The honest promise

What Untilum protects—and what it cannot repair

Security is useful only when its assumptions and failure cases are visible before you trust it with something important.

Can do

Designed to protect

Contents before the date

Opening requires both the password and a verified public value released for the chosen time.

Contents from storage

Storage receives the encrypted capsule, not the open file or password. Fetched bytes are checked for integrity.

Opening from platform permission

The capsule is a document. A compatible opener should not need an Untilum account, server approval or active subscription.

Cannot do

Cannot protect or recover

!

A lost password

There is no recovery service or hidden key. A forgotten password loses access.

!

Every lost copy

Encryption cannot restore a deleted file. Preserve at least two independent copies and check storage media over time.

!

A compromised device

Malware or a keylogger on the device used to seal or open can defeat any document format.

!

A guaranteed century

Long-lived opening is a design goal, not a warranty. Formats, cryptography, devices and public time networks all have residual risks.

Early access

Current early-access status

These statements are part of the product, not small print.

  • No completed external security audit.
  • The Android APK is development-signed and not an app-store release.
  • The current mobile implementation uses drand quicknet for its public time proof.
  • Multi-beacon evolution exists in protocol drafts; it is not a finished consumer feature.
  • The time-lock layer is not claimed to be post-quantum secure.
  • Automatic distributed copying and delivery are not part of the current core application.

Your preservation plan

Use Untilum responsibly

  1. 01Begin with an unimportant test file and short opening date.
  2. 02Use a password-manager-generated passphrase of at least five random words. Store it separately and verify how the recipient will receive it.
  3. 03Keep at least two verified UDDP copies in genuinely independent locations.
  4. 04Review and migrate storage media periodically.
  5. 05Do not treat a capsule as a legal will, notarization or proof of its hidden contents.

Still have a question?

Read the complete plain-language answers before downloading the beta.

Read the FAQPublic protocol