Multi-Party Access
Split-Key Secrets
Distribute access to one encrypted payload across multiple participant fragments. A single fragment is insufficient, and an authorized viewer reconstructs the key in the browser after the required distinct fragments are submitted. This can support shared recovery and joint administrative access when the links and devices are handled carefully.
Split-Key Secret Features
Eliminate single points of failure by requiring multiple people to authorize access.
Use mathematical thresholds like 2-of-3 or 3-of-5 to balance security and availability.
Reconstruct the key in the authorized viewer's browser after the threshold is reached.
Issue distinct participant links so intended viewers can contribute separate fragments.
Configuration examples
2-of-3 configuration
Distribute three fragments among founders. Any two can combine their fragments to unlock the organizational recovery code if a primary administrator is unavailable.
3-of-5 configuration
Provide five team members with fragments. Accessing the critical API key requires at least three members to collaborate, ensuring broad consensus.
Honest limits of Split-Key sharing
- If a threshold number of fragments is lost, the payload cannot be recovered.
- Split fragments must be communicated over separate, independent channels to maintain security.
- Once reconstructed in the browser, the decrypted payload is visible to whoever combined the fragments.
Frequently asked questions
How does Strumio split the decryption key?
The sender's browser creates the AES-256-GCM key, encrypts the payload, and uses Shamir's Secret Sharing to create mathematical fragments. Strumio stores the encrypted payload and the operational records required to deliver participant contributions.
Where is the complete key reconstructed?
The authorized viewer reconstructs the key in the browser after enough distinct participant contributions are available. Complete participant links remain sensitive, and Strumio still processes ciphertext and operational metadata needed to coordinate the flow.
What happens if a fragment is lost?
As long as the required threshold (for example, 2 out of 3) can still be met, an authorized viewer can reconstruct the secret. If too few usable fragments remain, Strumio cannot restore the missing fragments or decrypt the payload.
Can I specify who receives which fragment?
Creation produces distinct participant links for separate intended viewers. Deliver them through appropriate channels, verify recipients, and remember that forwarding a complete participant link can transfer that participant capability.
Does Split-Key prevent an authorized viewer from copying the secret?
No. Threshold access controls when reconstruction can occur. After reconstruction, the viewer's device can display, copy, photograph, or otherwise expose the plaintext.
Is Split-Key a replacement for organizational access management?
No. It can reduce dependence on one holder for a focused handoff, but it does not replace individual accounts, hardware-backed keys, audit systems, credential rotation, or tested recovery procedures.
Learn more in the practical Split-Key sharing guide, review browser encryption, or read how Strumio works.
Ready to distribute access?
Create an account to send your first Split-Key Secret and manage recipient access centrally.