, or remove an avatar.
Plan:All plans
Sound controls
Turn the interface sounds down, or off.
How it works: enable or disable interface sounds and set their volume.
Plan:All plans
Themes that stick
The app looks the way you left it.
How it works: switch among stored visual themes, including dark and light behavior, and the choice persists.
Plan:All plans · iPhone and iPad app
English, Spanish, and French
Your family's documents shouldn't require your family to read English.
How it works: change the interface language; full locale bundles ship for English, Spanish, and French.
Plan:All plans
In-app notifications
What happened while you were away, in one list.
How it works: list notifications, mark one or all as read, and clear the list.
Plan:All plans
Push notifications
An emergency request reaches you on your phone, not in an inbox you check on Sunday.
How it works: register or remove a push token for account notifications.
Plan:All plans · iPhone and iPad app
Vault audit log
A record of who did what, in which vault, and when.
How it works: filter and page through vault actions by action type, target, vault, and time range.
Plan:All plans
Audit archiving
Quiet the noise without destroying the record.
How it works: archive, unarchive, or bulk-archive audit entries; the entries themselves are retained.
Plan:All plans — role-controlled
Account activity feed
A plain-language view of recent account and vault activity.
How it works: recent activity across your account and vaults is listed in one feed.
Plan:All plans
Plan and trial status
Know exactly what you're on, what it renews at, and when.
How it works: see your tier, billing provider, trial end date and days remaining, renewal date, cancellation state, and the latest payment record.
Plan:All plans
Change or cancel your plan
Leaving is a button, not an email to support.
How it works: change plans through checkout, or schedule cancellation at the end of the current period.
Plan:Paid and trial accounts
Receipts and invoices
The document your accountant asks for, one click away.
How it works: open the provider-hosted receipt or invoice for your latest payment.
Plan:Paid accounts
Help where you are
Answers about the screen you're actually on.
How it works: contextual help content is tied to app routes and feature areas.
Plan:All plans
Account deletion
You can leave, permanently, and we make you mean it.
How it works: delete your account only after typing an exact confirmation phrase.
Plan:All plans
Four of these are entire companies
We are not claiming to beat any of these tools at their own game. The point is narrower and more useful: if you were going to buy an online will service and a password manager and a digital-legacy service and a place to keep encrypted agent memory, you would be assembling by hand — across four logins, four subscriptions, and four copies of your own information — what LifeVault already does in one vault.
The one feature
The standalone product category it matches
What LifeVault adds around it
29-document legal and legacy template catalog
Online will and estate-document generators
The finished PDF is installed back into your encrypted vault with a record of which template made it, ten of the catalog's documents are free forever, and you can buy a single document for $19.99 instead of subscribing.
Scheduled, inactivity, life-event, and emergency release
Digital-legacy and "dead man's switch" services
Four release types rather than one, a simulator that shows you what your rules would actually do, trusted-contact verification, waiting periods, and approve/deny/revoke on every request.
Encrypted memory API for AI agents, with scoped keys
AI memory stores and context vaults for agents
Per-vault keys with read-only or full permission, item bodies encrypted before our servers see them, namespaces, item types, TTLs from one hour to 90 days, instant revocation, and rotation.
The complete password toolset
Dedicated password managers and breach-monitoring tools
TOTP codes, Have I Been Pwned breach checking, a health dashboard with weak/reused/old/breached lists, health trends over up to a year, passkey sign-in, a public generator, and a passphrase generator — inside the same vault as your documents.
What each plan costs
See full pricing| Plan | Monthly | Annual | Trial |
|---|---|---|---|
| Free | $0 USD/month | — | — |
| Pro | $12/month | $120/year | 14-day |
| Vault | $29/month | $290/year | 14-day |
| Family Legacy | $49/month | $490/year | 30-day |
Buy a document without subscribing:
| One-time purchase | Price | What you get |
|---|---|---|
| Single document | $19.99 | One paid template |
| Essential Estate Plan | $49.99 | Three named templates |
| Complete estate-plan pass | $149.99 | Any paid template, for 30 days |
What changes as you go up: storage (256 MB → 5 GB → 15 GB → 30 GB), vaults (8 total on Free → unlimited from Vault up), devices (3 → 10 → 25 → 40), collaborators per vault (1 → 5 → 20 → 20), and agent API calls (20/month → 5,000 → unlimited). Scheduled release, emergency access, and the paid template catalog start at Pro. The password manager, client-side encryption, and agent vault access are on every plan including Free.
