Offline encrypted vault · for macOS

Your secrets,
indistinguishable from noise.

An offline vault for Apple Silicon Mac. Locked, it's indistinguishable from random data — no servers, no backdoor, no recovery. 256-bit authenticated encryption, with a post-quantum integrity stamp.

Get Farewell — €49 How it works

One-time payment · one Mac · notarized by Apple · no subscription

sources.vault Unlocked

interview-transcript.md

Markdown · edited 2h ago

14 KB

legal-notes.pdf

Document · 12 pages

2.1 MB

site-photo.png

Image · 4032×3024

3.8 MB

call-recording.wav

Audio · 7:21

38 MB

4 items · auto-locks in 5 min Encrypted locally

ML-DSA

FIPS 204 integrity

No servers

100% on your Mac

Why Farewell

When a file can cost a life,
“good enough” isn’t an option.

Journalists, sources, lawyers, activists. For the people Farewell is built for, a leaked document or a seized laptop isn’t an inconvenience — it’s a catastrophe.

Long-term protection

Built for secrets that may need to stay secret.

Farewell protects content with 256-bit authenticated encryption. A post-quantum ML-DSA signature adds an integrity stamp, while Argon2id makes offline passphrase guessing expensive.

256-bit AEAD protects the contents of the vault and remains far beyond foreseeable quantum attacks.
ML-DSA (FIPS 204) provides a post-quantum integrity stamp for each vault.
Argon2id key hardening (1 GiB) makes guessing your passphrase deliberately costly.

Read the full technical details

ML-DSA signature

Post-quantum integrity · FIPS 204

AES-256-GCM-SIV

Authenticated encryption

Argon2id · 1 GiB

Memory-hard key derivation

Nothing-to-identify vaults

Looks like nothing.
Reveals nothing.

A locked Farewell vault gives away as little as possible: apart from a random salt, the file is designed to look like random data without the passphrase. No readable header, no file names, no plain metadata.

No readable signature, magic bytes, or structure that identifies it as a Farewell vault.
The chosen vault size does not reveal how much — or how little — is inside.
Your identity stays out of the vault by default.

Hardware keys

Add a YubiKey.
Plus a backup key. Or two.

Bind a vault to a FIDO2 hardware key, so the passphrase alone is not enough. Enroll a backup key and keep it somewhere safe — either one opens the vault, so losing one is survivable.

Works with FIDO2 hardware keys — YubiKey and compatible devices.
Named backup keys with their own PINs — add or remove them anytime.
With hardware-key protection enabled, a passphrase alone cannot open the vault.

Everything inside

Strict by design.

Security choices you can understand, with limits stated plainly.

Nothing leaves your Mac

No accounts, no cloud, no telemetry. The app makes no network connection and works fully offline.

No recovery. No backdoor.

Your passphrase is the only way in unless you add hardware keys. Farewell cannot reset a forgotten vault.

Built-in viewer

Read documents, view images, play audio, and edit notes inside the vault — without creating a normal decrypted file on disk.

Shred originals on import

After import, Farewell can overwrite and remove the original file you dragged in, so the encrypted vault becomes the copy that remains.

Auto-lock

Step away and the vault locks itself. In-memory keys are wiped when it locks, within the limits of a modern operating system.

Native & multilingual

A native Apple silicon macOS app — fast, signed, notarized, and available in 8 languages.

How it works

Three steps. Then it’s sealed.

No account, no cloud, no learning curve.

Create a vault

Choose a strong passphrase. Farewell guides you toward one that is harder to guess. Optionally bind a hardware key.

Add your files

Drag in documents, photos, recordings — anything. They are encrypted locally, and the originals can be shredded.

Lock it

Close the vault and it becomes random-looking bytes. Only the correct passphrase — and your key, when enabled — can open it again.

Pricing

Pay once. Yours forever.

No subscriptions. No accounts. Pick how many Macs you need.

Single

€49one-time

For 1 Mac · free updates throughout v1

Activates on 1 Mac
Offline encrypted vaults
Nothing-to-identify vault files
YubiKey & backup-key support
100% offline · 8 languages

Buy Single — €49

Secure checkout · macOS 15 or later

The honest answers.

What does “post-quantum” actually mean here?

Farewell does not claim that quantum computers can never improve. The content is protected with a 256-bit symmetric key, which remains far beyond the reach of foreseeable quantum attacks. ML-DSA (FIPS 204) is used for a post-quantum integrity stamp. In short: encryption protects confidentiality; ML-DSA helps detect tampering.

What does “nothing-to-identify” mean here?

A locked Farewell vault is designed to look like random data. Apart from a random salt, there is no readable header, no file names, no plain metadata, and no visible structure that identifies it as a Farewell vault. This is not a hidden-volume system: if someone sees you unlock it, or finds the app next to an obvious file name, context can still give it away. The promise is narrower and clearer: the vault file gives away as little as possible on its own.

What if I forget my passphrase?

Then the vault is gone — and that is the design, not a flaw. Farewell has no recovery, no master key, and no backdoor, because any of those would be a way in for an adversary too. We tell you this clearly when you create a vault. Choose a passphrase you’ll remember, and consider enrolling a backup hardware key.

Does Farewell ever connect to the internet?

No. The app makes no network connections at all — no accounts, no sync, no telemetry, no “phone home.” Your files and your passphrase never leave your Mac. You can verify this by running it fully offline.

Is it really just a one-time payment?

Yes. €49 covers 1 Mac, €69 covers 2, and €129 covers 5 — each a single payment, with free updates throughout version 1. No subscription, no accounts, no upsells. If you’re a journalist or human-rights defender who can’t afford it, reach out about a free license.

Which Macs are supported?

Farewell is a native Apple silicon app — it runs on any Mac with an M1 chip or later, on macOS 15 or later. It is signed with a Developer ID and notarized by Apple, so it installs cleanly with no security warnings.

Can I trust the cryptography?

Farewell is built on standard, well-studied primitives — Argon2id, AES-256-GCM-SIV, BLAKE3, and ML-DSA (FIPS 204) — not home-grown crypto. We welcome scrutiny; security researchers can reach us at security@farewell.pro.
Read the full technical details

How do I know there’s no hidden backdoor?

You don’t have to take our word for it. Farewell is fully open source (GPL-3.0), and its core engine is built reproducibly: anyone can recompile it from the public source and confirm, byte-for-byte, that the engine matches the published code — a hidden change wouldn’t survive that check. Most encryption tools just ask you to trust them; Farewell is built to be verified instead. (The signed app adds Apple’s notarization on top; the verifiable part is the open engine and its reproducible build.)

Your secrets,indistinguishable from noise.

When a file can cost a life,“good enough” isn’t an option.