A password manager's job is simple: it stores strings of characters, produces them when asked, and keeps the wrong people from seeing them.
For a long time, that was all we thought SecureKeep needed to do.
Then we started listening to the stories. Some came from users who'd set up SecureKeep for an aging parent and suddenly felt the real weight of it: they were preparing for a day they wouldn't be there. Others came from readers who said things like "I put all my accounts in here. What I really wish I could put in is a message to my son for his 21st birthday, in case I'm not there."
The accounts are the logistics. The voice is the thing families actually need.
So we built video and audio messages into SecureKeep. They're encrypted and stored locally, like everything else in the app, but they're meant for a different audience than passwords and for a different moment in a family's life.
What it actually is
Inside any SecureKeep vault, you can record a video or an audio message (up to a reasonable length), give it a label ("For Maya, on her 18th birthday" or "Financial instructions for Jane"), tag it with a category, specify a recipient name, and save it. The recording is encrypted immediately using the same AES-256-GCM protection that covers the rest of the vault. A thumbnail is generated for videos so you can see at a glance which message is which.
You can record:
- Video messages: shot on your phone's front or rear camera, with full audio, shown with an auto-generated thumbnail.
- Audio messages: voice only, with the duration shown in the list.
Each message gets its own metadata: label, recipient, category (Family, Personal, Financial, Legal, Medical, Other), optional encrypted notes.
You can play them back in the app whenever you want. The file itself lives encrypted on your device, never on our servers or in a cloud we can see into. That's the point.
Why we built it
Two categories of message kept showing up when we asked users what they wished they could store.
The practical one. Instructions. The kind of thing that's hard to write down and easy to say. "When you open this, the first thing to do is email CAMS from the address in my notes and request the CAS statement. Then pull it up; it'll show you every mutual fund folio I own. The passwords are all in this vault. The bank manager I've worked with for 20 years is Rajiv, and his number is in the credentials section." Five minutes of recorded voice, delivered at the moment the person actually needs it, beats fifteen pages of written instructions they have to parse under stress.
The personal one. This is the category we underestimated. A father records a message for his daughter to watch on her wedding day. A mother leaves an audio note for the birthday she knows she'll miss. One grandparent recorded short messages for each grandchild, to be played when the child graduates, marries, or has a first kid. A husband puts a "here's what I want you to know" message in his wife's vault, never meant to be watched unless the moment comes.
These have nothing to do with passwords or estate logistics. They're the part of a digital legacy that is actually about legacy: what one person hands to another, with money nowhere in it.
The technical infrastructure we'd already built (encrypted storage, multi-vault structure, trusted-person access chains) turned out to be exactly what people needed to record and leave these messages.
Why not a cloud service?
There are specialized services that do this: "record a message, we'll send it to your loved ones on X date." Some are good. Most run into the same problem.
The first issue is the most basic: these services depend on the company still being around. A service that needs an active, subscription-paid, cloud relationship to exist when you die is a service that may not exist at all by then. Companies get acquired, shut down, pivot, or quietly change their terms. A video meant for your daughter's 30th birthday, sitting on a SaaS that folded in year eight, is simply gone.
There's also the delivery mechanism. Many of these services email a link to the recipient on the trigger date. If that email address has changed over the intervening decade, and plenty will have, the link goes nowhere.
And you're trusting a third party with something intimate. Your video sits on their server, and you're relying on that company to encrypt it, never watch it, never get breached, and never get compelled by a subpoena to hand it over.
The alternative is to keep these messages under the same assumptions as the rest of your vault. They stay encrypted, local, and portable, and a trusted person carries them forward. Nothing depends on a scheduled email going out on the right date.
A video message in your spouse's vault is theirs, permanently. They control when and whether it plays. There's nothing we can do to revoke it, change it, or lose it. The recipient holds the actual artifact and doesn't depend on us to deliver it, and that's what keeps the feature dependable across the decades it may need to last.
How the encryption works for media
The design for messages is worth explaining briefly, because it's the area where "but video files are big" intuitions usually kick in.
Every video or audio message in SecureKeep is stored as an encrypted file on the device, in a dedicated vault-files directory. The file path itself is stored in the database; the media file on disk is the encrypted blob. When you open a message for playback, SecureKeep decrypts just that one file, not the entire vault, into a temporary cache that is cleared the moment you navigate away.
The thumbnail for a video is similarly encrypted, generated at record time so the list screen can display previews without decrypting the full video.
If you back your vault up to an external file (SecureKeep supports encrypted backups with a separate passphrase), the media files come with it, still encrypted, and are restored into the same state on any device that receives the backup.
None of this involves a network call, a cloud sync, or a background upload.
The categories matter
When you record a message, you pick a category. Family covers the grandparent-to-grandchild, parent-to-child, and spouse-to-spouse messages. Personal is for notes to yourself or to a specific friend. Financial holds the "here's how to handle the money" instructions. Legal is for messages that add context to a will, never replacing one, but explaining the decisions behind it. Medical is for spoken care preferences and directives that sit alongside a written advance directive. Other catches whatever doesn't fit.
Categories do more than organize. They shape how families find messages in the moment they need them. A spouse opening a vault after a death tends to look first at Financial and Legal; a daughter might eventually look under Family. Categorizing a message doesn't hide it (everything still shows in the main list), but it helps the right person find the right thing before they know the full content of what was left.
How people are actually using it
A few patterns have emerged from early feedback:
- Milestone birthdays. By far the most common use. Messages addressed to "Maya on her 16th birthday," "Rahul on his 25th birthday." Recorded over years, saved up, stored against the possibility of absence.
- Practical "first 48 hours" instructions. A five-minute video walking a spouse through exactly what to do if something happens: which bank to call, where the will is, which advisor to phone first.
- Apology and clarification messages. Messages addressed to specific people about past disagreements the recorder wants to leave resolved. These are private in a way written notes rarely achieve.
- Medical directives in voice. Hospice-context users recording spoken versions of their medical preferences alongside the written advance directive, because being able to hear the patient's voice consenting to specific care decisions carries real weight with families and clinicians.
- "Just so you know I'm proud of you." Short, repeated, recorded to multiple recipients. These are the messages users tell us they're most glad they took the time to make.
Recording ideas when you're not sure where to start
You don't need a script, good lighting, or anything eloquent to say. Nobody who hears one of these messages is rating your production values. They're hearing your voice.
If you're stuck, a few prompts tend to work. One is the practical opener: "If you're watching this, here's what I need you to know first," followed by your ten most important sentences about money and logistics. Another is a single memory told in your own voice, the kind of detail a family member may not have realized you'd noticed. A third looks ahead to a specific moment you might miss, something like "here's what I hope for you," aimed at their wedding, their fortieth, a first child, a graduation. And there's the message that almost never gets written down: whatever it is you should have said more often. None of these takes long. Half an hour on a quiet afternoon is enough to record several.
The feature that changed how we think about the app
We originally framed SecureKeep as "a vault for the important information your family will need." That is still accurate. It is also too small.
After adding messages, the fuller description is: a vault for the information your family will need, and the things you wish you could say when you can't.
Both matter. The accounts, the folio numbers, and the insurance policies will get found eventually. The voice won't, not unless someone deliberately records it. A vault that makes the practical easy but ignores the personal is missing half of what people come to it for.
If nothing else, it's worth recording one message sometime soon, for anyone who matters to you. Most people who do tell us afterward that they're glad they did.
Related reading: