Free on the App Store

Split a key into cards.
Any few rebuild it.

QuorumPony turns one secret into a set of backup cards. Gather a few to recover it. A single card on its own reveals nothing. Real Shamir Secret Sharing, fully offline.

Shamir Secret Sharing Fully offline · no server Apache-2.0 open core

A 3 of 5 split. Any three rebuild it; two on their own reveal nothing.

// what it protects

For the secrets you can't afford to lose.

The things that have no reset button, and should not sit in a single drawer, a single disk, or a single head.

crypto

Wallet seed phrases and private keys.

identity

PGP, SSH, and age private keys.

access

Password-manager recovery codes.

root

The master key behind your other backups.

// features

Everything happens on your device.

Strong by default, simple to hold. No accounts, no cloud, no permissions it doesn't need.

Split a secret

Turn text or a key file into a set of cards. You choose how many to make and how many it takes to recover.

Recover anywhere

Scan each card's QR code or type its printed code. Gather enough and the original comes back.

Check a card

Confirm a stored card is intact and which backup it belongs to, without rebuilding the secret.

Printable cards

Export every card to a clean PDF. Print them, store them apart, or hand them to people you trust.

Fully offline

No account, no sync, no server. QuorumPony never sends your secret anywhere and keeps no copy of it.

Open source core

The cryptography is public under Apache-2.0. Security you can read and verify, not just trust.

Biometric lock

Lock the app with Face ID or Touch ID. Copied secrets clear from the clipboard automatically.

Six languages

English, Spanish, German, French, Japanese, and Portuguese (Brazil), switchable any time.

No tracking

No ads, no analytics, no in-app purchases. The app collects nothing and asks for no permissions it does not need.

// how it works

Real Shamir Secret Sharing, in three steps.

01

Choose the split

Pick how many cards to make and how many it takes to recover. A common setup is 3 of 5.

02

Print and distribute

Export the cards as a PDF and store them in separate places, or give them to people you trust.

03

Recover from a few

Bring enough cards back together, scan or type them, and QuorumPony rebuilds the secret.

Two cards lost. Still safe.

With a 3 of 5 split, three cards remain and the secret still recovers. Any single card on its own reveals nothing.

// verifiable, not just trusted

The crypto core is open source.

QuorumPony's cryptographic core is published on GitHub under Apache-2.0, so anyone can read, build, and check the exact code that protects your keys. It is constant-time Shamir Secret Sharing over GF(2^8) with no external dependencies.

// android

Android is here.

The Android build is available now as a signed APK you can download and verify. Same Shamir Secret Sharing core, same fully offline design, same price of nothing. Google Play and F-Droid listings are on the way.

iOS available now

Free on the App Store, with no in-app purchases, no ads, and no analytics.

Download on the App Store
Android available now

Download the signed APK straight from GitHub and check its signature against the release. Google Play and F-Droid are planned, not yet live.

// your cards work everywhere

The cards are the format, not the app. A split made on iPhone is a set of standard Shamir shares over GF(2^8), so the Android build recovers the same cards, as will any other correct implementation of the open-source core. Nothing you back up is tied to one platform.

// questions

Frequently asked.

What is Shamir Secret Sharing?
It is a method that splits a secret into a set of shares, where you choose two numbers: how many shares to make, and how many it takes to recover. With a 3-of-5 split, any 3 of the 5 cards rebuild the secret, and any 2 or fewer reveal nothing at all. QuorumPony implements it for real, as constant-time arithmetic over a finite field.
What should I protect with it?
Anything you cannot afford to lose but should not keep in one place: a wallet seed phrase or private key, a PGP / SSH / age private key, password-manager recovery codes, or the master key behind your other backups.
Is my secret ever sent anywhere?
No. QuorumPony is fully offline. There is no account, no sync, and no server. Your secret is split and recovered entirely on your device, and the app keeps no copy of it.
What happens if I lose a card?
As long as you still have the threshold number, you recover the secret. With a 3-of-5 split you can lose up to two cards and still be fine. Any single card on its own reveals nothing.
Is it really open source?
Yes. The cryptographic core is published on GitHub under Apache-2.0: constant-time Shamir Secret Sharing over GF(2^8) with no external dependencies. You can read and verify the exact code that protects your keys.
Does it cost anything?
No. QuorumPony is free on the App Store, with no in-app purchases, no ads, and no analytics.
What languages does it support?
Six: English, Spanish, German, French, Japanese, and Portuguese (Brazil), switchable any time inside the app.
Is there an Android version?
Yes. The Android build is available now as a signed APK you download from GitHub and verify against the release signature; Google Play and F-Droid listings are planned. It uses the same Shamir Secret Sharing core, and its cards are fully interchangeable with the iPhone app.

Back up the keys you can't lose.

Free on the App Store, and on Android as a signed APK. No account, no tracking, fully offline. Get the Android build.

Download on theApp Store