Multisig recovery phrases, governance admin keys, the credentials behind the credentials. Split the off-chain backup across the people who should hold it, with the threshold you choose. We never see the words.
A multisig with five signers, three required. Two signers move on, one becomes unreachable. The remaining holders cannot reach quorum. Funds are stranded.
The recovery phrase for the upgrade key, stored on one founder's machine. Phishing, malware, or device loss converts protocol risk into existential risk.
A custodial backup service for institutional treasuries shut down. Customers had ninety days to migrate. Many learned about the deadline after it passed.
The seed words behind the signing devices in a Gnosis Safe or Squads treasury. The off-chain backup that quietly determines whether the on-chain quorum can rebuild itself.
The upgrade key. The pause key. The fee-switch key. Credentials that, in the wrong hands, can drain or brick the protocol. In the right hands, only with a threshold.
The accounts that execute on-chain governance once a proposal passes. Small in number, large in consequence. Often held informally by one or two people.
The registrar and DNS provider that point the protocol's domain to the right interface. Hijacked or lost, users land on imitators or nowhere at all.
The master tokens for infrastructure providers, indexers, and oracles. Lost, services degrade silently. Stolen, attackers feed false data into the protocol.
The deep-cold backup of the treasury wallet itself, off every machine, off every cloud. The last-resort key that no individual signer alone should reach.
An on-chain multisig is only as resilient as its off-chain backup.
Multisig seeds, admin key recovery phrases, registrar logins, RPC tokens. Whatever the protocol cannot afford to lose, bundled as plain text in your browser, briefly.
Authenticated symmetric encryption, performed in your browser. The encrypted blob is meaningless without the key. The key is what gets split.
The encryption key is divided into N shares with threshold K. Typical for a DAO leadership group is 3-of-5. Below K, a share reveals nothing about the key.
Each signer or trusted party receives a shard card and a protocol folder. They are prepared, with a written agreement, for the day someone may try to coerce or deceive them into recovery.
Authenticated symmetric encryption. GCM mode detects tampering on recovery. Without the encryption key, the ciphertext is meaningless and indistinguishable from random output.
Each share is a point on a polynomial over GF(256). K points reconstruct it. Fewer than K reveal zero information about the key. Provable, not promised.
Try the cryptography on a throwaway phrase. No signup. When you are ready, the plans are one step away.