

Fractum
Fractum is a portable secure file encryption tool allowing you to encrypt files and split them into multiple shares, with the ability to decrypt using only a subset of these shares.
Cost / License
- Free
- Open Source
Platforms
- Mac
- Windows
- Linux


Fractum
Features
Tags
- sss
- File Encryption
- Security
- Data Security
- cryptography
- shamir-secret-sharing
- encryption-tool
- shamir-secret-sharing-scheme
- Encryption
- offline-tool
Fractum News & Activities
Recent activities
Fractum information
What is Fractum?
Fractum is designed for organizations and individuals who need to securely store critical information. It provides enterprise-grade cold storage with mathematical guarantees, eliminating single points of failure through distributed secret sharing. A robust long-term backup solution that combines AES-256-GCM encryption with Shamir's mathematically proven secret sharing. Protect your most critical assets—crypto wallets, SSH keys, passwords, and sensitive documents—with information-theoretic security designed for safe long-term storage.
💼 High-Value Use Cases:
- Cryptocurrency wallet protection: Seed phrases, private keys, hardware wallet backups
- Backup encryption master keys: Protect your backup infrastructure encryption keys
- Root CA private keys: Certificate authority and PKI infrastructure protection
- Emergency recovery credentials: Admin passwords, break-glass access credentials
- Password manager exports: LastPass, Bitwarden, KeePass backup files
- Legal & financial documents: Wills, contracts, tax records, insurance papers
🛠? Distributed Architecture Benefits:
- Bus Factor Protection: Write a Will and instructions for family members - they can pool shares to recover your assets
- Theft/Loss Protection: House fire, kidnapping/hostage situations, or lost hardware wallet - shares remain secure because you cannot be forced to access distant physical locations immediately
- Geographic distribution: Store shares across multiple locations (family, friends, safe deposit boxes)
- No single point of failure: Distributed trust across shares with threshold cryptography
- Zero-knowledge property: K-1 shares reveal absolutely nothing about your secrets
🛡 Enterprise Security Features:
- Works completely offline: perfect for air-gapped environments
- Memory protection: Secure deletion and swap prevention
- FIPS 140-2 compatible: Uses industry-standard algorithms
- Container-native: Docker with security hardening and non-root execution
