Seal your documents, keys and final messages on IPFS. Name your heirs, appoint custodians. Stop checking in for long enough, and once your custodians confirm, the program releases what you sealed to the people you named.
How it works
VaultWill replaces lawyers, paperwork and goodwill with a program that releases exactly what you sealed, to exactly who you named, once your custodians confirm and your grace period to revoke has passed.
Upload documents, keys and messages to IPFS, name beneficiaries with their allocation splits, and set your inactivity window. The rules live on-chain; the encrypted files live on IPFS.
Name trusted custodians and choose how many must agree before anything unlocks. They can only confirm your passing — never read or move your files.
Once you stop checking in, the quorum confirms and the grace period ends, the will turns claimable. Each beneficiary signs to unlock the payload — no executor, no intermediary.
Interactive demo
Connect a simulated wallet, seal a will, and check in to stay active. Or skip the wait — trip the switch and watch the custodian quorum confirm, then your beneficiary unlock the sealed documents.
Demo time runs at 3,600× · no transactions are broadcast
Time until claimable
30d 00h 00m 00s
Built for keeps
The release rules are enforced by the program rather than promised by us. File storage and delivery still rely on this app's server.
Wills, beneficiaries and custodians live in a Solana program; your files live on IPFS. Only the content hash is stored on-chain.
STORAGEAppoint trusted custodians and require M-of-N to confirm your passing. No single party — including us — can trigger a release.
QUORUMSet the window that arms your will. Custodians can only confirm once you have stopped checking in; each check-in resets the timer.
TIMERName multiple heirs, each with an allocation in basis points. Add, remove or reweight them anytime while the will is active.
SPLITSEvery will update, custodian confirmation and claim is a public transaction. Anyone — including your heirs — can verify the state.
AUDITSealing, confirming and claiming each cost a small network fee. Account rent is refunded when a will is closed.
COSTSecurity
VaultWill runs on an open-source program whose rules you can read, and every state change is a public transaction. Files are encrypted before they reach IPFS. The program has no admin instructions — no one can move an estate around the rules. Storage and document delivery still run through this app's server, so keep your own copies.
pub fn confirm_death(ctx: Context<ConfirmDeath>) -> Result<()> {
let will = &mut ctx.accounts.will;
let custodian = &mut ctx.accounts.custodian;
require!(!custodian.has_approved, ErrorCode::AlreadyApproved);
custodian.has_approved = true;
will.approvals_received += 1;
// Quorum reached -> beneficiaries may now claim.
if will.approvals_received >= will.min_approvals {
will.will_status = WillStatus::Claimable;
}
Ok(())
}Your files are encrypted in your browser before upload. The contract stores only IPFS content hashes; the keys to open a file are sealed to you and the heirs you named.
The will turns claimable only after you stop checking in, an M-of-N quorum confirms, and a 7-day grace period passes in which you can still revoke.
The program is open source with a test suite you can run yourself. It has not been independently audited yet, which is why it runs on devnet only.
While the will is active you can re-seal documents, reweight heirs, swap custodians, or revoke the whole thing.
Use cases
Four patterns we see most often. The protocol is general — your rules can be too.
Seal encrypted recovery info on IPFS so heirs can reach your wallets and accounts — but only after custodians confirm you are gone.
Wills, deeds, insurance policies and asset directories, hashed on-chain and released to the people you named.
Letters, photos and video for loved ones, delivered exactly when your custodians confirm — not a moment before.
Hand off credentials, runbooks and signing instructions so a company keeps running if a key person goes dark.
FAQ
Only what you choose to escrow. Tokens you deposit (SPL tokens, or SOL as wrapped SOL) sit in a vault owned by your will's program address — not by us — and you can withdraw them while the will is active. Everything else stays in your wallet. For documents, the program stores only IPFS content hashes, your beneficiaries and their splits, and your custodians.
Three gates. First, your inactivity window has to elapse — only an explicit check-in from the dashboard resets it; ordinary wallet activity does not. Then your custodians sign on-chain death confirmations. Once the M-of-N quorum is reached, a 7-day grace period starts in which you can still revoke; after it, each beneficiary can claim.
Custodians are wallets you trust to confirm your passing. Their only power is to approve a death confirmation — they can't read your files, change beneficiaries, or move anything. You choose how many must agree (the min_approvals quorum) and can add or remove them anytime the will is active.
Yes. While the will is Active, you can add, remove, or reweight beneficiaries, add or remove media references, and swap custodians — each a single signed transaction. Once a quorum confirms death, the will freezes into its Claimable state.
Any file type — documents, keys, images, video. Files are encrypted in your browser and the key is sealed to you and each heir who has registered a document key, then pinned to IPFS through this app's server. The chain only sees the CID and a short media-type tag. Note that a sealed heir holds a working key from upload onward, so only seal documents to people you trust with them; and keep your own copies, since pinning depends on the operator.
Just Solana rent and network fees (including a small priority fee so transactions land). Each on-chain account is a rent deposit that's refunded when you remove it or the estate is closed. The protocol itself takes no fee. It currently runs on devnet only, with test funds.
Final step
Connect a wallet, seal your documents, name your heirs and custodians. Keep checking in and nothing moves — go silent and your will follows the rules you set.