Security
A vault no single person can open
Trust is the whole product, so here is exactly how the vault works — and what it deliberately does not do.
The vault
Three keys. Any two open it.
You lock your digital life once
Passwords, wallet instructions, account lists and letters are encrypted with your vault’s public key. Only the matching private key can read them.
The private key is split, then discarded
It becomes three shares, each sealed to a person you trust — a spouse, a sibling, a lawyer. Wirātha never stores the whole key.
Two people together open it
When the time comes, any two holders combine their shares. One alone learns nothing. That is the difference between trust and a single point of failure.
How the split-key vault works
- Each vault has its own RSA-2048 key pair. The public key encrypts your data and is safe to store.
- The private key is split with Shamir’s Secret Sharing into three shares (two are needed) and then discarded.
- Every share is wrapped for one holder using that holder’s own key, so Wirātha stores only sealed shares.
- Data itself is encrypted with AES-256-GCM before it is stored.
What that means in practice
- One compromised holder learns nothing on their own.
- Wirātha cannot open your vault without your key holders.
- Opening the vault is an internal, service-only action — a logged-in user cannot trigger it.
- Every sensitive event is written to an append-only, hash-chained audit log.
Around the vault
- Every request is authenticated and checked for ownership: someone else’s plan looks like it does not exist.
- Your browser never holds a service token; sessions live in protected cookies.
- The calculator on this website runs in your browser — nothing you type is sent anywhere.
What we will not claim
We do not claim certifications we do not hold, and we will publish independent security reviews when they exist. Until then, the design above is documented so it can be checked.
See it for yourself
Start free and add your first asset. The vault comes with the Family plan.