AmberKeyDocumentation
Guides
Grouped by what you're trying to do. New here? Start at the top of "Set it up now".
Set it up now
Do these in order and your plan is real in about half an hour.
Getting started: the 30-minute setup
Cover your password manager, Google, Apple, and your phone: the four accounts that unlock nearly everything else.
Setting up your recovery circle
Choosing the people, picking a template, and avoiding the correlated-death trap.
Printing and distributing your kit
The print-at-home kit: what's on each card, how to print it safely, and how to hand it out.
Running a fire drill
An annual guided test that proves your recovery actually works, using throwaway secrets, never your real ones.
Locking an export your family can still open
Services like ChatGPT and Claude have no legacy tool, so the answer is to download your data and lock the file yourself. How to do it, including for exports over a gigabyte, and how your family opens it later.
If you lose your sign-in devices
Passkeys have no password reset by design. Here's how to make sure a lost or broken device never locks you out of your AmberKey account, and what your family can still do if it does.
Recovery codes & authenticator apps
The second factor is what stops an executor who already has the password. Five minutes, and it unlocks everything else.
For your family, later
What the people you leave behind will actually see and do.
Working with an advisor
Optional. Let an estate planner see whether your plan is current, and nothing else.
Connecting your estate advisor
If you plan through an advisor, you can let their firm see whether your plan is current. They see status only, never your contents, and you can disconnect at any time.
For advisors: the Pro console
A read-only status dashboard for estate planners. What it shows, what it can never show, how seats work, and how to serve more than one firm.
Verify & understand
Check our work: the tool, the code, the security model.
Verifying the recovery tool
How to check that your copy of recover.html is genuine, using the hash and signature printed on every card.
Open source & specs
The repository, mirrors, licenses, and format specifications.
Security & threat model
The blind-server design and every honest residual risk.
Account playbooks
Per-service setup and survivor steps (see below).
Account playbooks
One per service: what the mechanism is, how to set it up now, and what your survivors do later. Frozen copies travel inside every family backup.Full index →