01
You add information
Add documents and other supported information to your Private vault.
Encryption & Storage
Your information. Protected by design.
Lyff encrypts your vault files on your device before upload. Your encrypted vault content is stored in Australia.
How your data is protected
Encrypted before it leaves your device.
Your files are encrypted in your browser before upload, whether you use a phone or computer.
02
Your device encrypts it
Your browser encrypts vault files using AES-256 before they are uploaded for storage.
03
Encrypted data is stored
Your encrypted Private vault content is stored on Australian-hosted infrastructure.
Understanding your access
Your password and vault passphrase do different jobs.
Your account password helps you sign in to Lyff. Your vault passphrase is used to unlock your encrypted Private vault.
You also receive a Recovery Key. Keep it somewhere safe and separate from your everyday login details.
Account password
Used to sign in to your Lyff account. It is not the key that decrypts your Private vault.
Vault passphrase
Used to unlock your encrypted Private vault information.
Recovery Key
A separate recovery credential used through Lyff's authenticated recovery process.
Important: Resetting your account password does not unlock or recover your encrypted Private vault.
Australian data hosting
Encrypted vault content, stored in Australia.
Lyff uses Australian-hosted storage for encrypted vault content.
Encryption protects the content of your vault. Hosting describes where the encrypted information is stored. Account details, billing status and security records are separate from your encrypted vault files. Supporting payment, email or identity services may process limited information through their own systems.
What this means for you
Private content is encrypted Your Private vault information is encrypted on your device.
Encrypted content is hosted locally Lyff stores encrypted vault content using Australian-hosted infrastructure.
Access is controlled separately Signing in, unlocking your Private vault and sharing selected items are distinct processes.
Vault recovery
Your Recovery Key matters.
If you forget your vault passphrase, Lyff provides a recovery process using your Recovery Key and account security checks.
01
Sign in securely
Access your authenticated Lyff account and complete the required MFA process.
02
Use your Recovery Key
Enter your Recovery Key through Lyff's vault recovery process.
03
Set a new passphrase
After successful recovery, create a new vault passphrase to unlock your original encrypted Private vault.
Keep your Recovery Key safe. A Recovery Key alone does not provide access through Lyff. Without your vault passphrase or a valid Recovery Key, Lyff support cannot decrypt your Private vault information for you.
Privacy and permissions
Encryption doesn't mean everyone gets access.
Private items are for you. Nominating a Guardian or Custodian does not automatically give them access to your entire vault.
Lyff uses separate permissions for selected items you choose to share. Requests relating to incapacity or passing are subject to a review process.
Three different access situations
- Private Items marked Private are for you only. They are excluded from Guardian and Custodian access and Release Later.
- Share Now Give an active Guardian or Custodian access to selected items. This does not give them access to your whole vault.
- Release Later Assign selected items and recipients for incapacity, passing or both. Release requires identity verification, accepted evidence, a seven-day waiting period and final human approval. Only items assigned to the approved event are released.
Frequently asked questions
Understanding your security.
Can Lyff staff read my Private vault documents?
Lyff staff cannot decrypt and read your private vault files. Operational account information is separate. Sharing an item gives access to your chosen recipient, not general access for Lyff staff.
Is my account password the same as my vault passphrase?
No. Your account password is used for signing in. Your vault passphrase is used to unlock your encrypted Private vault.
Can support reset my vault passphrase?
Support cannot simply reset a vault passphrase and decrypt your Private content. Vault recovery requires the appropriate authenticated process and a valid Recovery Key.
Does MFA replace my Recovery Key?
No. MFA helps protect account access. It does not replace your Recovery Key or decrypt your Private vault.
Does Australian hosting mean my data can never be compromised?
No online service can promise absolute security. Australian hosting describes where Lyff stores encrypted vault content. Encryption and access controls provide additional protections.
Is the Care Card Emergency Profile protected in the same way?
No. Your Emergency Profile is separate from your private vault. It is encrypted at rest, but is not zero-knowledge encrypted. Anyone with your Care Card QR code or profile link can view the fields you choose to publish without signing in. It cannot open your vault or its documents.
Your life, your information
Your life, organised.
Your privacy, protected.
Keep important documents, dates and wishes together. Choose Complete, Complete Duo or Complete Circle to add trusted roles, share selected items and prepare Future Messages. Each adult keeps their own private vault.