Your letter is encrypted using AES-256-GCM encryption — the same standard used by governments and financial institutions worldwide. The encryption happens entirely in your browser using the Web Crypto API. Your password is never sent to any server. We use PBKDF2 key derivation with 100,000 iterations to strengthen your password against brute-force attacks. Only someone with the correct password can decrypt the letter. We cannot access your content, and no data is ever transmitted online.

Unfortunately, there is no way to recover your letter without the correct password. This is by design — true encryption means no backdoors. We recommend writing down your password and storing it somewhere safe, or using a password manager. You could also share the password with a trusted friend or family member as a backup. The strength of the encryption means that even we cannot help you recover a lost password.

When you export your letter, it's saved as an encrypted .enc file on your device. You control where it goes — your hard drive, cloud storage, USB drive, or email. If you choose "Save to My Letters," the encrypted data is stored in your browser's localStorage. Note that clearing your browser data will remove saved letters, so we recommend always exporting a backup file. No data is ever uploaded to any server.

The unlock date is stored in plain text alongside the encrypted content. The tool checks this date before allowing decryption. If the date hasn't arrived yet, you'll see a countdown timer. While the encryption itself doesn't enforce the date restriction (the date check happens in the UI), we encourage you to respect the time lock you set for yourself. After all, the magic of a letter to your future self lies in waiting until the right moment.

We recommend setting a calendar reminder on your phone or computer for the unlock date. You can also download a calendar event file (.ics) when you create your letter and import it into Google Calendar, Apple Calendar, or Outlook. Additionally, you can save the .enc file in a folder named with the unlock date, or email it to yourself with a scheduled send feature (available in Gmail and other email clients).

Exporting creates a downloadable .enc file that you can store anywhere — this is your permanent backup. Saving to My Letters stores the encrypted data in your browser's localStorage for quick access and countdown tracking. It's convenient but browser-dependent. We recommend doing both: save locally for convenience and export a file as a backup. If you switch browsers or clear your cache, you'll need the exported file.

Absolutely! You can write as many letters as you like, each with its own subject, message, unlock date, and password. Use the "My Letters" tab to manage all your saved letters. You might write one letter to yourself in 6 months, another for 5 years from now, and yet another for a milestone birthday. Each letter is independently encrypted and tracked.

Yes, this tool is completely free with no registration required. There are no limits on the number of letters, message length, or unlock dates. Everything runs in your browser — no ads, no tracking, no data collection. It's a privacy-first tool designed to give you a meaningful way to connect with your future self without compromising your personal data.

Here are some ideas: Your current goals and dreams — are you on track? Things you're grateful for right now. Challenges you're facing and how you plan to overcome them. Predictions about your life, the world, or technology. Advice to your older self. Memories you want to preserve. Questions for your future self to reflect on. The most powerful letters often capture who you are in this moment — your hopes, fears, and the small details of daily life that you might otherwise forget.

Unlike services like FutureMe.org that store your letter on their servers (often unencrypted or with server-side encryption where they hold the keys), this tool uses client-side encryption. Your letter is encrypted before it ever leaves your browser, and the encrypted file stays with you. There's no account to create, no email required, and no third party that can read your content. It's truly private. The trade-off is that you're responsible for keeping your encrypted file and password safe — but that's what true privacy looks like.