Your Account and Device
Passkey, FIDO2, and biometric authentication for vault owners and heirs.
Your Account and Device
Inheribase employs rigorous authentication to ensure only authorized individuals can access protected assets. Our verification methods differ for vault owners (everyday access) and heirs (inheritance access).
Vault Owner Authentication
Passkey Authentication
Inheribase's primary authentication uses passkeys — the most secure authentication standard available:
- Phishing-resistant: Passkeys are bound to specific domains.
- Hardware-backed: Stored securely in device security modules.
- Biometric-optional: Enable Face ID, Touch ID, or PIN.
- Cross-device: Sync across your authorized devices.
Hardware Security Keys
For users requiring additional security, Inheribase supports FIDO2/WebAuthn keys (YubiKey, Google Titan, etc.) with the option to register multiple keys.
Biometric Verification
Where available, enhance authentication with fingerprint recognition, facial recognition, or device-specific biometrics.
Heir Verification
When your configured release conditions are met, heirs are granted access automatically:
- Secure, one-time access links are sent to registered heir emails.
- M-of-N Guardians must cryptographically approve the release (if applicable).
- Heirs generate their own passkeys upon claiming the vault for secure ongoing access.
Account Recovery
When you create your account, you receive one-time recovery codes.
- Store these securely, separate from your vault (e.g., in a physical safe).
- Each code can be used once for emergency access.
Important: Due to our zero-knowledge architecture, we cannot reset your authentication or recover your account if you lose all access methods. Maintain your recovery codes securely.
Security Best Practices
- Register multiple passkeys across different devices.
- Store recovery codes securely.
- Ensure trustees know how to access recovery codes for Estate Planning.