Gate A, your people
A quorum of the people you chose must each present the physical key piece you gave them. No single person can act alone.
Businesses you build. People you love.
If something happens to you, everything important should keep running.
Torchpass is your continuity plan. It securely stores the knowledge, access and instructions your people would need, so they can step in with clarity, not guesswork.
End-to-end encrypted
Zero knowledge. We can never read your plan.
Open-source core
Auditable by anyone. Works even without us.
Multi-party protocol
Time-gated release. No single point of trust.
How it works
Silence is only ever a signal to check in. People make the decision.
Torchpass quietly notices you're around, a login, a commit, a deploy. If you go quiet, it asks you first, then asks your people to check on you. Nothing is ever released without human confirmation and a waiting period you can always stop.
-
01 Active
Life as normal. Any sign of you keeps everything sealed.
-
02 Quiet
14 days of silence. A private nudge, to you only.
-
03 Nudged
We try every channel you gave us. One click ends it.
-
04 Checking
Your people are asked to check on you in person.
-
05 Attested
A quorum of them formally confirms what happened.
-
06 Grace
A final waiting period. Everyone is told, daily. Anyone can pause it. You can stop it.
-
07 Released
Your people combine their key pieces and unlock your plan.
Security
There is nobody to trick, and nothing to steal.
Your plan is encrypted in your browser before it ever reaches us. There is no password reset, no support override, no admin tool that can open it. Unlocking always requires two things at once, and neither is enough alone.
Read the security designGate B, the protocol
The final piece is only released after the full check-in, attestation and waiting sequence completes, with every party notified at every step.
Even if we vanish
An open-source, offline unlocker means your people can still open your plan without Torchpass existing at all.
For your people
Built for the hardest week of their lives.
Your deputies don't need to be technical, and they don't need to prepare. When the time comes, Torchpass walks them through everything, one calm step at a time, in plain English, on their phone.
What to keep paying. What's safe to cancel. Who to tell, with the words already drafted. A first-week checklist written by you, while you were fine.
What your people would seePricing
Prepaid for years, so it can't lapse when it matters.
Never a monthly card charge that dies with its owner. Torchpass is paid annually or years in advance, so your plan stays protected through the exact moment it's needed.
See plansQuestions
What if a key piece is lost in a fire or a move?
Only some of the pieces are needed, not all of them, so no single lost one matters. A yearly rehearsal catches losses while you're around to fix them.
Could it release by mistake while I'm just offline?
No. Silence alone never releases anything. It takes weeks of notices, your people physically confirming, a formal attestation, and a final waiting period you can stop with one click.
What about a coma, not death?
Incapacity is handled separately. Your people can unlock only the keep-the-lights-on essentials, never the full handover. When you recover, access is revoked and keys are rotated.
Can Torchpass staff read my plan?
No, mathematically, not just by policy. Everything is encrypted before it leaves your browser, and we never hold a complete key. A leak of our entire database would yield ciphertext.
Fifteen minutes now.
Clarity forever.
Your first protected capsule takes less time than a stand-up.
Create your plan