Contents before the date
Opening requires both the password and a verified public value released for the chosen time.
The honest promise
Security is useful only when its assumptions and failure cases are visible before you trust it with something important.
Can do
Opening requires both the password and a verified public value released for the chosen time.
Storage receives the encrypted capsule, not the open file or password. Fetched bytes are checked for integrity.
The capsule is a document. A compatible opener should not need an Untilum account, server approval or active subscription.
Cannot do
There is no recovery service or hidden key. A forgotten password loses access.
Encryption cannot restore a deleted file. Preserve at least two independent copies and check storage media over time.
Malware or a keylogger on the device used to seal or open can defeat any document format.
Long-lived opening is a design goal, not a warranty. Formats, cryptography, devices and public time networks all have residual risks.
Early access
These statements are part of the product, not small print.
Your preservation plan
Read the complete plain-language answers before downloading the beta.