Secretum Web

Passphrase encryption with multiple FIDO2 hardware keys — fully client-side

Passphrase to encrypt

Hardware Keys

Any listed key can later decrypt the file independently.

First time? Create a resident key on your hardware device →

Create a resident (discoverable) credential on your FIDO2 hardware key. Only needed once per physical device. Requires a PRF-capable key (e.g. YubiKey 5) and Chrome 116+.