Everything you need to know about how Lazarus Vault works. Still have questions? Email us.
A dead man's switch is a system that performs an action automatically when you stop responding. The term comes from locomotive engineering, where a switch required constant pressure from the driver — if the driver collapsed, the switch released and the train stopped.
In our case: we send you periodic check-in emails. If you click the link, everything stays sealed. If you miss a number of check-ins that you choose (say, 5 days in a row), we assume something has happened to you and we deliver your files and messages to the people you've designated.
Every client's files are encrypted with a unique per-client key using AES-256-CBC encryption. That key is itself encrypted by a master key stored in a secure configuration file on the server — completely separate from the database.
Your vault is completely separate from every other client's vault. Even if someone gained access to the database, they couldn't read your files without also having the master key file. And even with the master key, each file requires its own per-client key to decrypt.
This is the most common concern, and we've designed the system to minimize false triggers:
When your vault opens, each recipient receives an email with a unique, secure link. The link contains a random token that can't be guessed. When they click it:
Files are never sent as email attachments — they're too large and not secure enough. The secure link approach keeps everything private and downloadable.
We built Lazarus Vault on proven, stable technology (PHP and MySQL/MariaDB) that has been running websites reliably for over 25 years. We deliberately avoid:
Our code is simple, self-contained, and runs on the most basic shared hosting available. The goal is a service that requires zero maintenance from you and runs reliably for decades.
Yes, anytime. If you cancel:
Your files remain in your vault even after delivery. Recipients have 30 days of access. Once the trigger has fired, the delivered content is locked — you can't change what was sent. But if you reset your check-in status before the trigger fires (during the reminder period), nothing is delivered and your vault stays sealed.
Yes. On the Standard Legacy and Elite Legacy tiers, you can create unlimited messages and assign each message to specific recipients. For example, you might send one message to your spouse with personal letters and financial details, and a different message to your business partner with company-related instructions.
On the Free tier, you can create one message for one recipient.
Your files are encrypted at rest. The site administrator (us) has access to the master key file, which means we technically could decrypt your files if needed — for example, if you requested help recovering access to your account. However, we do not routinely access client vaults. The encryption protects against database leaks and unauthorized access, not against the service operator. This is a necessary trade-off for the automatic trigger to work without your password.
You have two options:
If you forget to adjust before leaving and come back to find your vault has triggered, contact us — we may be able to help depending on the circumstances. But the best approach is to plan ahead.
Yes. Lazarus Vault is a message delivery and file storage service. You're simply scheduling emails to be sent under certain conditions. We are not a legal document preparation service — for legally binding documents like wills and trusts, consult an attorney in your jurisdiction. We recommend including a note to your recipients advising them to consult legal professionals for official matters.
We've built this service to be sustainable and low-cost to operate. Our technology choices (PHP, MySQL, shared hosting) keep costs minimal. However, if we ever needed to shut down, we would: