Security & privacy
Private by architecture, not by promise.
We can't read your vault. We can't sell it. We never see it — there's no server to see it with.
0 servers
No remote backend, no central database.
0 accounts
No sign-up, no email, no identifier.
AES-256 on device
Authenticated encryption on your iPhone.
Encrypted on your device
Every entry — including titles and heir names — is encrypted with AES-256-GCM before it's written to storage.
Keys in the Secure Enclave
Your master key is wrapped by a hardware key in Apple's Secure Enclave, released only on Face ID or Touch ID.
No server, nothing to breach
Bequest makes no network calls except Apple's App Store for purchases. There is no backend to attack.
Verify it in airplane mode
Turn off the network and the whole app still works. Nothing to trust — you can check it yourself.
No analytics, no tracking
No analytics SDK, no crash reporting, no ad IDs. We collect nothing because we built nothing to collect it.
Minimal, auditable surface
Apple's first-party frameworks plus our code. At most two third-party libraries, no hidden dependencies.
Honest about limits
What Bequest protects — and what it doesn't.
Protects against
A lost or stolen device, casual access, and a company breach — there's no company data to breach.
Does not defend against
A jailbroken or compromised OS, or someone holding your unlocked phone and your face. And Bequest is not a legal will.