Your data is encrypted and securely stored
The information you store in After Me is encrypted, and only you have the keys to decrypt it. After Me is designed to protect you from breaches and other threats, and we collaborate with other security professionals to ensure our code is robust. We cannot view, use, share or sell your After Me data.
We utilize end-to-end encryption to safeguard your information both at rest and in transit. Your devices generate and manage cryptographic keys, and all encryption is done locally. To decrypt your data, you require all three of the following: your account password, your Secret Key, and a copy of your encrypted data. Each of these is safeguarded in various ways and individually encounters distinct threats. By mandating all three, your data is safeguarded by a blend of the best security measures.
The After Me server never has a copy of the decrypted key and is never in a position to share it. Only someone with the key can decrypt a copy of it. Therefore, an attack on our server could not result in unwanted sharing.
Your data is encrypted using the AES-256-CBC algorithm.
The Advanced Encryption Standard (AES) has been adopted by the US government and is the first and only publicly available cipher authorized by the US National Security Agency (NSA) for safeguarding top-secret information. AES-256 has a key length of 256 bits, which supports the largest bit size and is virtually unbreakable based on current computing power, making it the most robust encryption standard.
AES-256 is practically impenetrable using brute-force methods.
Multi-Factor Authentication
We strongly recommend enabling Google MFA.
Google Authenticator is a software-based authenticator developed by Google that implements two-step verification services using the Time-based One-time Password Algorithm (TOTP) and HMAC-based One-time Password algorithm (HOTP) for authenticating software application users.
When logging into a site that supports Authenticator, it generates a one-time password of six to eight digits that users must enter in addition to their usual login details.
Google provides
Android and
iOS versions of Authenticator. We recommend downloading and enabling Google Authenticator to enhance the security of your account.