You are using an unsupported browser. This website will not work properly for you since it relies on features that your browser doesn't have. Either upgrade your browser or use Firefox, Chrome, Edge, or Safari.

Create a Vault Key

About the Vault Key

This tool creates a vault key, which is used to create and restore Vault Backups. It is stored in an encrypted format, requiring one or more passwords each time it's used.

The vault key is created by using Shamir's secret sharing scheme to split a randomly generated encryption key into multiple parts, each of which is encrypted with a different password by using scrypt and AES-256. All the parts are stored together to form the encrypted vault key.

None of your information is ever sent to a server.

Learn more about the safety and security of this site on the about page.

  1. Preparation

    For the safety of your sensitive information, make sure your internet is disconnected.

    Each person who is going to provide a password should take the time now to come up with a good password or passphrase, which will be used later to encrypt and use the vault key. Keep in mind that there is no password recovery feature here, and if your cryptocurrency is stolen because of a weak encryption password, nobody can help you.

    Tips for a good password/passphrase

    • Use a unique password, not one that you've used elsewhere.
    • The longer, the better—aim for 12 characters long at minimum. Entire phrases make for the strongest passwords.
    • Make it impossible for someone else to guess—For short passwords, avoid using dictionary words or simple alterations of words. For passphrases, avoid common phrases or simple alterations of common phrases.
    • Use variety—include numbers, capital letters, and symbols.
    • Make it memorable—it should be easy for you to remember, but difficult for anyone else.
  2. Generate and encrypt the vault key

    The passwords/passphrases that are used to encrypt the vault key are the same ones needed each time you wish to use the key.


    Please wait, still loading... {{encryptionForm.percentComplete}}% complete

    Tip: using a phone? Encryption is much faster on a computer.

    {{encryptionForm.error}} Successfully generated and encrypted your vault key.

  3. When people leave or join the team

    When trusted members of the team (who know some of the vault key passwords) leave, or when new trusted people join the team, re-encrypt the vault key with a new set of passwords, and destroy the old copies of the vault key.

    As an extra precautionary measure, each team member can store a written copy of their password in their own personal safe deposit box, so that if many of the team members die at the same time, the contents of their boxes can be retrieved and the key can still be used.

  4. Show some love

    If this site helped you, please consider spreading the word and/or donating a few fractions of a coin. Scroll to the bottom of the page for donation addresses.