FAQ
Is everything I put in LifeVault end-to-end encrypted?
No — and we would rather answer that precisely than impressively. Your note bodies, your web password secrets, ordinary files you upload from the web app, files uploaded from the iPhone app into account-key vaults, and your agent memory bodies are all encrypted on your device before they reach us. Generated legal PDFs use server-side AES encryption, because the server has to assemble the document. Audio notes are not client-encrypted today. And operational metadata — vault names, file names, who you've shared with, when a release policy fires — stays readable by our servers, because that is how the timers, invitations, and access controls work at all. The table near the top of this page lists every content type.
What do I get on the free plan?
More than most people expect. 256 MB across 8 vaults, the full password manager including TOTP codes and Have I Been Pwned breach checking, client-side encryption, passkey sign-in, an agentic vault with an API key and 20 calls a month, the vault audit log, and ten legal templates — emergency contacts, document locator, medical summary, emergency ID, family emergency plan, medication list, child consent, babysitter instructions, go-bag list, and medical info card — permanently free. Scheduled release, emergency access, and the paid template catalog start at Pro.
What happens to my vault if something happens to me?
That is what release policies are for, and there are four kinds. A scheduled rule opens a vault on a date. An inactivity rule opens it after a defined period of silence from you. A life-event rule opens it when a trusted contact you named declares an event and the evidence is verified, after a waiting period. And emergency access lets an authorized person request the vault while you're still able to approve or deny. You can run all of it through a simulator first to see exactly what would happen and when.
Do I need a subscription to make a will?
No. A single paid template is $19.99 outright. The three-document Essential Estate Plan bundle is $49.99. If you want the whole catalog, the complete pass unlocks any paid template for 30 days at $149.99. Ten of the twenty-nine templates — the ones a family needs first in an emergency — are free with no purchase at all.
Is this a real password manager, or a place to type passwords?
A real one. Entries carry username, password, URL, notes, and a TOTP secret, so your authenticator app and your password vault stop being two separate things. Passwords are checked against Have I Been Pwned using k-anonymity — only a partial hash prefix ever leaves your session. A health dashboard scores your whole set and lists what's weak, reused, old, or breached, and health trends chart that across up to a year. There's a generator inside the entry editor, and a public generator and passphrase generator that need no account at all.
What is an agentic vault, and is it AI?
It is encrypted storage with an API — not an AI feature. LifeVault does not run AI over your data, and no plan enables AI features. What an agentic vault gives you is a place your own AI agent can keep memory between sessions: a vault-scoped API key with read-only or full permission, item bodies encrypted on the client before our servers receive them, namespaces and item types, time-to-live from one hour to 90 days, and a revoke button that works immediately.
Can I share a vault without giving away the keys?
Yes. For client-mode vaults, the vault's data key is wrapped specifically for each member you invite rather than being passed around in the clear. On top of that: five roles, a two-stage flow where accepting an invitation still requires a manager to approve the member, invitations you can resend or revoke before acceptance, role changes and removal afterwards, and access you can grant for a fixed duration that expires on its own.
Is there a mobile app?
There is an iPhone and iPad app, and it does things the web app can't: photograph a document straight into a vault, add files from your document library, unlock with Face ID or a fingerprint, write notes in Markdown with a live preview, manage your trusted devices, and receive push notifications for emergency requests. Android is not available yet.
Can I see who did what in a shared vault?
Yes. The vault audit log filters and pages through actions by action type, target, vault, and time range, and there's an account-wide activity feed alongside it. You can archive entries to quiet the list without destroying the record.