Extended FAQ
Everything you need to know about DeadSwitch — from how the encryption works to what happens if you lose your USB drive.
General
What is DeadSwitch?
DeadSwitch is a portable encrypted USB vault paired with an automated dead man’s switch. You store your important digital information on an encrypted USB drive, designate beneficiaries, and configure an automatic check-in system. If something happens to you, the system detects your absence and delivers access to the people you chose.
Think of it as: a fireproof safe that automatically opens for the right people when you’re no longer around — except it’s digital, encrypted, and fits in your pocket.
Who is DeadSwitch for?
Anyone who has digital information that someone else would need if they were gone:
- Crypto holders — Seed phrases and private keys that would otherwise be lost forever
- Business owners — Company credentials, vendor logins, domain registrars
- Parents and spouses — Financial accounts, insurance policies, important passwords
- People with complex finances — Multiple banks, brokerages, retirement accounts
- Anyone who cares — Even just making sure your family can access your email and phone
Is DeadSwitch a password manager?
No. Password managers are designed for daily use — storing and autofilling passwords as you browse. DeadSwitch is designed for the day you can’t use a password manager anymore.
It complements your existing password manager by adding:
- A dead man’s switch for automated detection
- Per-beneficiary access control (different people get different things)
- Video and audio goodbye messages
- Physical offline storage on a USB drive
You can import your passwords from 1Password, Bitwarden, LastPass, or KeePass.
Security
How is my data encrypted?
DeadSwitch uses multiple layers of industry-standard encryption:
| Layer | Algorithm | What It Protects |
|---|---|---|
| Vault data | AES-256-GCM-SIV | All stored items (passwords, documents, etc.) |
| Master password | Argon2id | Prevents brute-force attacks on your password |
| Media files | XChaCha20-Poly1305 | Video and audio messages |
| Database | SQLCipher | Encrypted SQLite database on the USB |
For the full technical breakdown, see the Security Model page.
Can DeadSwitch read my data?
No. DeadSwitch uses a zero-knowledge architecture. Your vault data is encrypted on the USB drive using keys derived from your master password. Our servers store only encrypted key shares and metadata. We never have access to your vault contents, master password, or full encryption keys.
Even if we wanted to, we couldn’t. The math doesn’t allow it. This isn’t a policy — it’s a fundamental architectural constraint.
What happens if the DeadSwitch server is hacked?
An attacker who compromises our server would get:
- Encrypted key shares (useless without the beneficiary’s physical emergency card)
- Hashed passwords (scrypt — resistant to brute force)
- Beneficiary contact information (email, phone)
An attacker would not get:
- Vault contents of any kind
- Encryption keys or your master password
- Media files (those live on the USB only)
The physical USB drive remains secure regardless of server compromise. The worst-case server breach exposes contact information, not vault data.
Is the code open source?
Yes. The vault encryption engine, cryptographic primitives, and core security components are open source. You can audit every encryption operation, key derivation, and security mode implementation yourself.
Dead Man’s Switch
How often do I need to check in?
You choose: every 7, 14, or 30 days. DeadSwitch sends you a simple email or SMS with a link. Click it to confirm you’re alive. It takes less than 5 seconds.
It’s intentionally low-friction. We don’t want check-ins to feel like a chore. One click, done.
What if I’m on vacation or hospitalized?
The system escalates gradually over multiple check-in periods. Here’s what happens:
- Miss one check-in — Extra reminders sent. No escalation yet.
- Miss two — Warning emails with clear language about consequences.
- Miss three — Grace period (48–72 hours). Final urgent warning.
- Grace period expires — Switch triggers. Irreversible.
This means if you have a 14-day interval, you’d need to be unreachable for roughly 6–7 weeks before the switch actually fires. If you know you’ll be unavailable, you can check in early to reset the timer.
Can I undo a trigger?
During escalation and grace period: Yes. Respond to any check-in message and everything resets to normal.
After the grace period expires: No. Once triggered, the process is irreversible. Beneficiary emails have already been sent and cannot be recalled. This is by design — the system must be reliable for the people depending on it.
The USB Drive
What if I lose the USB?
It depends on your security mode:
| Mode | USB Lost? |
|---|---|
| Local-Only | Data is gone. No recovery possible. |
| Cloud-Stored | Recover vault from cloud backup using master password. |
| Key-Split | Data is gone (server half alone is useless). |
| Hybrid | Recover from cloud backup using master password. |
Our recommendation: Use Hybrid mode if losing the USB worries you. You get the security of key-splitting plus the safety net of a cloud backup.
What if someone steals the USB?
A stolen USB drive is useless without your master password. All data is encrypted with AES-256-GCM-SIV using keys derived from Argon2id. A brute-force attack is computationally impractical.
In Key-Split or Hybrid mode, the USB is even more secure — it only contains half the encryption key. The other half is on our server and is never released unless the dead man’s switch triggers.
Does it work on all operating systems?
Yes. The DeadSwitch app runs on Windows, macOS, and Linux directly from the USB drive. No installation required. No admin privileges needed.
Pricing
Why is it a one-time payment?
We believe that protecting your family shouldn’t come with a recurring bill that might lapse. The USB vault, web dashboard, and dead man’s switch are included in the one-time purchase. The only optional subscription is cloud backup ($4.99/month) for users who want an additional safety net.
What’s the difference between the tiers?
| Feature | Standard ($99) | Pro ($149) | Family ($249) |
|---|---|---|---|
| Beneficiaries | Up to 3 | Unlimited | Unlimited |
| Platforms | 1 OS | All OS | All OS |
| Check-in channels | Email only | Email + SMS | Email + SMS |
| Web dashboard | Yes | Yes | Yes |
| Cloud backup eligible | No | Yes | Yes |
| USB drives included | 1 | 1 | 3 |
| Live onboarding call | No | No | Yes |
| Support | Standard | Standard | Priority |
Is there a free trial?
Not currently. DeadSwitch involves physical hardware (USB drive), so a traditional free trial isn’t practical. However, we offer:
- Full documentation so you understand exactly what you’re getting
- Open source security code so you can verify the encryption yourself
- 30-day money-back guarantee if you’re not satisfied
Beneficiaries
How many beneficiaries can I have?
Standard: Up to 3. Pro and Family: Unlimited.
Do beneficiaries need to install anything?
No. The DeadSwitch app runs directly from the USB drive. Your beneficiaries just plug in the USB, enter their codes, and see their assigned items. The interface is simplified for non-technical users.
What if a beneficiary loses their emergency card?
You can generate a new emergency card for any beneficiary at any time from the vault app. The old card’s secret code is revoked and replaced. Print the new card and deliver it to the beneficiary.
Emergency cards are the only physical component your beneficiaries need. Without the card’s secret code, the emailed access code alone is useless. This is a deliberate two-factor requirement.