Original Summary

Thumb drives die, paper fades, and secrets keep leaking out of password-manager clouds, photo galleries, and wallet logs. I wanted a backup that doesn’t depend on any one object or company surviving. How it works: you tap a FIDO2 security key (YubiKey 5 w/ firmware 5.2+, or any key with the PRF/hmac-secret extension). It produces a secret that never leaves the key; your browser uses it to encrypt your vault (~1 KB, enough for seed phrases and 2FA backup codes) with AES-256-GCM. The sealed vault is written to OP Mainnet (Optimism’s L2), with a permanent copy on Arweave ( r/Arweave ). Nothing leaves your device unencrypted. No account, no master password, no backend. The site just serves static files. Enroll 2+ keys; any one opens the vault. Lose one, add a replacement. Lose all of them and nobody can open it, including me. Gas on OP Mainnet is sponsored, so you don’t need a wallet or any crypto. If the site disappears, an open-source CLI recovery tool reads the vault straight from OP Mainnet or Arweave with just your key. MIT licensed, vault format and architecture are documented in the repo. Honest caveats: It uses noble crypto libs with published test vectors, but please treat this as a redundant backup. And no backup helps if you type your phrase on an already-infected machine. Site: cryoshield.app Code: github.com/prix0007/cryoshield Happy to answer questions about the threat model or the design. Would especially appreciate crypto/security folks poking at it.   submitted by   /u/Alternative-Buy5842 [link]   [comments]

  • 情报分类：商业与市场研究
  • 分类依据：内容涉及商业、投资或市场动态
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/10/13 06:23:51