Free on the App Store

Split a key into cards.
Any few rebuild it.

QuorumPony turns one secret into a set of backup cards. Gather a few to recover it. A single card on its own reveals nothing. Real Shamir Secret Sharing, fully offline.

Download on theApp Store Android — in development See how it works

Shamir Secret Sharing Fully offline · no server Apache-2.0 open core

A 3 of 5 split. Any three rebuild it; two on their own reveal nothing.

// what it protects

For the secrets you can't afford to lose.

The things that have no reset button, and should not sit in a single drawer, a single disk, or a single head.

crypto

Wallet seed phrases and private keys.

identity

PGP, SSH, and age private keys.

access

Password-manager recovery codes.

root

The master key behind your other backups.

// features

Everything happens on your device.

Strong by default, simple to hold. No accounts, no cloud, no permissions it doesn't need.

Split a secret

Turn text or a key file into a set of cards. You choose how many to make and how many it takes to recover.

Recover anywhere

Scan each card's QR code or type its printed code. Gather enough and the original comes back.

Check a card

Confirm a stored card is intact and which backup it belongs to, without rebuilding the secret.

Printable cards

Export every card to a clean PDF. Print them, store them apart, or hand them to people you trust.

Fully offline

No account, no sync, no server. QuorumPony never sends your secret anywhere and keeps no copy of it.

Open source core

The cryptography is public under Apache-2.0. Security you can read and verify, not just trust.

Biometric lock

Lock the app with Face ID or Touch ID. Copied secrets clear from the clipboard automatically.

Six languages

English, Spanish, German, French, Japanese, and Portuguese (Brazil), switchable any time.

No tracking

No ads, no analytics, no in-app purchases. The app collects nothing and asks for no permissions it does not need.

// how it works

Real Shamir Secret Sharing, in three steps.

Choose the split

Pick how many cards to make and how many it takes to recover. A common setup is 3 of 5.

Print and distribute

Export the cards as a PDF and store them in separate places, or give them to people you trust.

Recover from a few

Bring enough cards back together, scan or type them, and QuorumPony rebuilds the secret.

Two cards lost. Still safe.

With a 3 of 5 split, three cards remain and the secret still recovers. Any single card on its own reveals nothing.

// verifiable, not just trusted

The crypto core is open source.

QuorumPony's cryptographic core is published on GitHub under Apache-2.0, so anyone can read, build, and check the exact code that protects your keys. It is constant-time Shamir Secret Sharing over GF(2^8) with no external dependencies.

View the core on GitHub More on open source

// android

Android is in development.

QuorumPony is iPhone-only today. The Android port is being built now — same Shamir Secret Sharing core, same fully offline design, same price of nothing.

iOS available now

Free on the App Store, with no in-app purchases, no ads, and no analytics.

Download on the App Store

Android in development

In development, with no date attached — this is a one-person operation built around a day job, so it ships when it is right. There is nothing to download yet, and nothing here will pretend otherwise.

Ask to be told when it lands

// your cards will still work

The cards are the format, not the app. A split made on iPhone is a set of standard Shamir shares over GF(2^8), so the Android build will recover the same cards — and so will any other correct implementation of the open-source core. Nothing you back up today is waiting on a platform.

// questions

Frequently asked.

What is Shamir Secret Sharing?

It is a method that splits a secret into a set of shares, where you choose two numbers: how many shares to make, and how many it takes to recover. With a 3-of-5 split, any 3 of the 5 cards rebuild the secret, and any 2 or fewer reveal nothing at all. QuorumPony implements it for real, as constant-time arithmetic over a finite field.

What should I protect with it?

Anything you cannot afford to lose but should not keep in one place: a wallet seed phrase or private key, a PGP / SSH / age private key, password-manager recovery codes, or the master key behind your other backups.

Is my secret ever sent anywhere?

No. QuorumPony is fully offline. There is no account, no sync, and no server. Your secret is split and recovered entirely on your device, and the app keeps no copy of it.

What happens if I lose a card?

As long as you still have the threshold number, you recover the secret. With a 3-of-5 split you can lose up to two cards and still be fine. Any single card on its own reveals nothing.

Is it really open source?

Yes. The cryptographic core is published on GitHub under Apache-2.0: constant-time Shamir Secret Sharing over GF(2^8) with no external dependencies. You can read and verify the exact code that protects your keys.

Does it cost anything?

No. QuorumPony is free on the App Store, with no in-app purchases, no ads, and no analytics.

What languages does it support?

Six: English, Spanish, German, French, Japanese, and Portuguese (Brazil), switchable any time inside the app.

Is there an Android version?

Not yet — an Android port is in development. QuorumPony is the simplest app in the family, so the port is not a large job, but it is being built properly rather than quickly. The cards this version produces are plain Shamir shares, so anything you split today will still recover on Android when it lands.

Back up the keys you can't lose.

Free on the App Store. No account, no tracking, fully offline. Android is in development.

Download on theApp Store

// also reachable over Tor & I2P

This site runs as a Tor onion service and an I2P eepsite.

Same pages, no exit nodes, no logs — reachable even from networks where quorumpony.com is blocked. The onion address is its own cryptographic proof you reached the real site.