Unsigned By DesignThe Workshop
It assembles the unsigned transaction in full — every input, output and fee — ready for your hardware to sign, and then it stops. It never signs, and there is no code in it that can. Asked to "just sign it," it refuses every time, politely and by design. Every signature happens on a human's own device, by a human's own hand, off the machine completely. The most important thing it does is the one thing it won't.
Read the full story → Many SignersLogistics
When a transaction needs more than one signature, it ferries the part-signed transaction between everyone's devices, checks at every hop that nothing changed, combines the pieces once they have all arrived, and broadcasts the result through your own node. It moves and validates everything and signs none of it — every signature is added by a person on their own hardware. The agent is the courier and the auditor, and never the signer.
Read the full story → Private ViewThe Ticker
It shows what you hold and which coins — which UTXOs — it is sitting in, counted on your own node rather than reported by a company's server. You can check it nine times an hour if you like, and no one anywhere learns that you did, or how much there is to check. Your balance tells you something and tells no one else anything. The number, reliably and privately, is just the number.
Read the full story → FeesMarkets Desk
It reads the current fee market straight from your own node's mempool and tells you, in plain English, what to pay for the speed you actually need — no fee oracle, no third-party estimate, no guessing. Ask for "sometime today" and it points you to the cheap rate; ask for "right now" and it says so plainly. It offers the slow lane whenever the slow lane will do, which is far more often than a moment of panic suggests.
Read the full story → Fresh AddressThe Mailroom
It hands you a fresh receive address every time you ask, from the same wallet, at no cost. Reusing one address piles every payment you have ever received onto a single public line that anyone can read together and total. A new address each time keeps that history to yourself. Same funds, same wallet — just none of the bookkeeping that quietly lets a stranger add up your whole financial life.
Read the full story → Getting StartedNew Accounts
It spins up a plain single-key wallet — one key, nothing fancy, yours alone — the right tool for everyday, smaller amounts before you ever need a vault. No cosigners, no recovery committee, no ceremony: just a clean wallet you control end to end. When the balance grows past what one key should reasonably guard by itself, that is the moment to talk about a vault. Until then, simple is the correct answer, not a compromise.
Read the full story → Who's WhoThe Registry
It keeps a local record of who is in your vault and what role each person plays — the daily signers, the trustee, the recovery contact — so the vault and the people around it always describe the same arrangement. It stores the roles and the names, never the keys themselves. When you cannot remember whether it was Steve or Dave on the recovery path, the registry can, and it lives on your own machine, not a company's database.
Read the full story → Plain EnglishExplainers
It explains your vault in plain English, without a cryptography lecture. Day to day, the family spends together; if you are gone, the heir can reach it on their own after the waiting period; a lost device is covered by the recovery path. It walks through who can spend, what happens next, and when each path unlocks. Want the exact descriptor for your own records? It prints that too, alongside the plain-language version.
Read the full story → Inactivity TimerThe Health Desk
An inheritance vault can carry an inactivity timer: if the owner goes quiet too long, the recovery path opens so the family is never locked out. This runs a check on the vault and shows you, well ahead of time, whether a simple check-in is due — so a safeguard meant to protect your family never catches you by surprise. It only nudges you here, on your own machine; it cannot and will not message anyone on your behalf.
Read the full story → Life ChangesThe Annual
Life changes, and the vault should keep up. A periodic check-in walks through what is different since the plan was drawn — a new heir, a move, a changed relationship — and flags what the arrangement should rework and what to take to your attorney. It does not rewrite the legal documents and does not give legal advice; it makes sure the vault still matches the family you have now, not the one you had when you first set it up.
Read the full story → Testnet RehearsalDrills & Rehearsals
It stands up a practice run of the whole inheritance on testnet, with worthless coins, so the family can walk the steps long before they are ever real. The heir reaches the funds start to finish, as many times as they like, until the process is familiar. Your actual vault is never touched and never moves. When the day finally comes that it matters, nobody in the family is learning how it works for the first time.
Read the full story → Backup MapLost & Found
When a backup is split into shares and scattered for safety, the hard part is remembering where each piece went. It records where every share lives — the locations only, never the secret share itself — so a clever hiding place does not quietly become a permanent one. It never holds the shares and never reconstructs them; that happens off the machine, by you. It just makes sure "somewhere safe" is also somewhere you can find again.
Read the full story →
Built only on your own node — the agent signs nothing, and calls no one else's server. Some tools ship today; others are in active build.