PaperVault is a free, open-source program for Windows that turns a seed phrase or other secret into an encrypted paper backup. It is aimed at people who keep crypto wallet recovery phrases and want an offline copy that does not depend on a cloud service or a single handwritten note.
The tool encrypts your data with AES-256-GCM and splits the decryption key into shards using Shamir's Secret Sharing. You choose how many shards to create and how many are needed to unlock, so a 3-of-5 setup can survive losing two pieces. Version 1.3.0 is the current release, and the code was last updated on August 14, 2026, so the project is actively maintained.
What Is PaperVault and Who Is It For?
A seed phrase is a list of words that restores a crypto wallet. Anyone who loses it loses access to the funds, and anyone who finds it can take them. That makes the way you store it as important as the wallet itself. PaperVault is built for people who want a durable copy of that phrase outside their phone or laptop.
The program suits several kinds of users. Individual holders who keep a single recovery phrase can use it to make a backup that does not sit in a cloud note. Families and small teams can split a key among trusted members so no one person holds everything. Technical users who want to run tools on an isolated machine will also find the workflow familiar.
PaperVault is not a wallet and does not manage your coins. It only protects the secret you give it, which is a narrower job that makes it easier to understand and review.
How Threshold Splitting Works in Practice
Shamir's Secret Sharing divides a secret into several shares by using a mathematical curve defined by random coefficients. Each share is one point on that curve. Any set of shares that reaches the threshold lets you reconstruct the curve and the secret, while a smaller group reveals nothing useful about it.
Consider a 3-of-5 setup. You give shards to five people, or keep them in five locations. If one shard is lost, the other four still unlock the vault. If two are compromised, an attacker still lacks the third needed to reach the threshold. The approach trades a single point of failure for the need to coordinate a few people or places.
Choosing the numbers is the key decision. A low threshold makes recovery easier but gives fewer people a veto over access. A high threshold is more secure but harder to satisfy in an emergency. Think about who you would realistically trust to be available when it matters.
Why Paper Backups Still Matter for Seed Phrases
Digital copies are convenient, but they share the same weak spots: a stolen laptop, a compromised cloud account, or a phone lost in a drawer. Paper stays out of reach of remote attackers, which is why many long-term holders keep a physical copy of their recovery material.
Paper has its own risks. It can burn, get wet, fade, or be misplaced. An encrypted vault on paper protects against casual reading, but it still needs a dry, secure place. Consider keeping one shard in a fireproof box and another in a safe deposit box, so a single disaster does not take everything.
Paper backups also need periodic checks. Ink can fade and storage conditions change, so it is worth reviewing your copies every year or after you move house.
Key features
Offline operation
Client-side encryption
Printable vault and shards
Flexible M-of-N thresholds
Social recovery and inheritance
Supported coins
PaperVault is built around seed phrases and other secrets rather than a specific list of coins. The backup method applies to whichever wallet you use, so you can protect a recovery phrase regardless of the network behind it.
How to install PaperVault on Windows
- 1
Get the program
Download the Windows build or installer only from the official website or from the GitHub repository linked there, at github.com/boazeb/papervault. Avoid mirrors and file-sharing sites, since they may serve modified copies.
- 2
Verify the file
Compute the SHA-256 checksum of the downloaded file and compare it with the value published by the project. If a signature is provided, check it as well. Do not run the file if the values do not match.
- 3
Run the installer
Launch the installer, or extract the Windows build to a folder of your choice, and follow the on-screen prompts. Keep the program in a location you control and avoid running it from a shared or synced folder.
-
Disconnect and test
Before entering real secrets, consider disconnecting the computer from the internet. Run a full test with dummy text first so you know each step works as expected on your machine.
System requirements
- No internet connection is needed after installation
How to use PaperVault
Using PaperVault is straightforward once you plan the split. Start with a test value so you understand each step before you touch a real seed phrase.
- Open PaperVault and create a new vault.
- Enter the secret you want to protect, such as a seed phrase.
- Choose the total number of keys and the number needed to unlock, for example 3-of-5.
- Generate the encrypted vault and the key shards.
