Post-quantum encryption · for macOS

Your secrets,
sealed for the
quantum age.

Farewell is the most advanced encrypted vault for Mac. Post-quantum cryptography, plausible deniability, and zero servers — your most sensitive files never leave your hands.

Get Farewell — €49 How it works

One-time payment · one Mac · notarized by Apple · no subscription

sources.vault Unlocked

interview-transcript.md

Markdown · edited 2h ago

14 KB

leaked-report.pdf

Document · 12 pages

2.1 MB

site-photo.png

Image · 4032×3024

3.8 MB

call-recording.wav

Audio · 7:21

38 MB

4 items · auto-locks in 5 min Post-quantum sealed

ML-DSA

FIPS 204 signatures

No servers

100% on your Mac

Why Farewell

When a file can cost a life,
“good enough” isn’t.

Journalists, sources, lawyers, activists. For the people Farewell is built for, a leaked document, a seized laptop, or a single forced password isn’t an inconvenience — it’s a catastrophe. Farewell is designed for exactly that threat model.

Post-quantum cryptography

Encryption built to outlast quantum computers.

The files you protect today may need to stay secret for decades. Farewell pairs post-quantum digital signatures with encryption that quantum machines can’t shortcut — so “harvest now, decrypt later” attacks come up empty.

ML-DSA (FIPS 204) post-quantum signatures guarantee your vault hasn’t been forged or tampered with.
256-bit authenticated encryption — a key space no quantum computer can brute-force.
Argon2id key hardening (1 GiB) makes guessing your passphrase ruinously expensive.

ML-DSA signature

Post-quantum integrity · FIPS 204

256-bit AEAD

Authenticated encryption

Argon2id · 1 GiB

Memory-hard key derivation

Plausible deniability

Looks like nothing.
Proves nothing.

A Farewell vault is indistinguishable from random data. Fixed size, no readable header, no file names, no metadata leaking what’s inside — or that anything is inside at all. There is nothing to point to, and nothing to confess.

Encrypted content is uniform random bytes — no signature, no structure to detect.
The vault size never reveals how much — or how little — you’re keeping.
Your identity stays out of the vault by default.

Hardware keys

Add a YubiKey.
Plus a backup key. Or two.

Bind a vault to a physical security key, so it can’t be opened without the metal in your pocket. Enroll a backup key and keep it somewhere safe — either one opens the vault, so losing one is survivable, not fatal.

Works with FIDO2 hardware keys — YubiKey and compatible.
Named backup keys with their own PINs — add or remove them anytime.
A physical second factor: even a stolen or coerced passphrase can’t open the vault without your key.

Everything inside

Uncompromising by design.

Every detail is chosen to keep you safe — and to stay out of your way.

Nothing ever leaves your Mac

No accounts, no cloud, no telemetry. Farewell never makes a network connection. It works fully offline, on a plane, in a basement, anywhere.

No recovery. No backdoor.

Your passphrase is the only key. We can’t reset it, and neither can anyone who compels us. That’s the point — and we say it plainly up front.

Built-in viewer

Read documents, view images, play audio, and edit notes inside the vault — without ever writing a decrypted copy to disk.

Secure shred on import

Pull a file into your vault and the original can be securely removed — so the only copy that survives is the encrypted one.

Auto-lock

Step away and the vault seals itself. Keys are wiped from memory the moment it locks — nothing lingers for a cold-boot attack.

Native & in your language

A true macOS app — fast, signed, notarized. Available in 8 languages, including right-to-left, with the Mac polish you expect.

How it works

Three steps. Then it’s sealed.

No setup wizard, no account, no learning curve. Just protection.

Create a vault

Choose a strong passphrase — Farewell guides you to one that’s actually safe. Optionally bind a YubiKey.

Add your files

Drag in documents, photos, recordings — anything. They’re encrypted instantly, the originals can be shredded.

Lock it

Close the vault and it becomes random bytes. Only your passphrase — and your key — can ever open it again.

Pricing

Pay once. Yours forever.

No subscriptions. No accounts. Pick how many Macs you need.

Single

€49one-time

For 1 Mac · free updates throughout v1

Activates on 1 Mac
Post-quantum encrypted vaults
Plausible deniability built in
YubiKey & backup-key support
100% offline · 8 languages

Buy Single — €49

Secure checkout · macOS 15 or later

The honest answers.

What does “post-quantum” actually mean here?

Future quantum computers threaten today’s public-key cryptography. Farewell defends against that on two fronts: it signs every vault with ML-DSA (FIPS 204), a signature scheme designed to resist quantum attacks, and it encrypts your content with 256-bit symmetric cryptography, whose key space is far beyond the reach of any quantum machine. Together, that protects you from “harvest now, decrypt later” — where an adversary stores your encrypted files today, hoping to break them years from now.

What does “plausible deniability” mean here?

A Farewell vault is just a file of random-looking bytes. There’s no header, no signature, no file names, and a fixed size that reveals nothing about what’s inside. So the file itself doesn’t prove it’s an encrypted vault — let alone what, or whether, it contains anything. If you’re ever compelled to hand over or explain a device, there’s nothing in the file to point at and nothing to contradict what you say. It isn’t magic: if someone watches you unlock it, or finds Farewell installed next to an obviously named file, context can still give it away. Deniability is about the file giving nothing away on its own — which, in many situations, is exactly what keeps a source or a story safe.

What if I forget my passphrase?

Then the vault is gone — and that is the design, not a flaw. Farewell has no recovery, no master key, and no backdoor, because any of those would be a way in for an adversary too. We tell you this clearly when you create a vault. Choose a passphrase you’ll remember, and consider enrolling a backup hardware key.

Does Farewell ever connect to the internet?

No. Farewell makes no network connections at all — no accounts, no sync, no telemetry, no “phone home.” Your files and your passphrase never leave your Mac. You can verify this by running it fully offline.

Is it really just a one-time payment?

Yes. €49 covers 1 Mac, €69 covers 2, and €129 covers 5 — each a single payment, with free updates throughout version 1. No subscription, no accounts, no upsells. If you’re a journalist or human-rights defender who can’t afford it, reach out about a free license.

Which Macs are supported?

Farewell is a native Apple silicon app — it runs on any Mac with an M1 chip or later, on macOS 15 or later. It’s signed with a Developer ID and notarized by Apple, so it installs cleanly with no security warnings.

Can I trust the cryptography?

Farewell is built on standard, well-studied primitives — Argon2id, 256-bit authenticated encryption, and ML-DSA (FIPS 204) — not home-grown crypto. We welcome scrutiny; security researchers can reach us at security@farewell.pro.