One payment. One vault. Yours.
$129 once. No subscription, no renewal, no tier above this one. The version you buy keeps working whether or not we do, because there is no licence server for it to check in with.
Lifetime licence for Windows and macOS. Fourteen-day refund, no argument.
Payment handled by Lemon Squeezy. We never see your card, and there is no account created on our side.
- Every feature — there is no higher tier
- Passwords, documents, estate, beneficiaries, incapacity, insurance, assets, dashboard
- Printable emergency sheet, heir sheets and wallet card
- Encrypted automatic backups to a folder you choose
- Windows and macOS — the same licence covers both
- The 87-page user manual, installed alongside the app
- Updates to the version you buy, for as long as we publish them
- A subscription, a renewal or an upsell
- An account, a login, or anything to cancel
- A cloud copy of your vault
- A way for us to recover your master password
Every screenshot on this site is the real application with the demo vault loaded. Nothing is a composite, and nothing shows a screen that does not exist.
Need more detail?
All three are published in full. None of them asks for an email address.
Security Architecture Whitepaper
The cryptographic design, the trust boundaries and the threat model — and, at equal length, what this design does not protect you from.
60 pages · v1.0User Manual
Every screen, every field and every layout, including custom fields and custom types. Twenty-six sections, thirty-five screenshots.
87 pages · v1.0Device Compatibility
Which Windows and Mac machines it runs on, what is not supported, and what to expect the first time you open it.
Read before you buyA subscription is the wrong shape for this.
It has to work in twenty years
The whole point is that someone opens it at the worst possible moment. A lapsed card should not be able to stop that.
There is nothing to host
No servers, no storage, no per-user cost. Charging monthly would be charging you for our convenience, not your service.
Nothing to cancel
No account means no dark-pattern retention flow, no “are you sure”, no discount to make you stay.
To be plain about the trade: a one-time price means there is no recurring revenue funding an update channel, and CofferShield does not currently have one. When there is a new version we email you and you install it. The whitepaper lists that among its own limitations rather than leaving you to discover it.
One payment. Lifetime ownership.
The download link arrives by email the moment your payment clears. There is nothing to activate.
Fourteen-day refund · Refund policy · Terms
Still not sure?
Run the demo. It has a full family’s records in it, and it asks you for nothing.
No signup, no email address, nothing installed.