COFFERSHIELD Get CofferShield
Offline digital safe · Windows & macOS

Protect everything.
Offline.

Not just passwords.

Passwords. Documents. Estate. Insurance. Beneficiaries. Emergency information. Incapacity planning. Everything encrypted, and everything stays on your computer.

$129 once · no account · no subscription · fourteen-day refund

The CofferShield dashboard: total net worth of $1,407,648, the trend over eighteen readings, allocation and largest holdings
The Passwords & IDs screen, with every secret masked until revealed
0Cloud servers holding your vault
0%Of features work with the network off
0-bitAES-GCM, authenticated
0Payment, then it is yours
LifetimeNo licence server to expire
The Estate screen showing 74% of the estate allocated and six assets with no one named yet
Estate & inheritance · actual screen
Why CofferShield exists

Most people organise their passwords.

Almost nobody organises the rest of it:

  • Estate documents
  • Insurance policies
  • Beneficiary designations
  • Emergency contacts
  • Medical directives
  • Inheritance instructions
  • Recovery keys
  • Digital legacy

One emergency can make all of it impossible to find — usually at the moment the one person who knew is the one person who cannot be asked.

CofferShield is one encrypted file that holds it all, on your machine, opened by a password only you have.

Everything you protect

Twelve kinds of information. One file.

Each one modelled properly, with its own fields and its own rules about what may be printed.

Passwords

Logins, PINs, licences, security answers

Seed phrases

Wallets and recovery words, masked until you reveal them

Documents

Deeds, policies, certificates, scans

Insurance

Six categories, thirty-six fields

Assets

Nine types, from property to crypto

Liabilities

Twelve kinds of debt, fully modelled

Estate

Where the will is, and who holds it

Beneficiaries

Who is named, and where it disagrees

Incapacity planning

Directives, powers of attorney, the bills

Emergency sheet

One printed page for the first hour

Recovery codes

Kept with what they unlock

Notes

In your words, attached to the record

How it works

Four steps, then it stays out of your way.

Create your vault

Install, choose a master password of six words or more. About a minute. No account, no email verification, nothing to activate.

Add what matters

Passwords first, because that is the habit you already have. Then the parts nobody else has asked you for — the policies, the beneficiaries, the instructions.

Everything is encrypted

AES-256-GCM, with your password stretched through 600,000 rounds before it becomes a key. Nothing is written in the clear, and nothing is sent anywhere.

Your family knows what matters

Print the emergency sheet and the heir sheets. Set up a recovery route. The vault stops being a private habit and becomes something that survives you.

See it before you buy it

The whole thing runs in your browser.

Every tab, with a full family’s records already in it. Reveal a seed phrase, print an heir sheet, undo a deletion, run the beneficiary audit. No signup, no email address, nothing installed.

The Transfer view, showing which assets pass to which named person
Estate → Transfer · actual screen
The offline advantage

What changes when there is no server.

Compared with the category most people already use. This is about a difference in architecture, not a claim that cloud password managers are badly built — the good ones are excellent at the job they do.

 CofferShield Cloud password managers
Works with the network unpluggedYesNo
One payment, no subscriptionYesNo
Your vault exists only on your machineYesNo
Estate planning recordsYesNo
Beneficiary designations, auditedYesNo
Incapacity planningYesNo
Printable emergency binderYesNo
Instructions for your familyYesNo
Insurance policies, properly modelledYesNo
Keeps working if the company stopsYesNo

The trade runs both ways, and it is worth stating: a cloud manager syncs to your phone, shares with a team, and can restore your data if your laptop is stolen. CofferShield does none of those things. It is built for the information you would not put in any of them.

Security

There is no route from the internet to your vault.

Your vault is a single encrypted file on your own disk. The application reads it, holds the key in memory while you are working, and discards it when the vault locks. There is no account system, no server holding a copy, and no key on our side — which also means no support route in, for you or for anyone claiming to be you.

Encrypted with AES-256-GCM. Your master password is stretched through 600,000 rounds of PBKDF2-SHA256 — the current OWASP recommendation — before it ever becomes a key.

NO ROUTE
Where your vault lives · architecture
If you forget your master password

There is no password reset. There is a way back.

We cannot open your vault and we will never pretend otherwise. What we can do is make sure you set up a route back in before you need one. There are three, and you choose which:

Recovery key

A printed key generated when you create the vault. Keep it where you keep your passport.

Shamir shares

Split into parts held by people you trust. Any agreed number of them together can open it; one alone cannot.

An older backup

Any encrypted .coffer file plus the password it was made with. Which is why the app keeps a rolling set.

Who uses it

People whose affairs outgrew a drawer.

Families

One place both partners can find, and one sheet the children can be handed.

Professionals

People whose affairs have grown past what a drawer and a memory can hold.

Crypto holders

Seed phrases that must survive you without being visible before then.

Executives

Where the exposure is concentration: one person knowing everything.

Parents

Guardianship, medical directives, and the six weeks nobody plans for.

Small businesses

Licences, registrations and the credentials the business runs on.

Lawyers and advisers

Clients who arrive organised, with the documents already located.

Before you buy

Don’t take our word for it.

Three things you can check yourself in the next two minutes — no account, no email address, nothing to install, and nothing that depends on trusting us.

Run the whole demo

Every tab, a full family's records, no signup. Reveal a seed phrase, print an heir sheet, undo a deletion.

Pull your Wi-Fi out

Use it with the connection off. Nothing degrades, because nothing was coming from a server.

Watch the network tab

Open developer tools, reload, count the requests leaving your machine. It is a short count.

CofferShield is new, so there are no testimonials on this page yet. We would rather show you an empty wall than invent praise for it — and the same goes for star ratings, user counts, press logos and security certifications.

Questions, answered

Everything you’d want to know first.

You're not trusting us with anything — that's the entire design. CofferShield has no server, stores no copy of your data, and never sees your master password. We can't read your vault, sell your information, or lose it in a breach, because it never reaches us.

We can't recover either — by design, CofferShield keeps no copy of your data or your key. Treat your vault like a property deed: keep encrypted backups on a USB drive, an external disk, or in a safe, and record your master password somewhere your trusted people can find it.

Only to receive it. After that it runs completely offline — you can disconnect entirely and every feature still works, which is the clearest proof your data never goes anywhere.

No. CofferShield is a one-time purchase — no monthly fees, no renewals, no upsells. You get a perpetual licence to the version you buy, plus updates to it for as long as we publish them.

CofferShield is built for desktop — Windows and macOS — and that's what we officially support. It can open in a phone browser, but we don't recommend it: mobile browsers handle local file storage and backups inconsistently, which isn't a risk worth taking with your most sensitive records.

Yes, and all of it is public. The Security Architecture Whitepaper sets out the threat model, the cryptography, the key handling and the backup design across sixty pages — including a limitations section as long as the strengths, and an appendix listing the defects found while writing it. Device compatibility tells you whether it runs on your machine. Neither asks for an email address.

Protect what matters.

One payment. Lifetime ownership.

$129 once · Windows and macOS · fourteen-day refund · no account to create