Questions, answered plainly.
The ones people actually ask before trusting software with their passwords, their net worth and their family’s instructions. Security questions have a page of their own.
Buying and delivery
The moment your payment clears, we email a private download link to your personal CofferShield vault. There's no account to set up — the vault itself is the product. If your link hasn't arrived within a few minutes, email support@coffershield.com and we'll sort it out.
No. CofferShield is a one-time purchase — no monthly fees, no renewals, no upsells. You get a perpetual licence to the version you buy, plus updates to it for as long as we publish them.
Yes — fourteen days, no argument. Email support@coffershield.com within fourteen days of purchase with your order number and one line about what didn’t work, and we refund you in full. We ask for the reason only so we can fix it. The refund policy has the detail, including the one case where we would decline.
Please check device compatibility before you buy — the requirements are firm rather than advisory. If you have already bought it and your system does not meet them, contact us and we will refund you. We would rather do that than have you fighting an installation that cannot work.
Using it
CofferShield is built for desktop — Windows and macOS — and that's what we officially support. It can open in a phone browser, but we don't recommend it: mobile browsers handle local file storage and backups inconsistently, which isn't a risk worth taking with your most sensitive records.
Only to receive it. After that it runs completely offline — you can disconnect entirely and every feature still works, which is the clearest proof your data never goes anywhere.
Yes. The vault file format is identical on both, so moving between computers — or switching from a PC to a Mac — is a matter of copying your backup across and opening it with the same master password. Nothing needs converting and nothing needs re-entering.
No, and that is deliberate: checking for updates would mean contacting a server. When there is a new version we tell you and you install it the same way you installed the first one. Your existing vault opens in the new version unchanged. The trade is honest and worth stating plainly — it also means there is currently no channel to push you a security fix, which the whitepaper lists among its own limitations.
Security and trust
You're not trusting us with anything — that's the entire design. CofferShield has no server, stores no copy of your data, and never sees your master password. We can't read your vault, sell your information, or lose it in a breach, because it never reaches us.
Yes. Everything you enter is encrypted with AES-256-GCM and unlocked only by a master password that never leaves your device. Because we hold no copy of your vault, there is nothing of yours on our side to breach — the vault is opened on your machine, with your password.
Yes, and all of it is public. The Security Architecture Whitepaper sets out the threat model, the cryptography, the key handling and the backup design across sixty pages — including a limitations section as long as the strengths, and an appendix listing the defects found while writing it. Device compatibility tells you whether it runs on your machine. Neither asks for an email address.
Not yet, and we are not going to imply otherwise. An independent audit is planned, and the security page will say so — with the report linked — on the day it is true and not before. In the meantime the whitepaper is a self-assessment that says so on its cover, and its Appendix C is a list of the claims we make and how to check each one yourself.
If something goes wrong
We can't recover either — by design, CofferShield keeps no copy of your data or your key. Treat your vault like a property deed: keep encrypted backups on a USB drive, an external disk, or in a safe, and record your master password somewhere your trusted people can find it.
Only if you have set that up, and CofferShield gives you three ways to do it: a recovery key you print and store, a set of Shamir shares split between people you trust, or simply an older encrypted backup plus the password kept somewhere safe. What we cannot do is help from our end. There is no support route into a vault — not for your family, and not for you. How the routes back in work.
Your vault keeps working. It is an application on your machine reading a file on your disk, with no licence server to check in with and no subscription to lapse. Nothing about it depends on us continuing to exist — which is a strange thing for a company to advertise, and the main reason it is worth advertising.
Still deciding?
Run the whole demo first. No signup, no email address, a full family’s records already in it.
Fourteen-day refund. No account to create, and nothing to cancel.