If you run a company alone, a lot of it lives in one head: the registrar login, the payment processor, the cloud account, the app store accounts. If something happens to you, nobody knows those exist, let alone how to get in. I built Heirloom: Founder Vault to deal with that, and this post covers the design choices.

What it does

You record the important accounts and assets, and name up to 5 beneficiaries who get read-only access only when you can't respond. That's the whole idea. It's closer to a binder for your successors than a password manager.

Stack

React Native with Expo (no native folders checked in), WatermelonDB for local storage, Expo SecureStore and local authentication for biometrics, Supabase on the backend, RevenueCat for purchases.

Encryption of exports

For encrypted exports I use AES-256-GCM, which is authenticated encryption, so tampering is detected rather than silently decrypting to garbage.…