Split a key into cards.
Any few rebuild it.
QuorumPony turns one secret into a set of backup cards. Gather a few to recover it. A single card on its own reveals nothing. Real Shamir Secret Sharing, fully offline.
For the secrets you can't afford to lose.
The things that have no reset button, and should not sit in a single drawer, a single disk, or a single head.
Wallet seed phrases and private keys.
PGP, SSH, and age private keys.
Password-manager recovery codes.
The master key behind your other backups.
Everything happens on your device.
Strong by default, simple to hold. No accounts, no cloud, no permissions it doesn't need.
Split a secret
Turn text or a key file into a set of cards. You choose how many to make and how many it takes to recover.
Recover anywhere
Scan each card's QR code or type its printed code. Gather enough and the original comes back.
Check a card
Confirm a stored card is intact and which backup it belongs to, without rebuilding the secret.
Printable cards
Export every card to a clean PDF. Print them, store them apart, or hand them to people you trust.
Fully offline
No account, no sync, no server. QuorumPony never sends your secret anywhere and keeps no copy of it.
Open source core
The cryptography is public under Apache-2.0. Security you can read and verify, not just trust.
Biometric lock
Lock the app with Face ID or Touch ID. Copied secrets clear from the clipboard automatically.
Six languages
English, Spanish, German, French, Japanese, and Portuguese (Brazil), switchable any time.
No tracking
No ads, no analytics, no in-app purchases. The app collects nothing and asks for no permissions it does not need.
Real Shamir Secret Sharing, in three steps.
Choose the split
Pick how many cards to make and how many it takes to recover. A common setup is 3 of 5.
Print and distribute
Export the cards as a PDF and store them in separate places, or give them to people you trust.
Recover from a few
Bring enough cards back together, scan or type them, and QuorumPony rebuilds the secret.
Two cards lost. Still safe.
With a 3 of 5 split, three cards remain and the secret still recovers. Any single card on its own reveals nothing.
The crypto core is open source.
QuorumPony's cryptographic core is published on GitHub under Apache-2.0, so anyone can read, build, and check the exact code that protects your keys. It is constant-time Shamir Secret Sharing over GF(2^8) with no external dependencies.
Android is here.
The Android build is available now as a signed APK you can download and verify. Same Shamir Secret Sharing core, same fully offline design, same price of nothing. Google Play and F-Droid listings are on the way.
Free on the App Store, with no in-app purchases, no ads, and no analytics.
Download on the App StoreDownload the signed APK straight from GitHub and check its signature against the release. Google Play and F-Droid are planned, not yet live.
The cards are the format, not the app. A split made on iPhone is a set of standard Shamir shares over GF(2^8), so the Android build recovers the same cards, as will any other correct implementation of the open-source core. Nothing you back up is tied to one platform.
Frequently asked.
What is Shamir Secret Sharing?
What should I protect with it?
Is my secret ever sent anywhere?
What happens if I lose a card?
Is it really open source?
Does it cost anything?
What languages does it support?
Is there an Android version?
Back up the keys you can't lose.
Free on the App Store, and on Android as a signed APK. No account, no tracking, fully offline. Get the Android build.
Download on theApp Store