Use only on computers you control
Install and enroll Selfwipe only on computers you own or are authorized to administer. You are responsible for choosing the correct device, protecting your account, and keeping your erase authorization code secure.
Erasure is irreversible
A confirmed erase request can permanently remove access to data. Keep verified backups separately before enabling an erase method. Cancellation is available only while a command is still queued; once a device accepts or starts it, cancellation may no longer be possible.
Capability is specific to your setup
Enrollment does not mean a computer can be erased. This release supports enrollment and simulation on macOS, Linux, and Windows. Destructive operations require local arming and a storage configuration accepted by the agent: a supported Linux LUKS2 root container, or Windows native protected reset for a supported BitLocker-encrypted operating-system volume. Native macOS erasure is not available in this release; it requires a separate supported Apple management enrollment.
Linux cryptographic erasure removes encryption key slots for the selected supported container. It does not erase external disks, separate boot partitions, off-device backups, or material already copied elsewhere. Recovery material or encryption-header backups can affect whether data remains recoverable.
Windows protected reset requires one internal GPT operating-system disk, a fully encrypted Windows volume with BitLocker protection on, Windows Recovery Environment on that same disk, and execution by the installed SYSTEM task. Additional internal data disks or volumes and paging files outside the protected operating-system volume are unsupported. Boot and recovery partitions, external disks, and off-device copies are outside the protected volume’s scope. Reset can leave the machine in Recovery or unbootable and require a Windows reinstall. It does not establish forensic sanitization of all physical SSD storage.
Reachability and outcomes
The computer must be running, connected, and able to operate the agent to receive a command. A powered-off or disconnected machine cannot receive one. An attacker with sufficient access may disable the agent. Disk encryption remains essential protection when the device is unreachable.
A successful simulation confirms command delivery and handling, not successful disk erasure. A device stopping contact does not prove an erase completed. Selfwipe cannot promise delivery within a particular time, uninterrupted availability, or that a thief never obtains data.
After a theft
Revoke exposed credentials and active sessions separately. Wiping a machine cannot withdraw secrets or files already taken from it.
Support
Contact support@mattmade.ai for questions about installation, device enrollment, or your account. Do not send private keys, recovery material, or erase authorization codes.