Frequently Asked Questions

Everything you need to know about SosVault — your emergency digital safety net.

What is SosVault?

SosVault is an emergency digital safety net. It keeps your most critical information — passports, crypto keys, medical records, legal documents, and more — encrypted and accessible only to you. In an emergency, whether you are stranded without your phone, locked out of your accounts, or need to prove your identity, SosVault gives you a secure channel to communicate with trusted contacts and unlock your vital data.

Who is SosVault for?

Anyone who wants peace of mind that their critical information is safe, accessible, and sharable in an emergency. Travelers, digital nomads, crypto holders, journalists, human rights workers, or anyone who has ever thought “what if I lose access to everything?”

Is SosVault free?

SosVault is currently offered as a free service. We may introduce premium tiers with additional storage and features in the future, but core emergency access and encryption will always remain free.

How is my data secured?

We use client-side AES-GCM encryption. Your files are encrypted on your device before they are ever transmitted to our servers. Your master encryption key is derived from personal memories and secrets that only you know. This means we cannot read your data even if we wanted to — this is known as zero-knowledge encryption. We never store your passwords or encryption keys in plaintext. We never have access to your unencrypted files.

What is zero-knowledge encryption?

Zero-knowledge means the service provider — SosVault — has zero knowledge of your data. Encryption and decryption happen exclusively on your device using keys that never leave your control. Even if our servers were compromised, your data would remain unreadable without your personal encryption key.

Where is my data stored?

Encrypted vault files, encrypted chat messages, and account metadata are stored on our secure servers. All file contents and chat messages are encrypted at rest. We do not store raw passwords, encryption keys, or unencrypted file contents at any point.

What are Secure Vaults?

Vaults are zero-knowledge encrypted storage containers. Each vault is locked with a multi-part unlock phrase derived from personal memories you provide during setup. You can upload any type of file — documents, images, videos, text notes, crypto wallet backups — and they are encrypted client-side before upload. When you need them, you unlock the vault with your personal phrase and download your files. No one else, including SosVault, can access them.

How do I set up a vault?

After signing in, navigate to the Secure Vaults section from the dashboard. Our AI assistant (powered by DeepSeek) will guide you through an interactive conversation to recall three or more personal memories. These memories are used to derive your vault encryption key. The process is designed to be natural and conversational — no complex key management required.

What types of files can I store in a vault?

You can store any file type: documents (PDF, DOCX, TXT), images (JPG, PNG, WEBP), videos (MP4, MOV), spreadsheets, crypto wallet backups, text notes, or anything else. Files are encrypted as binary blobs, so the file type does not matter. Maximum file size depends on your account tier.

What happens if I forget my vault unlock phrase?

Because we use zero-knowledge encryption, we cannot recover your vault unlock phrase. The memories you choose during setup are the only way to derive your encryption key. We strongly recommend writing down your unlock phrase hints and storing them in a safe physical location separate from your digital devices.

What happens when I trigger an SOS?

When you trigger an SOS from the dashboard, your pre-designated trusted contacts immediately receive an SMS alert with a unique, secure link. They are directed to a dedicated emergency chat room where they can communicate with you in real time. The chat is end-to-end encrypted, and contacts are guided through identity verification steps to confirm it is really you before sharing any sensitive information.

How do trusted contacts work?

Trusted contacts are people you designate in advance as your emergency lifeline. You provide their names and phone numbers. When you trigger an SOS, they receive an SMS with a secure link to the emergency chat. They do not need to create a SosVault account — they access the chat through a one-time token. You can add, remove, or update your trusted contacts at any time from the dashboard.

What is the emergency group chat?

The emergency group chat is a real-time, end-to-end encrypted messaging channel that connects you with all your trusted contacts simultaneously when an SOS is active. You can share text messages, images, videos, and location information. Contacts can also request proof of life verification through the chat interface. The chat is temporary and tied to your active SOS event.

What is Proof of Life verification?

Proof of Life is a real-time video verification feature. Any trusted contact in the emergency chat can request verification. SosVault generates a unique, random phrase that you must record yourself speaking on video. The contact can then view the recording to confirm it is really you, in real time, and that you are safe. This prevents impersonation and gives your contacts confidence that you are the one communicating.

Can I upload media in the emergency chat?

Yes. You can share images, videos, and text messages in the emergency chat. This can be useful for sharing your location, documents, photos of your surroundings, or any other information your contacts need to help you.

What AI features does SosVault use?

SosVault uses DeepSeek AI in two key areas: Security Question Onboarding and Vault Key Setup. During onboarding, our AI assistant has a natural conversation with you to elicit personal anecdotes and memories. These become your security questions — answers that only you would know. For vaults, the AI guides you through recalling personal memories that are used to derive your encryption key. Neither your memories nor your answers are stored in plaintext or shared with DeepSeek beyond the immediate session.

