Don’t leave the people you love guessing.Leave them EternaKeys.

EternaKeys is the secure place for the people you love to find your accounts, passwords, and wishes — without searching.

Encrypted on your deviceVault contents invisible to EternaKeysControlled by you

When Information Is Scattered

Documents, account details, instructions, and personal messages often end up in different places, making them hard to find and keep current.

EternaKeys Brings It All Together

Everything important, together in one private vault.

When Your Loved Ones Need Information

Even when the information exists, the people you trust may not know where to find it or how to request access.

EternaKeys Gives Them A Clear Path

A clear, verified path to request access — while you stay in control.

One Vault
Four Clear Categories

Directives, Financial Assets, Digital Life, and Physical Assets in one place

Directives

  • Will & testament copies
  • Healthcare directives & DNR
  • Power of attorney documents
  • Final wishes & messages

Financial Assets

  • Bank accounts & investments
  • Cryptocurrency wallets & seed phrases
  • Retirement accounts
  • Insurance policies

Digital Life

  • Social media & email accounts
  • Cloud storage & subscriptions
  • Domain names & websites
  • API keys & software licenses

Physical Assets

  • Real estate documents & deeds
  • Vehicle titles & records
  • Collectibles & valuables
  • Personal property inventory
How It Protects You

Private by design
Encrypted on your device

Your privacy stays in your hands. Your vault is encrypted on your device before any data is transmitted. The key derives entirely from your passphrase and never leaves your browser. What reaches our servers is indecipherable without it. EternaKeys cannot recover your passphrase or decrypt your vault, so losing required credentials or devices may permanently prevent access.

Encryption
Authenticated symmetric encryption
AES-256-GCM
Key Derivation
OWASP 2023 — brute-force resistant
Argon2id
Architecture
Server never sees plaintext
Zero-Knowledge
Authorized Access
Multi-step verified designated recipient workflow
Owner Notification + Veto Period
Authentication
Phishing-resistant hardware auth
FIDO2 Passkeys

// Key derivation chain

passphrase + salt

↓ Argon2id (m=65536, t=3, p=4)

masterKey

↓ HKDF-SHA256 (domain separation)

encKey ← AES-256-GCM

searchKey ← HMAC blind index

integrityKey ← tamper detection

// What the server stores

{"ct":"a7f3...", "iv":"9b2c..."}

// Indecipherable without passphrase

Our Commitment to You

EternaKeys cannot
open your vault

Your vault is locked before it leaves your device. EternaKeys receives only encrypted data and cannot open it. That privacy boundary is architectural, not a promise you have to take on trust.

Locked Before It Leaves

Your information is encrypted on your device before it is sent. Our servers never receive plaintext vault contents.

We Cannot Open It

We store encrypted vault data and the minimum operational metadata the service needs. EternaKeys cannot view or decrypt your vault.

Keep Your Passphrase Safe

Only you hold what unlocks your vault. If required credentials or devices are lost, access may be permanently lost.

EternaKeys is continuously refined to provide clearer guidance and stronger protection for the people you choose.

Organize the details now so the people you love know where to begin

Organize the details those closest to you may one day need, choose who should receive them, and keep control of your privacy from the start.

Let's Talk

EternaKeys | Protect What Matters Most