For when you are not there
A vault your family can open — but only together.
Encrypt your seed phrases and recovery codes in the browser. Split the key across people you trust. No account, no server, nothing for us to lose.
A walkthrough of the actual screens
No demo footage — these are screenshots of the real product. Click any one to enlarge.
Type in the secrets you want to protect
Seed phrases, master passwords, recovery codes, written instructions. Everything is encrypted in your browser before the form lets you move on.
Choose how many people need to cooperate
Pick a preset (Pair, Couple, Family) or set K-of-N yourself. The diagram updates live so you can see what "any 3 of 5" actually means.
Name the people who will hold the shares
Names go on the printed cards and the legal letter — not in any database. The owner, executor, jurisdiction and intent are spelled out for whoever has to act on them later.
Print, hand out, store the rest safely
One .zip with everything, or grab the share cards, the vault info sheet and the legal letter individually. Print on paper, sign, give a card to each custodian.
Recovery is a single drop zone, with a checklist on the side
The heir drops files, PDFs, or photos of QR codes — any combination, any order. A sticky checklist shows which custodians have shown up and which are still missing. Decryption happens locally in the browser.
What the printed documents look like
Exactly what comes out of the printer. The free version carries a faint diagonal watermark; DMS Full removes it and adds the legal letter.
Why DMS
Your secrets never leave the browser
AES-256-GCM encrypts the vault locally. No account, no upload — even if our server disappears tomorrow, your printed cards still recover.
Paper survives clouds and laptops
Printable share cards + a vault info sheet are enough on their own. A non-technical heir scans QR codes and follows a three-step wizard.
No single person can open it alone
Threshold cryptography (Shamir secret sharing) means K of N people must cooperate. K-1 shares reveal nothing.
One letter for the executor
The paid plan generates a plain-English letter your executor can hand to family alongside a will. Names, jurisdiction, custody chain — all spelled out.
Who DMS is for
- Self-custody crypto holders who want their family to recover funds without trusting a single trustee — and without learning the seed phrase.
- Parents and partners coordinating master passwords, document access and recovery codes across two households.
- Engineers and security folks who want a verifiable, open cryptographic primitive (Shamir over GF(2⁸) + AES-256-GCM) instead of a custodial promise.
Common questions
What happens if dmskey.com disappears?
Nothing — your printed share cards, the vault info sheet, and the JSON file are all self-contained. Recovery never requires our servers. The recovery wizard is plain HTML/JS that can be saved offline and re-run from any modern browser.
Can you read my secrets if you wanted to?
No. The browser generates the encryption key, encrypts your bundle locally, and the only thing that can decrypt it is your shares. Our backend only handles billing and license entitlements — it never sees your vault, ciphertext or plaintext.
What if one of the share-holders loses their card?
Pick K-of-N with N > K and you have built-in redundancy. A 2-of-3 setup survives one lost share; a 3-of-5 survives two. The free version is fixed at 2-of-2 (both shares required); DMS Full unlocks any K-of-N.
Is the legal letter actually valid?
It's not a will — it's an instruction sheet for whoever administers your estate. It explains who holds shares, what the digest of the vault is, and that you consent to fiduciary access under applicable digital-assets statutes (RUFADAA in many U.S. states). Show it to a local notary or solicitor to slot it into a proper will.
Why not just write the seed on paper and put it in a safe?
You can — but a single piece of paper is a single point of failure (fire, theft, fights over the safe). K-of-N splits remove the single point of failure while still being recoverable.
Technical details
AES-256-GCM seals the vault package; the symmetric key is split via Shamir secret sharing over GF(28) into K of N shares. Any K shares together reconstruct the key; any K-1 reveal nothing. Everything runs in this browser tab — no telemetry, no third-party scripts on the Create or Recover screens.
Hardware-wallet seed phrases should be entered on the device itself, not in a web form. Use DMS for software wallets, master passwords, recovery codes, and written instructions for your heirs.