How does DeepSeek AI onboarding work?

After signing up, you are guided through an interactive chat with our AI assistant powered by DeepSeek. The AI asks conversational questions to help you recall specific, personal memories — such as the name of your childhood pet, a memorable trip, or a significant life event. These memories form the basis of your security questions that you will answer during emergency access. The questions are unique to you and impossible for anyone else to guess.

Is my data shared with DeepSeek?

The information you share during the AI onboarding conversation is sent to DeepSeek's API for processing. However, we minimize data exposure: only the conversational prompts necessary to generate your questions are transmitted. Your final security questions and answers are stored encrypted on our servers. We do not store your raw conversation transcripts with DeepSeek long-term. See our Terms & Conditions and Privacy Policy for full details.

What is the fraud and scam detection feature?

Emergencies attract predators. Our built-in scam detection monitors the emergency chat for suspicious financial requests (e.g., “send money to this account,” cryptocurrency payment demands, or unusual payment links). When suspicious activity is detected, all contacts in the chat are warned with a clear alert, helping prevent financial exploitation during an already stressful situation.

How do I sign in normally?

For everyday access, SosVault supports three authentication methods: WebAuthn passkeys (biometric or device-based, the most secure option), Google OAuth (sign in with your Google account), and magic link email (a one-time login link sent to your email). We recommend setting up a passkey for the best security.

What is two-factor authentication (2FA)?

SosVault supports two-factor authentication via TOTP (Time-based One-Time Password) using authenticator apps like Google Authenticator, Authy, or 1Password, and SMS-based one-time codes. We strongly recommend enabling 2FA on your account for an additional layer of security.

What is Emergency Access (Panic Login)?

Emergency Access is designed for when you have lost your phone, cannot access your passkey, or are otherwise locked out of your normal login methods. You can initiate emergency access by providing your email address, phone number, and date of birth. You will then be asked to answer your personal AI-generated security questions. If you answer correctly, you gain access to your account. This pathway is designed to be secure enough to prevent unauthorized access while still being accessible when you have nothing but your memory.

How many security questions do I need to answer for emergency access?

During onboarding, you set up three personal security questions with our AI assistant. To gain emergency access, you must answer all of them correctly. The questions are based on personal memories that only you would know, making them extremely difficult for anyone else to guess or research.

Can I update my security questions?

Yes. From the Settings page, you can re-secure your account by going through the security question onboarding flow again. Our AI assistant will have a fresh conversation with you to establish new personal questions. Your old questions are replaced with the new ones.

Can I recover my account if I forget my password?

SosVault does not use traditional passwords for everyday login (we use passkeys, OAuth, and magic links). If you lose access to all of these, you can use Emergency Access by answering your personal security questions. Because we use zero-knowledge encryption, we cannot recover your vault encryption keys or unlock your vaults for you. Your security questions grant access to your account, but your vault data requires the unlock phrase you set up.

What happens if I lose access to my email or phone number?

The Emergency Access flow requires your email, phone number, and date of birth for initial identity verification, followed by your three security questions. If you have lost access to both your email and phone, you will need to contact our support team with proof of identity. We recommend keeping your contact information up to date and designating multiple trusted contacts who can vouch for your identity.

What data does SosVault collect about me?

We collect the minimum data necessary to provide the service: your email address, phone number, date of birth (for emergency identity verification), security question answers (encrypted), encrypted vault files, encrypted chat messages, and account metadata. We do not sell your data. We do not track your browsing activity. We do not profile you for advertising. Your encrypted data is yours alone.

Can SosVault read my chat messages?

No. Emergency chat messages are end-to-end encrypted. Only the participants in the chat can read the messages. SosVault servers only store encrypted message blobs and relay them between participants. We cannot decrypt or read your conversations.

Do you comply with data protection regulations?

We design our systems with privacy by default. Our zero-knowledge architecture means we hold minimal personal data and zero access to your encrypted content. We comply with applicable data protection laws. For specific regulatory questions, please contact us directly.

What browsers and devices are supported?

SosVault works on any modern browser (Chrome, Firefox, Safari, Edge) on desktop, tablet, and mobile. WebAuthn passkeys require a compatible device and browser. The emergency SOS chat works on any browser, so your trusted contacts do not need any special software or hardware.

Does SosVault work offline?

SosVault requires an internet connection to function, as it is a web-based service. The emergency SOS feature is designed to work from any browser on any connected device, so even if you lose your primary device, you can access it from a borrowed phone or a public computer.

How do I contact support?

For general inquiries, feature requests, or non-urgent issues, you can reach us through the contact information provided on the landing page. If you are in an active emergency, use the Emergency Access flow at the /panic_login page.