Skip to main content
Eternum is a zero-knowledge digital inheritance platform. You encrypt important records in your browser, distribute recovery shares to trusted contacts, and define beneficiaries who can recover the vault after death verification.
Eternum cannot read vault contents. The server stores encrypted data, encrypted recovery shares, and release state, but it never receives the plaintext vault key.

Set up your vault

Create an account, add encrypted vault items, and prepare recovery shares.

Understand recovery

See how trusted contacts, beneficiaries, and death verification work together.

Review the security model

Learn what Eternum can and cannot decrypt.

Operate Eternum

Deploy the API, web app, database, Redis, and object storage services.

​
How Eternum works

1

Create a local vault key

Your browser derives a master key from your PIN or password using Argon2id.
2

Encrypt vault items before upload

Each vault item is encrypted in the browser with AES-GCM before it leaves your device.
3

Split recovery shares

Your browser splits the master key into Shamir Secret Sharing recovery shares.
4

Release shares after verification

If death verification completes, trusted contacts release beneficiary-bound recovery shares.
5

Recover in the beneficiary browser

Beneficiaries combine enough shares in-browser to reconstruct the master key and decrypt vault items.
If you lose your credential and do not have enough recovery shares available later, Eternum cannot recover the vault for you.