§ I
Inheritance
2026
Use case Crypto inheritance

When you are gone, your crypto should not be.

Split the key to your wallet across the people you trust. Any threshold recovers it. No single person can act alone. We never see the secret.

Browser-only Open source No server storage
key f(0) ispouse iichild iiilawyer ivvault vexecutor ANY 3 OF 5 RECONSTRUCT
§ II
Failure modes
§ II

Every common solution fails.

i.
Hidden seed phrase

One fire. One flood. Gone.

A seed phrase in a drawer is a single point of failure that fails silently. Nobody tells you the envelope is missing until the day you need it. By then, the coins are unreachable, and the family has nothing to do but accept the loss.

ii.
Trusted family member

Trust, plus twenty years.

Handing someone a seed phrase means giving them full access right now, and hoping nothing changes over a lifetime. People are human. Marriages strain. Friendships fade. Twenty years is a long time to keep one envelope sealed.

iii.
Inheritance service

They have to outlive you.

Every custodial company asks you to trust them to exist, stay solvent, and stay honest for longer than most companies survive. Their failure is your loss. Their breach is your breach.

§ III
Procedure
§ III · Procedure

Three steps, entirely in your browser.

i · Encrypt

The secret is encrypted

Your seed phrase is encrypted with AES-256-GCM on your device. The ciphertext alone is useless.

ii · Split

The key is split

The encryption key is divided into N shares using Shamir's Secret Sharing. Below the threshold, a share reveals nothing.

iii · Distribute

Holders receive their shard

Each person or place gets one card and a protocol folder. When K come together, the key reconstructs.

The key is split, not the trust. Any three of five can recover. No single person can act alone.
Threshold Vault · Operating principle
§ V
Cryptography
§ V · Cryptography

Two layers, one guarantee.

A symmetric cipher and a threshold scheme, applied in sequence. The math is from a 1979 paper by Adi Shamir; the cipher is the same one used to protect classified material.
Layer IAES-256-GCM

The secret is encrypted.

The cipher that protects classified material at the highest civilian level. GCM mode detects any tampering on recovery. The output is meaningless without the key.

then
Layer IIShamir 1979

The key is split.

Each share is a point on a polynomial. K points reconstruct it. Fewer than K reveal zero information. Provable, not promised. Below the threshold, a share is as good as random noise.

§ VI

We hold zero.

Breach-proof

A breach cannot expose what is not stored. The secret never reaches our servers.

Subpoena-proof

A court order cannot seize what is not held. We have nothing to hand over.

Outlives us

Recovery works offline, from the tool inside your archive. If we vanish, your cards still work.

§ VII
Holders
§ VII · Recommended setup

A 3-of-5 for inheritance.

Threshold 3 / 5
i

Spouse

Home safe / sealed envelope
Share 01 / 05
ii

Adult child

Their home, kept separately
Share 02 / 05
iii

Lawyer

With the will and estate documents
Share 03 / 05
iv

Safe deposit box

Neutral institutional party
Share 04 / 05
v

Executor

Named in the will
Share 05 / 05
3 Any three of five reconstruct. No single holder can act alone. No two together can either.
§ VIII
Protocol
§ VIII · What each holder receives

Not just a card. A protocol.

Document I

Field Card

One page. A safe word, a pause word, five rules for acting under pressure, and the stop signals to watch for. Designed to be carried, not studied.

1 page · laminated
Document II

Pressure Playbook

What to do when the protocol is tested, and the urgency itself is the warning sign. Ten pages on the situations that look like emergencies and are designed to.

10 pages · pocket-bound
Document III

Signed Agreement

A written contract between you and each holder, recording what they accepted. So no one has to interpret it later from memory or from grief.

3 pages · .docx + .pdf
§ IX
Questions
§ IX · Before you begin

Questions that matter.

i.
Your shard cards still work. The recovery tool runs offline from your archive. The code is open source. The scheme is designed to outlive us.
ii.
That is why the threshold exists. A 3-of-5 survives losing two holders. The Lost-Holder Replacement Plan walks you through replacing someone cleanly.
iii.
Below threshold, a share reveals nothing. One person acting alone cannot recover. They would need K-1 collaborators willing to break the same trust.
iv.
Yes. A new ceremony issues new shares and the old ones become obsolete. The Annual Review Checklist makes this routine.
v.
No. We make the cryptography usable. An estate lawyer makes it legally effective alongside your will. The two are complementary, not substitutes.

Begin where it is safe to begin.

Try the real cryptography on a test secret. No signup. When you are ready, the plans are one click away.