Local-only encrypted credentials are lost if the browser storage is wiped and no backup exists. Offer a recovery option beyond a single passphrase.
Scope
- Let a holder split their credential-encryption key using Shamir secret sharing among chosen guardians (or devices), so a threshold can restore it.
- Provide export of shares and a guided recovery flow.
- Keep everything client-side; guardians never see credential data, only key shares.
Value
Meaningful recovery for a self-custodied credential model, reducing catastrophic loss.
Acceptance
- A holder can split and later recover their encryption key via a threshold of guardian shares, fully client-side.
Local-only encrypted credentials are lost if the browser storage is wiped and no backup exists. Offer a recovery option beyond a single passphrase.
Scope
Value
Meaningful recovery for a self-custodied credential model, reducing catastrophic loss.
Acceptance