Everything people ask before they trust Harbor with it.

Harbor is a household continuity layer: an encrypted vault for the accounts, property, documents, and people your household relies on — organized so that if you can't act, the person you name can. It's the plan for the day someone else has to step in.

A password manager gives someone access. It does not tell them what exists, who owns it, or what to do first. Harbor organizes every account, property, and document by the person or legal entity that owns it, and produces an ordered emergency walkthrough — the letter first, then who to call, then the accounts.

No. Harbor is not a law firm and doesn't give legal advice. A will and a trust decide who gets what. Harbor makes sure the person acting can find the will, the trust, the insurer, and the accounts in the first place — and can act during incapacity, which estate paperwork rarely covers.

A household is one home's worth of accounts, documents, family members, contacts, and successors — kept fully separate from your other households. Most people use one per residence: their own, their parents', an in-law's.

Yes, up to three. Each one is completely isolated at the database layer — the only thing connecting them is your login. Nothing bleeds between them.

A person you name who can request access to your vault when you can't act — from incapacity or death. Access opens on a waiting period you set, and you can cancel with one tap any time before the timer runs out. Successors are always unlimited and free, on every plan, including Free.

Nobody. You already decided. Access opens on the waiting period you set, with no company approving it and no death certificate required. Harbor does not sit in the middle of the moment it was built for.

No. Access works whether you have died or simply can't act. Incapacity is the case a death certificate never covers, and it's the case Harbor is designed around. When a named successor requests access, you're emailed immediately and can cancel with one tap. If you never respond, access opens automatically — silence is the safety net.

A guided, read-only walkthrough called the Lighthouse: your letter first, then the people to call, then the accounts and documents — organized by time horizon, from the first 48 hours to the things that can wait. Every view is logged.

No. Successor access is read-only and scoped to the single household on their link. They can never reach another household of yours.

Yes. Successors enroll in two-factor and download recovery codes when they accept the invitation — so the emergency isn't the first time they try to log in.

A free, day-to-day collaborator on one household — a spouse or adult child who helps keep the vault current. They have full read and write access except billing and household deletion. One per household.

Yes. Sensitive fields — passwords, account numbers, seed phrases, PINs, personal identifiers — are encrypted with AES-256-GCM before they're stored, and stay masked in the UI, revealed on click and auto-hidden after 30 seconds.

Yes, on every plan, for owners and successors alike. There is no version of Harbor without it.

Sensitive fields are encrypted with a key held outside the database, and access is restricted to the systems that need it. We never sell data, and we don't use your vault contents for advertising.

Any day you like. One-click export of every account, document, and contact, in the clear, ready to hand off. No lock-in, ever.

The security overview covers encryption, authentication, household isolation, and successor access controls in full.

Nothing disappears. You keep full read access to everything already in your vault and can still export it — you'll just be asked to upgrade before adding more accounts, documents, contacts, or family members. Emergency successors stay unlimited and free.

Yes. Add a second or third household the day you need it — pricing is prorated for the current billing cycle. Remove them the same way.

Your households freeze but stay fully readable — you and your successors can still open them. Your data is never deleted. Reactivate anytime and everything picks up right where you left off.

Yes. Drop a household or move back to Free whenever you like. Billing is prorated, and your data is never deleted — extra households simply become read-only.

The founding rate is half off for two full years from the day you join — on your base household and any additional households. We'll tell you well before it changes, and you can cancel or export at any time.

Thirty-day money-back guarantee on paid plans. No forms, no friction.

Stripe, entirely. Harbor never sees or stores your card number.