SEED VAULT

Simple interface, serious security

SEED VAULT follows exactly the same flow as on the device screen: PIN, passphrase, 2FA, then access to your seed slots. No online account, no cloud, no automatic sync.

It is designed as a standalone safe: configure it once, store it in a secure place, and power it on only when you need your sensitive information.

The firmware always shows a clean minimalist UI with clear buttons (SEEDS, OPTIONS, CLONE, etc.). The website mirrors that same feeling so you immediately recognise the environment.

Key features

• Up to 15 seed slots, each with a custom name.
• Support for 12 or 24 words per seed.
• Built-in TOTP 2FA (Google Authenticator compatible QR).
• Encrypted Bluetooth cloning between SEED VAULT devices.
• Secure full wipe (ERASE ALL) directly from the UI.

Security architecture

SEED VAULT is built to minimize the attack surface. Everything revolves around three layers: PIN, passphrase, 2FA.

1. 8-digit PIN

Access starts with an 8-digit PIN. After several wrong attempts, the device can wipe itself to protect against brute-force attacks.

2. Passphrase

A passphrase complements the PIN. It is entered via a virtual keyboard on the device touchscreen and never leaves the hardware.

3. TOTP 2FA

A TOTP code is generated locally from a secret displayed once as a QR code during setup. No external backend is required.

Secure wipe (ERASE ALL)

A repeated gesture on the UI (the triangular “ERASE ALL” area) can wipe all data from NVS and reboot the device as factory-fresh.

Secure device-to-device cloning

The BLE cloning module lets you export or import seeds and settings between two SEED VAULT units using a pairing code. No server is involved: communication is direct and encrypted.

Hardware & firmware

Platform

SEED VAULT is built on an ESP32 board with a color touch display and NVS/flash for encrypted secret storage.

User interface

The firmware UI uses large high-contrast buttons (SEEDS, OPTIONS, CLONE, etc.), a dark background, light text and a green accent for validated actions – exactly like this site theme.

Firmware for integrators

The code is structured into clear modules: auth, seeds, clone, lights, wifi_time, etc. It is meant to be readable, maintainable and extensible.

User manual

The manual is provided as a PDF so you can easily print it or archive it with your sensitive documents.

Tip: print the manual and store it separately from the device, in a safe place.

Frequently asked questions