- Print the vault and each shard, or save them to digital media if you prefer.
- Store each shard in a different place, such as a safe, a bank box or a trusted person's home.
- Test recovery by combining the threshold number of shards to confirm the secret comes back correctly.
Repeat the recovery test after any change to your setup, such as a new storage location or a replaced shard.
Pros & cons
- Free and open source under the MIT license
- Runs offline and is designed for air-gapped use
- Encryption and splitting happen entirely on your device
- Flexible M-of-N thresholds for up to 20 keys
- Printable output for paper and digital backups
- Supports social recovery and inheritance planning
- Available for Windows, macOS, Linux and Docker, plus a web or extension version
- Recovery depends on collecting the threshold number of shards, so losing too many makes the secret unrecoverable
- Paper can be damaged by fire, water or fading, so physical storage planning falls entirely on you
- Security depends on the machine you use; malware on a compromised computer can capture secrets as you type them
Is PaperVault safe?
PaperVault handles seed phrases, so treat it with the same care as any wallet-adjacent tool. Download it only from the official website or the GitHub repository for the project, and check the SHA-256 checksum or signature before running the file. Never enter a seed phrase into a third-party website, including online tools that claim to split or encrypt keys. Run the program on a clean machine if possible, and remember that the security of the output depends on the device you used. Check the latest version on the official website before installing.
- Official source only. Download from github.com/boazeb/papervault. Ignore ads and lookalike domains.
- Check the SHA-256. Compare the installer hash with the value the developer publishes before running it.
- Never share your seed phrase. No developer, support agent or website — including CryptApps — will ever ask for it.
Alternatives
PaperVault is not a generator or a recovery tool. Ian Coleman BIP39 Tool is an offline utility for working with BIP39 seed phrases, and it is meant for an isolated PC. VanitySearch and Galvanity focus on generating vanity addresses, while John the Ripper helps recover a password to your own wallet. PaperVault fills a different role: it protects a secret you already have by turning it into an encrypted paper backup with a threshold recovery plan. If you need a durable, split backup of a seed phrase, it fits better than these tools. If you need to check or recover a password, a different tool applies.
Specifications
- Price
- Free
- Type
- Open source
- License
- MIT
- Latest version
- 1.3.0
- Last update
- 14 Aug 2026
- Windows support
- Yes (Windows build or installer)
- Source code
- github.com/boazeb/papervault
Frequently asked questions
PaperVault is designed to keep secrets on your own device, using AES-256-GCM encryption and client-side processing. Safety still depends on where you run it and how you store the output. Verify the checksum before running the program, and test recovery with dummy data before you use real material.
No. Once installed, PaperVault runs without internet access, which is why it suits air-gapped setups. Disconnecting the computer before you enter real secrets further limits exposure. The program does not send your data to a server, so there is no remote copy to manage.
It means you create five keys and any three of them are enough to unlock the vault. Fewer than three shards reveal nothing useful about the secret. You can choose other ratios, up to 20 keys in total, depending on how many people or locations you want involved.
Yes, PaperVault is free and released under the MIT license, which lets you read, use and modify the source code. Because the project is open source, you can review the code on GitHub before deciding whether to trust it with your secrets.
Yes. PaperVault offers a Windows build or installer, so you can run the ready-made program without compiling anything. Build tools are only needed if you want to work from the source code yourself.
Run a test with dummy text first. Split it using the same threshold you plan to use, then recover it from exactly the minimum number of shards. Only after the recovery succeeds should you move to your real seed phrase, and repeat the test whenever your setup changes.
Yes. The program is described as encrypting secrets in general, so it can hold other sensitive text, such as account recovery codes. Choose material that is worth a physical backup, since the same storage and recovery considerations apply to everything you protect.
Verdict
PaperVault suits people who already have a seed phrase or other critical secret and want an encrypted paper backup that does not rely on a cloud service. It is free, MIT-licensed and actively maintained, and its threshold splitting gives you a practical way to share recovery among trusted people. It is not a beginner's wallet and will not replace good storage habits. Test every backup before you rely on it, and check the latest version on the official website.