How it works

Create the contract and approve assets without moving them. If the timer expires or enough trusted people act together, a waiting period can begin. Then assets can move into the contract and be claimed. Recovery can move them to a new address.

1. Setup

Create the contract, choose who can act, and approve assets.

2. Normal

Refresh the timer every six months. Assets stay in your wallet.

If access is lost

Recovery can move approved assets to a new address.

3. Trigger

Timer expires or enough trusted people act.

4. Challenge

A waiting period comes before this transfer.

5. Outcome

Approved assets can move into the contract and be claimed.

Recovery

If access is lost

Recovery can move approved assets to a new address.

Who can act, when, and how

The people you choose have separate roles, each with its own timing and actions.

Who can act

Recipients (beneficiaries)
Trusted people (guardians)
Recovery addresses

When they can act

After assets move in
Without waiting for the timer
At any time

What they can do

Claim assets
Start the transfer together
Move assets to a new address

Your keys are never shared. Guardians can start the transfer early only when enough act together. Beneficiaries can claim only their shares and only on schedule. Beneficiaries and guardians see asset details only after the waiting period.

Transfer

Transfer follows the same three steps whether it starts after the timer or through guardians. A waiting period always comes before assets move.

1. Start

The transfer can start

After the timer expires, a beneficiary can start it. Guardians can start it earlier when enough act together.

2. Challenge

A waiting period begins

Assets stay in your wallet, and you can still stop the transfer.

3. Claim

Assets can move into the contract, then beneficiaries claim

After the waiting period, a beneficiary or guardian can move approved assets into the contract. Beneficiaries then claim only their shares on schedule.

Boundary

The transfer follows your setup. Guardians can start it, but cannot change the approved assets, beneficiaries, shares, or schedules.

Recovery

Recovery is a separate path for lost access. You choose recovery addresses and how many must approve. They can move approved assets into the contract, then send remaining assets to a new address.

1. Setup

Choose recovery addresses and a threshold

You decide which addresses can act and how many must approve.

2. Start

Recovery can start at any time

It does not wait for the timer or challenge. Once enough addresses approve, approved assets can move into the contract.

3. Move

Send remaining assets to a new address

Recovery addresses can withdraw assets still held by the contract.

Boundary

Recovery follows its own threshold and cannot change or reverse completed beneficiary claims.

This is your contract. No one at CryptoLegacy can control it or move your assets. You never need to share your keys. Only people you choose can act. They can only do what you allowed in advance. Completed claims cannot be undone.

Ready to create your plan?

Set it up in the app, or review the details in Documentation.

No. Your assets stay in your wallet. You choose which assets and amounts the plan covers — for example, only an emergency fund. Approval does not move anything by itself; transfers can happen only under your rules.

Yes — during the waiting period. Once it ends, transfers can proceed only under the rules you set in advance.

They solve different parts of the problem. Multisig still needs enough signers to act, shared keys create custody and security risks, and legal documents cannot move crypto on-chain by themselves. CryptoLegacy adds a predefined transfer path without giving anyone your keys.