Two of three bring it back.
Split a password, card or seed phrase into three shards. Any two recombine the secret; one alone gives away nothing usable. Lose a shard and you still have it.
A vault for the secrets that matter.
One secret.
Three shards.
Any two.
Keep passwords, payment cards, 2FA seeds and recovery phrases in a vault encrypted on your phone, or split any of them into shards you store apart. Any two bring the secret back. One alone gives away nothing usable.
iPhone & iPad · Android soon
Free. No subscription, no ads, no account.
Keep it. Split it. Get it back.
Encrypted on your deviceAny two of three shardsNo account, no backendFree, no ads
01 / Too valuable for one place
Split it. Scatter it.
Scan it back.
A seed phrase, a payment card, the key to your email: some secrets shouldn’t sit in one storage location. split/Pass keeps them out of one.
Recover with a scan.
Keep a shard as a QR code or write it to an NFC card. To recover, open the Scanner and read any two with your phone’s camera or NFC.
A vault for the rest.
Passwords, cards, 12 or 24-word seed phrases and 2FA seeds sit behind your master passphrase. Seed phrases are recognised for you and 2FA codes tick on screen.
Your phone. Your passphrase.
No account, no server, no telemetry. The vault is sealed with Argon2id and AES-256-GCM. There is no recovery for a lost passphrase, because there is nobody who could do it for you.
02 / From one secret to three shards
One passphrase.
Your secrets around it.
A master passphrase encrypts the vault and, unless you choose another for the file, every backup you export. Everything else, from splitting to scanning, happens on the device.
-
01
Choose a master passphrase.
At least 8 characters and not weak. It lives in memory only while the vault is unlocked, and three wrong attempts wipe the app’s data and return to setup.
-
02
Add a secret.
Type or generate a password, add a card, paste a seed phrase or keep a 2FA seed. Passwords come from a built-in generator with length and character controls.
-
03
Split it into three.
Create the secret with splitting on. Three shard QR codes appear, and nothing is stored until you save a shard to the device, write it to an NFC card or share it.
-
04
Keep the shards apart.
One at home, one in your wallet, one with someone you trust. Anyone holding a single shard gets nothing usable, so the pieces never need to be hidden perfectly.
-
05
Scan any two to recover.
Open the Scanner and read two different shards by QR or NFC. The secret returns on screen, and copied values clear themselves from the clipboard after a while.
03 / Start with the phone you carry
Put split/Pass to work.
Install the app and keep your secrets apart from the first minute. Add the browser extension later if you fill passwords at a desk.
Phone & tabletStart here
split/Pass for mobile
The vault, the splitter and the scanner. Free, light and dark, in five languages.
Version 1.4.21 · Free, no subscription, no ads. iPhone and iPad today, Android soon.Open source
Read every line
Apache-2.0, with the specification next to the code: payload formats, the encryption envelope, the security invariants and every screen.
git clone https://github.com/satoshi-ltd/splitPass.gitView the repository
04 / At your desk
Scan once.
Fill every time.
The split/Pass Scanner extension reads a split/Pass QR with your computer’s camera, decodes it locally and fills the password on the page. Each entry is saved for its own domain.
- Passwords and 2FA codes, filled from a panel on the site you are on.
- Matched to the site’s registrable domain, so a lookalike never gets your credentials.
- A vault of its own under its own master password. It never reads the app’s data.
- Entries expire after a period of disuse (7 days to start, longer the more you use them, or pinned), and expired ones are wiped without the password.
Chrome and Brave (load unpacked) · Safari via Xcode · version 0.1.0
split/Passgithub.com
satoshiFill
satoshi · 2FA542 389
Scan a split/Pass QR to save it
Questions, answered
Before you get started.
What exactly is a shard?
One of three pieces made from a secret with Shamir secret sharing. Any two pieces rebuild the secret; a single piece carries no usable part of it, so it can sit on a card or in a drawer without giving anything away.
What does it cost?
Nothing. split/Pass is free, with no subscription, no in-app purchases and no ads, and it needs no account. There is no paid tier behind it.
What if I lose a shard?
You still hold the secret: any two of the remaining shards recover it. Lose two and it is gone, so scan the two you have and split it again before you lose another.
What if I forget my master passphrase?
There is no recovery. Nothing leaves your device, so nobody holds a copy of the key. Three wrong attempts also wipe the app’s data. Keep an encrypted backup and the passphrase somewhere safe.
Where are my secrets stored?
In an encrypted vault on your device. There is no backend and no telemetry. The app reaches the network only for website logos, which are off until you turn them on (the site’s domain name is then requested from DuckDuckGo and Google), and for the Terms and Privacy links.
Do I need NFC?
No. QR codes work on any phone with a camera. An NFC card is an optional place to keep a shard, and reading it depends on your phone’s NFC support.
How do backups work?
Export writes an encrypted archive with a neutral file name and no marker that says what it is. Importing replaces the vault’s contents. A weekly reminder asks for a backup, and you can turn it off.
Can someone read my screen or clipboard?
Android blocks screenshots in the app and iOS blurs the app switcher. Copied values clear from the clipboard after a timer, on a best-effort basis. The vault locks after five minutes in the background, or at once if you turn on lock immediately.
Does the extension handle everything the app does?
No. It reads password, password-with-passcode and 2FA codes. Shards, cards and seed phrases stay in the app, and the extension does not sync with it.
Will codes and backups from older versions still work?
Yes. Every QR code, NFC card, shard format and backup an earlier release wrote is kept readable. Older vaults upgrade to the current encryption the first time you unlock them.