One copy is fragile. Many copies leak.
QuorumPony is built and maintained by NorseHorse, a solo indie developer. No company, no investors, no growth team. Just software made the way it ought to be.
Why QuorumPony exists
The most important secrets create a dilemma. Keep one copy of a wallet seed phrase or a master key and a fire, a failed drive, or a bad memory can wipe it out forever. Make several copies and every one of them is a place it can be stolen from. Neither answer is good.
Shamir Secret Sharing resolves it. You split the secret into a set of cards and pick a threshold: any few rebuild it, but anything below that threshold reveals nothing at all. Now you can spread the cards across places and people, survive losing some of them, and still know that no single card, or any group too small, gives the secret away. QuorumPony makes that practical on a phone.
How it's built
QuorumPony is native iOS, built in Swift over QuorumPonyCore, a self-contained, constant-time implementation of Shamir Secret Sharing over GF(2^8) with no external dependencies. There is no backend, because the whole point is that nothing leaves your device. The core is open source under Apache-2.0.
The Pony family
QuorumPony has siblings, all the same one person, all the same principles:
- PGPony does the full OpenPGP world: GnuPG-compatible keys, hardware smartcards, on-card key generation.
- AgePony brings the age protocol to the phone for encrypting and signing files.
- RelayPony sends files straight from one phone to another, encrypted, with no server.
All four sit together on the family page.
The rules
- No accounts. Nothing to sign up for.
- No tracking. No analytics, no telemetry, no ad IDs.
- Fully offline. Your secret never leaves the device, and no copy is kept.
- Free. No in-app purchases, no subscriptions.
Contact
Bug reports, questions, and the occasional thank-you all go to the same inbox: NorseHorse@norsehor.se.