What Is a Dead Man's Switch, and When Should You Turn It On?

Most people set up a private vault to keep others out. That is exactly what you want, right up until the day your family needs in and you cannot help them. An illness, an accident, or simply the end of a long life can leave the people you love standing outside a locked door with no key.

A dead man's switch closes that gap without ever weakening the lock while you are here. The term sounds grim, but the idea is gentle: it is a safeguard that acts only when you stop acting. This is how it works, and how to decide whether to turn it on.

What a dead man's switch actually is

A dead man's switch is a mechanism that triggers when a person becomes unable to keep it from triggering. The classic example is a train brake that engages if the driver lets go. Applied to a digital vault, the logic flips to the timescale of a life: instead of a moment, it watches over months.

The switch is watching for one thing, your continued presence. As long as you keep opening and using the vault, it sits silent. It is not a share, not a copy, and not a backdoor. Nobody has access to anything while you are active.

How it works in Kinship Vault

Turning it on takes three decisions, and the app walks you through them in order.

First, what to hand over. You build a Recovery Vault: a separate, separately encrypted vault holding only the kinds of records you tick. Documents, photos, passwords, passkeys, identity records, your own record types. Everything you leave unticked stays in your Primary vault and is never copied. From then on the app keeps that Recovery Vault quietly up to date in the background, so what your family would receive is current rather than a snapshot from setup day.

Second, who receives it. One trustee, invited by their Apple Account, confirmed with Face ID. Their device generates its own key pair and keeps the private half; your app wraps the Recovery Vault's key to their public key. That wrap is the only copy they will ever get, and it is useless to them until the policy says otherwise.

Third, how long your silence has to last. Pick a check-in window of 30, 60 or 90 days, then a grace period of 7, 14 or 30 days on top. In automatic mode, simply unlocking a vault on your iPhone counts as checking in, so an ordinary week of using the app keeps the clock at full. If you would rather be deliberate about it, manual mode asks you to tap a button instead.

The switch never makes your vault less private today. It only answers the question of what happens if you can no longer answer it yourself.

A dead man's switch with no server in the middle

Most services that promise this run a timer on their own machines. Something on their side counts the days, decides you are gone, and mails out your credentials. That design asks you to trust a company to hold the keys, stay in business, and get the decision right.

Kinship Vault does none of that, because there is nothing of ours in the path. Your iCloud account carries the encrypted Recovery Vault and a signed note each time you check in. That is storage and delivery, nothing more. It runs no timer, makes no decision, and cannot read anything it carries.

The evaluation happens on your trustee's phone. Their app reads your policy and your latest check-in, compares them against time it takes from iCloud rather than the device clock, and works out whether the window has passed. Everything you signed is verified against the key their app pinned when they accepted, so a trustee cannot forge a check-in, move your deadline, or bring the date forward. When the moment finally comes, the decryption happens on their device too.

Watch the whole handoff

A minute of real screens, both sides. Arming the switch and choosing what the Recovery Vault holds, inviting the trustee, the status screen counting down, then the trustee's phone noticing the deadline has passed and releasing the vault as a separate read-only copy.

What your trustee can and cannot do

Before the deadline passes, being a trustee is close to doing nothing at all. Their app shows that they hold a sealed copy and that they have no access to it. They cannot read a record, see a filename, shorten your deadline, or trigger anything early.

After the window and the grace period both pass, their app tells them so, and releasing is still a deliberate act they have to take, confirmed with Face ID. What lands is a separate, read-only vault sitting beside their own. They can read it and copy out what they need. They cannot edit it, and their own vault is never touched by any of it.

You keep the last word throughout. Checking in at any point resets everything, and turning the switch off deletes the shared zone, so the copy on their phone is removed the next time it connects. If you change your mind about who holds it, changing the trustee re-keys the Recovery Vault, and the outgoing person's copy stops updating.

Why the owner side is iPhone and iPad only

A dead man's switch is only as good as its ability to notice inactivity and remind you before it fires. That depends on reliable, long-lived background reminders, which a desktop app that may sit closed for weeks cannot promise. So arming the switch, setting your policy and naming a trustee all happen on iPhone or iPad. A trustee using a Mac does see their status there, including when a release becomes available, but the release itself is done on their iPhone.

Who should turn it on

The dead man's switch is optional and off until you choose it, and enabling it is part of a paid plan. It earns its place when your vault holds things your family would genuinely need and could not otherwise reach: estate documents, insurance policies, account information, the paperwork that keeps a household running. If you are the person others rely on to know where everything is, this is for you.

• Turn it on if your vault is the single place your family would look after you, and there is one person you would trust to hold a sealed copy.
• Wait if you have not had the conversation yet. Choose the person first, tell them, then arm it.
• Pair it with a written 24-word passphrase stored offline and the Recovery Network, so your family's way in never rests on the switch alone.

Staying in control

Nothing about the switch takes power away from you while you are here. Every time you open and use the vault, the clock resets to full. You can change the window, change your trustee, change what the Recovery Vault holds, or turn the whole thing off, at any moment and without asking anyone. It is a promise to your family that only comes due if you are no longer able to keep it yourself. The full behavior, including the one honest limit, is in the Dead Man's Switch documentation.