A party you trust has asked you to hold a cryptographic key fragment.
You do not need to know what it protects. You will be contacted
when your participation is needed.
Your privacy is protected
You will not be told what it contains or who else
holds a key. Your key fragment is meaningless alone — only a quorum
of keyholders together can reconstruct anything.
This passphrase encrypts your key on this device. Store it carefully — it cannot be recovered.
🔐 Your key pair will be generated locally in this browser using X25519.
Your private key is encrypted with your passphrase and stored only on
this device. TrustVault never receives it.
🔑
Generating your key pair…
This happens entirely in your browser.
Confirm your key fingerprint
Before finishing, call or message the person who invited you and read
them this fingerprint out loud. This confirms your key was registered
correctly and was not intercepted — the same principle used by
Signal's "safety numbers."
Your key fingerprint
—
Save a backup of your key
Your key is stored only in this browser. Browsers lose data — when it is
cleared, after weeks without a visit (Safari), on a new device — and then
your key fragment can't be opened. Keep a backup somewhere other than this
device: a USB stick or your password manager. It is encrypted with your
passphrase, so the file alone opens nothing.
✓ Downloaded
✓
You're registered
Your backup opens with your passphrase. You will receive an email when your
approval is needed, and now and then to check your key still works. Keep your
passphrase safe — you will need it each time.