timed release
Seal it now, open it on a date
Drop files here, or choose them.
Locked until
Two files downloaded: the capsule and the seal file. The capsule holds the files, the seal file and a note saying what they are. Its fingerprint is listed on the seal's receipt, along with the time it opens.
Where you keep the capsule decides who can open it. Keep it private and it opens only for the people you give it to. Put it somewhere public (a public repository, Zenodo, your website) and it opens for everyone at that moment, whether or not anyone at your end is still around to release it. Once a capsule is public, it can't be recalled.
How the lock works
drand is run by universities, companies and foundations that together sign a new random value every three seconds. Each signature needs a threshold of members working together, the group signs a moment only when it arrives, and that signature is the decryption key for anything locked to the moment (identity-based time-lock encryption). The capsule is a standard age file, so drand's own tool opens it without Pith:
tle -d pith-capsule-<id>.age | tar -x
Three limits are worth knowing. If drand stopped operating before your date, the capsule would never open, so keep your own copy of the files. A threshold of drand's members acting together against their protocol could sign a moment early. And the lock rests on elliptic-curve cryptography that a large quantum computer could break. The seal itself (the Bitcoin record and the timestamps) depends on none of these.