How it works
Secret key is encoded as a polynomial of degree K-1. Each part is a point on this polynomial. With K points, you can reconstruct the polynomial and get the secret.
Advantages
- Fault tolerance — can lose (N-K) parts
- Security — (K-1) parts give no information
- SLIP39 standard — Trezor support
- Flexible schemes: 2-of-3, 3-of-5 and others
Risks
- Calculator required for creation
- Fewer wallets support SLIP39
- Harder to explain to heirs
Wallet support
- Trezor Model T (create and recover)
- Trezor Safe 3 (recovery)
- Keystone (full support)
Try it yourself
For education only! Never enter real seed phrases.