1Password, Bitwarden, Dashlane. Every credential you own sits behind a single master password. Split that key across places and people so no single loss takes everything down.
A master password on a sticky note, in a drawer, or in a notebook is your entire digital life sitting in the open for anyone who finds it.
A head injury, a stroke, eighteen months between recoveries. You forget one passphrase and every credential behind it is locked forever.
1Password's Secret Key on a single laptop. That device dies, gets stolen, or burns, and you are locked out of every account behind it.
Your master password, your Secret Key, your recovery codes — enter as a single bundle. The product is agnostic to which manager you use.
The bundle is encrypted on your device with AES-256-GCM. The ciphertext means nothing without the encryption key.
The encryption key is divided into 3 shares using Shamir's Secret Sharing. Threshold 2-of-3. Any single loss is survivable.
Home safe. Trusted person. Bank deposit box. Any two recover. No single mishap takes everything down.
A vault you cannot recover is, eventually, a vault you have lost.
Authenticated symmetric encryption. GCM mode detects tampering on recovery. Without the encryption key, the ciphertext is meaningless and indistinguishable from random.
Each share is a point on a polynomial over a finite field. K points reconstruct it. Fewer than K reveal no information about the key. Provable, not promised.
Never sent. Encrypted on your device. We receive nothing that could reconstruct it.
Generated locally in your browser. Split locally. Never transmitted in any form.
Produced on your device. Rendered to your shard cards. None reach our servers.
Real cryptography on a throwaway value. No signup. When it clicks, you are one step from protecting the real thing.