VaultWill
Launch App
Live on Solana devnet · Audit in progress

Your digital will,
enforced on-chain.

Seal documents, keys, and final messages on IPFS, name your heirs, and appoint trusted custodians. When you go silent and your custodians confirm it, your beneficiaries inherit access — no lawyers, no executor, no custody of your files.

Create Your WillTry Demo
Non-custodial
100%
Storage
IPFS + on-chain
Release
M-of-N custodians
Will active
7H4q…wQ2P
Sealed on IPFS
8documents
Inactivity timer03d 14h 22m
Beneficiaries3
ipfs: cid pinnedpinned
Beneficiary9xVu…kP1

How it works

Three steps. One signature each.

VaultWill replaces lawyers, paperwork, and goodwill with a program that releases exactly what you sealed — to exactly who you named, exactly when your custodians confirm.

STEP 01

Seal your will

Upload documents, keys, and messages to IPFS, name beneficiaries with their allocation splits, and set your inactivity window — all on-chain.

  • Encrypted files on IPFS
  • Weighted beneficiary splits
  • Set the inactivity timer
STEP 02

Appoint custodians

Name trusted custodians and choose how many must agree before anything unlocks. They can only confirm your passing — never read or move your files.

  • M-of-N custodian quorum
  • On-chain death confirmation
  • Add or remove anytime
STEP 03

Heirs inherit

Once you've gone inactive and your custodian quorum confirms, the will turns claimable. Each beneficiary signs to unlock the IPFS payload — no executor, no intermediary.

  • Contract-enforced release
  • Per-beneficiary claim
  • Access to sealed documents

Interactive demo

Walk through a full will lifecycle.

Connect a simulated Phantom wallet, seal a will, and check in to stay active. Or skip the wait — toggle Simulate Death to have the custodian quorum confirm, then watch your beneficiary unlock the sealed documents.

Demo time runs at 3,600× real-time so the countdown is visible. No transactions are broadcast.

On-chain log

  • // awaiting wallet connection…
Wallet
Not connected
IdleNo check-ins yet

Time until claimable

30d 00h 00m 00s

Built for keeps

Everything a will should be — and nothing it shouldn't.

On-chain + IPFS

Wills, beneficiaries, and custodians live in a Solana program; your files live on IPFS. Only the content hash is stored on-chain — read straight from the chain.

Custodian quorum

Appoint trusted custodians and require M-of-N to confirm your passing before the will unlocks. No single party — including us — can trigger a release.

Inactivity dead-man's switch

Set the inactivity window that arms your will. Custodians can only confirm once you've gone quiet — staying active keeps everything sealed.

Weighted beneficiaries

Name multiple heirs, each with an allocation in basis points totalling up to 100%. Add, remove, or reweight them anytime while the will is active.

Transparent & auditable

Every will update, custodian confirmation, and claim is a public transaction. Anyone — including your heirs — can verify the state.

Solana-fast and cheap

Sealing a will, confirming death, and claiming each cost a fraction of a cent, with sub-second confirmation. Account rent is refunded when a will is closed.

Security

Trustless, not trust-me.

VaultWill executes a contract you read, signed, and can verify on-chain. Your files are encrypted before they ever reach IPFS. No backdoors, no admin keys, no recovery hotline. That's the point.

custodian.rsverified
pub fn confirm_death(ctx: Context<ConfirmDeath>) -> Result<()> {
  let will = &mut ctx.accounts.will;
  let custodian = &mut ctx.accounts.custodian;
  require!(!custodian.has_approved, ErrorCode::AlreadyApproved);

  custodian.has_approved = true;
  will.approvals_received += 1;

  // Quorum reached -> beneficiaries may now claim.
  if will.approvals_received >= will.min_approvals {
    will.will_status = WillStatus::Claimable;
  }
  Ok(())
}
01

Non-custodial by design

Your files, your keys. The contract never holds your data — only IPFS content hashes — and only the rules you signed can open it.

02

Custodian-gated release

The will turns claimable only after you go inactive and an M-of-N custodian quorum confirms. No off-chain authority can override it.

03

Open & auditable logic

Source verified on Solana Explorer. Two independent audits in progress (OtterSec and Neodyme).

04

Owner stays in control

While the will is active you can re-seal documents, reweight heirs, swap custodians, or revoke the whole thing — every action a signed transaction.

Use cases

Built for anyone who can't afford to disappear.

Four patterns we see most often. The protocol is general — your rules can be too.

PersonalEncrypted on IPFS

Key & seed-phrase escrow

Seal encrypted recovery info on IPFS so heirs can reach your wallets and accounts — but only after custodians confirm you're gone.

DocumentsAny file type

Estate instructions

Wills, deeds, insurance policies, and asset directories, hashed on-chain and released to the people you named.

MessagesPer-heir allocation

Final words

Letters, photos, and video for loved ones, delivered exactly when your custodians confirm — not a moment before.

BusinessM-of-N custodians

Succession & access

Hand off credentials, ops runbooks, and signing instructions so a company keeps running if a key person goes dark.

FAQ

The questions everyone asks first.

  • No. The program never custodies SOL, SPL tokens, or NFTs. It stores the content hashes (IPFS CIDs) of the files you seal, your beneficiaries and their allocation splits, and your custodians. What your heirs inherit is access to the encrypted payload you uploaded — not funds moved by the contract.

  • Two gates. First, your inactivity window has to elapse — staying active keeps everything sealed. Then your custodians sign on-chain death confirmations; once the M-of-N quorum you set is reached, the will becomes Claimable and each beneficiary can claim.

  • Custodians are wallets you trust to confirm your passing. Their only power is to approve a death confirmation — they can't read your files, change beneficiaries, or move anything. You choose how many must agree (the min_approvals quorum) and can add or remove them anytime the will is active.

  • Yes. While the will is Active, you can add, remove, or reweight beneficiaries, add or remove media references, and swap custodians — each a single signed transaction. Once a quorum confirms death, the will freezes into its Claimable state.

  • Any file type — documents, keys, images, video — pinned to IPFS. Encrypt it client-side before uploading; the chain only ever sees the CID and a short media-type tag, never the contents.

  • Just Solana rent and fees. Each on-chain account (the will, each beneficiary, custodian, and media reference) is a small rent deposit that's refunded when you remove it or close the will. The protocol itself takes no fee.

Final step

Secure your legacy in minutes.

Connect a wallet, seal your documents, name your heirs and custodians. Stay active and nothing moves — go silent and your will does exactly what you wrote.

Launch AppView Demo
Devnet open · Mainnet Q3•Audits: OtterSec, Neodyme•Source on Solana Explorer