Vault (Threshold Secret Sharing)

Encrypt a secret and split the key into N shares; any K shares can decrypt. AES-GCM + Shamir over GF(256). All in your browser.

Encrypt a secret and split the key into N shares; any K shares can decrypt. AES-GCM + Shamir over GF(256). All in your browser.

⚠️ For demos and light use only. Not audited cryptography—don’t use for life-or-money-critical secrets.

Create vault

Secret (text)

Threshold K (needed) Total shares N

Bundle (public): ciphertext JSON

Share this with everyone. It contains AES-GCM ciphertext + nonce, and K/N, but not the key shares.

Shares (private): one per line

Give each person exactly one share (keep them secret). Format: SH1:<x>:<base64url>

Decrypt

Paste bundle (ciphertext JSON) Paste ≥K shares (one per line)

Decrypted secret