Security

What protects your account,
described plainly.

Security pages usually list acronyms. This one lists the controls Legacy Suite actually runs, and is equally clear about the ones it does not — because a plan you trust should start with information you can check.

Open Legacy SuiteRead the privacy policy

The controls that are actually running

Six things, including one that is a limitation rather than a feature. It is on the list because leaving it off would make the other five misleading.

Two-factor authentication

Phone-based multi-factor authentication is available on your account and enrolled through your profile. Once it is on, signing in asks for a code sent to your phone in addition to your usual method, and every sign-in route handles that challenge.

Three ways to sign in

Google sign-in, an email magic link sent to your address, or a crypto wallet signature. Each avoids a reusable password you have to invent and remember, and each supports the two-factor challenge above.

Time-limited document links

Files in your vault are served through signed URLs generated when you open them, rather than through permanently public links, so a copied address does not stay usable indefinitely.

Sharing requires acceptance

You can only share with trusted contacts who accepted your invitation. Someone who never accepted cannot appear in a share picker, so access is not granted to an address that never agreed to hold it.

Release is reviewed by a person

Access marked for after your passing is not opened by a timer. An executor submits a death certificate and supporting documents, and a person reviews them before anything is released.

Stored credentials are not encrypted

Passwords saved in LegacyPass are encoded for storage, not encrypted. We list this beside the controls above rather than leaving it out, because it should inform what you choose to store.

What we do not claim

Estate platforms tend to advertise certifications and cryptography in the abstract. We would rather tell you where the product's protections end, so you can decide what belongs in it.

In place today

  • Phone-based two-factor authentication on your account
  • Google, email magic link, and wallet sign-in
  • Signed, time-limited URLs for viewing stored documents
  • Invitation-and-acceptance before any contact can be shared with
  • Per-item control of who receives what, and whether that is now or after your passing
  • Human review of death certificates and supporting documents before release

Not in place

  • Credentials in LegacyPass are not encrypted — they are encoded
  • We hold no third-party security certification we can point you to
  • There is no client-side encryption that would prevent us reading your data
  • There is no automated breach or dark-web monitoring
  • There is no automatic death detection, inactivity timer, or dead man's switch

Choosing what to store

Because stored credentials are encoded rather than encrypted, the sensible approach is to match what you store to what the product actually protects.

Good fit
  • The account inventory your executor would otherwise have to reconstruct
  • Everyday services — email, utilities, subscriptions, social profiles
  • Notes on where important physical documents are kept
  • Instructions and context that make your intentions clear
Keep elsewhere
  • Seed phrases and private keys controlling significant funds
  • Any single secret whose exposure would be catastrophic on its own
  • Credentials your employer or a regulator requires you to hold differently
  • For these, use dedicated key management and record only where to find it

Securing your own account

Three things worth doing in the first ten minutes.

Step 01

Turn on two-factor authentication

Account settings: Enrol your phone number from your profile. This is the single most effective control available on your account, and it takes about a minute.

Two-factor enabled

A code is required at sign-in

Step 02

Secure the inbox behind the magic link

Your email account: If you sign in by email link, whoever controls that inbox can reach your account. Protect that email account with its own strong, unique password and its own two-factor authentication.

1

Inbox secured

Two-factor on your email provider

Step 03

Review who you have shared with

Shared resources: Shared Resources shows what you have shared and with whom, in both directions. Reviewing it occasionally is the simplest way to keep access matched to your current intentions.

Questions about security

Including the ones most security pages avoid.

Credentials stored in LegacyPass are encoded for storage and transport, not encrypted, and there is no client-side encryption that would prevent Legacy Suite from reading your data. Connections to the site use HTTPS like any modern web application. We would rather state this precisely than let a padlock icon imply something stronger.
Because you are deciding what to put into an estate plan, and that decision depends on knowing how it is held. A security page that lists only reassurances is not much help when the question is whether a particular secret belongs here. The controls that do exist are listed on this page, and so are the ones that do not.
Phone-based multi-factor authentication, enrolled from your profile. When it is on, signing in requires a code sent to your phone in addition to your usual sign-in method, and all sign-in routes handle that challenge. It is a genuine control and it is the first thing we would suggest enabling.
Three ways: Google sign-in, an email magic link sent to your address, or a crypto wallet signature. Each avoids a reusable password you have to invent and remember, and each works with two-factor authentication.
Whoever controls that inbox can request a sign-in link, so your email account becomes part of your security. Protect it with its own strong, unique password and its own two-factor authentication, and enable two-factor on Legacy Suite so an inbox alone is not sufficient.
Through signed URLs generated when you open a document, rather than permanently public links. That means a copied address does not remain usable indefinitely.
No. Sharing only works with trusted contacts who have accepted your invitation. Someone who has not accepted does not appear in the share picker, so access cannot be handed to an address that never agreed to receive it.
Anything you mark for after your passing stays that way until an executor submits a claim with a death certificate and supporting documents, and a person reviews them. There is no timer, no inactivity trigger, and no automated detection that could fire early.
We are not going to claim a certification on this page. If a compliance attestation is a requirement for you, please contact us and ask directly rather than relying on a marketing badge — that is the right way to evaluate any vendor on this question.
Any single secret whose exposure would be catastrophic on its own — a seed phrase or a private key controlling significant funds. Use dedicated key-management tooling for those and record only where to find them here. The product is a good fit for the account inventory your executor would otherwise have to reconstruct from nothing.
No. How personal data is handled, accessed, and deleted is governed by our privacy policy, which is the authoritative statement on the subject and takes precedence over any summary on this page.
Yes. Account deletion is available from your account settings. Our privacy policy sets out what happens to your data when you do.
Please use the contact page and tell us what you found. We would rather hear about a problem from you than not hear about it, and reports about the accuracy of anything on this page are equally welcome.

Security you can
actually verify.

Turn on two-factor authentication, then decide what belongs in your plan with a clear picture of how it is held.

Open Legacy SuiteQuestions? Contact us