Your vault · $30 a year or self-hosted

A vault for what you can't lose. Locked on your device, opened only by you, passed on when you choose.

$30 a year hosted, or run it yourself for free. Same core protection either way.

Opening…UNOLOCK
Enter PIN
PersonalFamily sharedCrypto
Passport scansBoth pages, renewed 2025
2FA backup codesEmail, bank, domain
Will and executorSigned copy attached
Medical recordsAllergies, prescriptions
Cold savingsWallet note
Before travel☐ Time Lock key
Sent to the serverpositions [·, ·, ·, ·]

Your turn. Click C416 on the keys, or the safeword E58D. You can type them too.

Why UnoLock exists

The world is changing.

Surveillance is growing on every side. Governments, platforms and data brokers collect more of our lives every year, and the pressure on ordinary people to give up their privacy and their freedoms keeps rising. Your records, your money and your identity increasingly sit with someone else, and anyone who holds them can be pressured to hand them over.

UnoLock is sovereignty technology. It gives you a space that is truly yours: encrypted on your device, opened only by you and passed on only when you choose. Your vault content reaches the service already encrypted, so there is no readable copy to hand over from storage. Hosted for $30 a year or run on your own server for free, it keeps what matters most out of reach of everyone but you.

Protection · Privacy · Peace of mind

What it does

One vault for the things you would hate to lose and could not easily replace. Everything is encrypted on your device before it goes anywhere, so nobody else can open it, including us.

  1. Stores what you can't lose

    Files, passwords, IDs, medical records, contracts, Bitcoin and Ethereum. All in one place.

  2. Keeps you safe

    Locked on your device. A decoy or a wipe if you are forced to open it. Time Lock for checkpoints.

  3. Passes it on

    LegacyLink gets the person you chose in after you go quiet. Lockout Guard helps you plan for a lost device with recovery you set up ahead of time.

A full crypto wallet, right inside your vault.
What is a Digital Paper Wallet?

The film

See it work, start to finish.

Opening, keeping, pressure, inheritance and the choice of who runs it. Two minutes, with a voiceover and captions.

No accounts

How you open it

Open with a passkey or security key and your PIN. No account password to remember or reset.

01/03

Touch your fingerprint, face or key

Your device proves it is you. Nothing about your fingerprint or face ever leaves it.

02/03

Click your PIN on a scrambled keypad

The keys move every time, so the PIN itself is never typed or sent.

03/03
OPEN ✓

You're in

Your vault opens in memory only. Close it and the keys are gone from the browser.

No email. No username. No password.

Pricing

Two ways to run the same vault

Pick who runs the hardware. The core Safe experience and client-side encryption stay the same.

SovereignHighRisk

Sovereign: hide sensitive Spaces on safeword entry. Return to normal access to see them again.

We host it

UnoLock Hosted
$30 / year

US$2.50 per month equivalent. 1 GB and 2 access keys included. Extra storage $1/GB/month. Extra keys $2/key/month, up to 10 total. Applicable taxes are extra.

Runs in your browser. Nothing to install, nothing to operate.

  • Two protection modes, one price: Sovereign or HighRisk
  • Multi-region redundancy for your encrypted data
  • Yearly card subscriptions, or one-time credits by card or Bitcoin
  • Deletion is scheduled six months after Safe expiry

Every vault includes
  • Biometric & FIDO2 Access
  • End-to-End Encryption
  • Post-Quantum Protection
  • Threat Detection
  • Local File Encryption
  • DuressDecoy HIDES ON SAFEWORD
  • LockOutGuard
  • SeedSafe
  • Vault Messaging: Receive Addresses
  • Access Keys
  • Agent Device Key + Multi-Space
  • LegacyLink Inheritance
  • Spaces
  • Digital Paper Wallet (BTC, ETH, ERC-20)
  • DPW VaultSign
  • DPW Portability
Open vault

You host it

UnoLock Self-Hosted
Free · open source (AGPL-3.0)

No billing, no expiry and no storage cap inside your node.

The same app on your hardware. Your disks, your jurisdiction. No storage cap.

  • You operate it: updates, availability and backups are yours.
  • Open source under AGPL-3.0. Read every line.
  • Installs with Docker Engine on a 64-bit Intel/AMD Linux server.
  • Federates with other nodes over Tor: messages, files and shared Spaces.

Every vault includes
  • Biometric & FIDO2 Access
  • End-to-End Encryption
  • Post-Quantum Protection
  • Threat Detection
  • Local File Encryption
  • DuressDecoy HIDES ON SAFEWORD
  • LockOutGuard
  • SeedSafe
  • Vault Messaging: Receive Addresses
  • Access Keys
  • Agent Device Key + Multi-Space
  • LegacyLink Inheritance
  • Spaces
  • Digital Paper Wallet (BTC, ETH, ERC-20)
  • DPW VaultSign
  • DPW Portability
Get Self-Hosted

Same core protection. Choose whose hardware it runs on.

See all features
Pricing questions

The current managed paid-tier configuration schedules deletion six months after Safe expiry. Keep credits available before the displayed expiry date.

30 features

Everything in every vault

30 features shown

Federation

Independent nodes talk to each other

Your node, a friend's node, a node across the world. People keep their own home service and still exchange private messages, send files and work in shared Spaces, sealed the whole way.

Your node, another node and a friend's node, connected over Tor. Messages, files and shared Spaces move between them, sealed.Your nodeSELF-HOSTEDAnother nodeSELF-HOSTEDA friend's nodeSELF-HOSTEDMESSAGES · FILESSHARED SPACES · MESSAGESROUTED OVER TOR

Sealed on your device, routed over Tor, readable only by the person it's for.

Comparison

How UnoLock compares

How UnoLock compares with big tech custodians, password managers and hardware wallets
CapabilityBig tech custodiansPassword managersHardware walletsUnoLock
Zero-knowledge operatorNOSOMEYESYES
Withstands subpoena or compulsionNOSOMESOMEYES
Physical coercion defenceNONOSOMEYES
Built-in inheritanceSOMESOMENOYES
No single point of failureNONONOYES
Open sourceNOSOMESOMEYES
Runs on your own hardwareNOSOMEYESYES

Yes Some No

AGPL-3.0

No single point of failure. Open source.

Everything is locked on your device before it leaves, so our servers only ever hold sealed data. Run it on our cloud or on your own hardware. Self-Hosted nodes federate, so people on different nodes can still work together.

If we disappear, nothing stops. The source of the node and client is already public, and every Self-Hosted node keeps working on its own disks.

Read the source code page

get safe.

You either need this or you don't.

$30 a year hosted, or run it yourself for free. Same core protection either way.