Post-quantum encryption · for macOS

Your secrets,
sealed for the
quantum age.

Farewell is the most advanced encrypted vault for Mac. Post-quantum cryptography, plausible deniability, and zero servers — your most sensitive files never leave your hands.

One-time payment · one Mac · notarized by Apple · no subscription

sources.vault Unlocked
interview-transcript.md
Markdown · edited 2h ago
14 KB
leaked-report.pdf
Document · 12 pages
2.1 MB
site-photo.png
Image · 4032×3024
3.8 MB
call-recording.wav
Audio · 7:21
38 MB
4 items · auto-locks in 5 min Post-quantum sealed
ML-DSA
FIPS 204 signatures
No servers
100% on your Mac
Post-quantum signatures 256-bit encryption No servers, ever Notarized by Apple 8 languages
Why Farewell

When a file can cost a life,
“good enough” isn’t.

Journalists, sources, lawyers, activists. For the people Farewell is built for, a leaked document, a seized laptop, or a single forced password isn’t an inconvenience — it’s a catastrophe. Farewell is designed for exactly that threat model.

Post-quantum cryptography

Encryption built to outlast quantum computers.

The files you protect today may need to stay secret for decades. Farewell pairs post-quantum digital signatures with encryption that quantum machines can’t shortcut — so “harvest now, decrypt later” attacks come up empty.

  • ML-DSA (FIPS 204) post-quantum signatures guarantee your vault hasn’t been forged or tampered with.
  • 256-bit authenticated encryption — a key space no quantum computer can brute-force.
  • Argon2id key hardening (1 GiB) makes guessing your passphrase ruinously expensive.
ML-DSA signature
Post-quantum integrity · FIPS 204
256-bit AEAD
Authenticated encryption
Argon2id · 1 GiB
Memory-hard key derivation
Plausible deniability

Looks like nothing.
Proves nothing.

A Farewell vault is indistinguishable from random data. Fixed size, no readable header, no file names, no metadata leaking what’s inside — or that anything is inside at all. There is nothing to point to, and nothing to confess.

  • Encrypted content is uniform random bytes — no signature, no structure to detect.
  • The vault size never reveals how much — or how little — you’re keeping.
  • Your identity stays out of the vault by default.
Hardware keys

Add a YubiKey.
Or a backup. Or both.

Bind a vault to a physical security key, so it can’t be opened without the metal in your pocket. Enroll a backup key and keep it somewhere safe — either one opens the vault, so losing one is survivable, not fatal.

  • FIDO2 / hardware-backed unlock — the key never leaves your hand.
  • Named backup keys with their own PINs — add or remove them anytime.
  • A touch to unlock — phishing-proof, screenshot-proof, keylogger-proof.
+
Everything inside

Uncompromising by design.

Every detail is chosen to keep you safe — and to stay out of your way.

Nothing ever leaves your Mac

No accounts, no cloud, no telemetry. Farewell never makes a network connection. It works fully offline, on a plane, in a basement, anywhere.

No recovery. No backdoor.

Your passphrase is the only key. We can’t reset it, and neither can anyone who compels us. That’s the point — and we say it plainly up front.

Built-in viewer

Read documents, view images, play audio, and edit notes inside the vault — without ever writing a decrypted copy to disk.

Secure shred on import

Pull a file into your vault and the original can be securely removed — so the only copy that survives is the encrypted one.

Auto-lock

Step away and the vault seals itself. Keys are wiped from memory the moment it locks — nothing lingers for a cold-boot attack.

Native & in your language

A true macOS app — fast, signed, notarized. Available in 8 languages, including right-to-left, with the Mac polish you expect.

How it works

Three steps. Then it’s sealed.

No setup wizard, no account, no learning curve. Just protection.

1

Create a vault

Choose a strong passphrase — Farewell guides you to one that’s actually safe. Optionally bind a YubiKey.

2

Add your files

Drag in documents, photos, recordings — anything. They’re encrypted instantly, the originals can be shredded.

3

Lock it

Close the vault and it becomes random bytes. Only your passphrase — and your key — can ever open it again.

Pricing

One price. Everything included.

No subscriptions. No tiers to decode. Buy it once, own it.

Farewell · Simple
€49one-time
For one Mac · free updates throughout v1
  • Post-quantum encrypted vaults
  • Plausible deniability built in
  • YubiKey & backup-key support
  • Built-in viewer, secure shred, auto-lock
  • 100% offline · no accounts · 8 languages
Buy Farewell — €49
Secure checkout · macOS 15 or later
At risk and can’t pay? Farewell exists to protect journalists, sources, and human-rights defenders. If that’s you, a free license is available — write to us.
Questions

The honest answers.

What does “post-quantum” actually mean here?
Future quantum computers threaten today’s public-key cryptography. Farewell defends against that on two fronts: it signs every vault with ML-DSA (FIPS 204), a signature scheme designed to resist quantum attacks, and it encrypts your content with 256-bit symmetric cryptography, whose key space is far beyond the reach of any quantum machine. Together, that protects you from “harvest now, decrypt later” — where an adversary stores your encrypted files today, hoping to break them years from now.
What if I forget my passphrase?
Then the vault is gone — and that is the design, not a flaw. Farewell has no recovery, no master key, and no backdoor, because any of those would be a way in for an adversary too. We tell you this clearly when you create a vault. Choose a passphrase you’ll remember, and consider enrolling a backup hardware key.
Does Farewell ever connect to the internet?
No. Farewell makes no network connections at all — no accounts, no sync, no telemetry, no “phone home.” Your files and your passphrase never leave your Mac. You can verify this by running it fully offline.
Is it really just €49?
Yes — one payment, for one Mac, with free updates throughout version 1. No subscription, no upsells. If you’re a journalist or human-rights defender who can’t afford it, reach out about a free license.
Which Macs are supported?
Farewell runs on macOS 15 or later, on both Apple silicon and Intel Macs. It’s a native app, signed with a Developer ID and notarized by Apple, so it installs cleanly with no security warnings.
Can I trust the cryptography?
Farewell is built on standard, well-studied primitives — Argon2id, 256-bit authenticated encryption, and ML-DSA (FIPS 204) — not home-grown crypto. We welcome scrutiny; security researchers can reach us at security@farewell.pro.

Some files you
can’t afford to lose.

Protect them with the most advanced encryption available on a Mac. Once. For €49.

Get Farewell — €49