Product
A recovery layer that never becomes a custodian.
Anastasis sits underneath the products that hold critical keys. It answers a single question — how does a legitimate user get their secret back — without answering it by keeping a copy.
What it does
Protection, distribution, recovery.
The product is deliberately narrow. It protects a secret under a recovery policy, distributes the resulting material, and reconstructs the secret when the policy is satisfied.
- 01
Protect
The secret is encrypted and prepared for distributed recovery.
- 02
Distribute
Recovery information is stored across independent providers.
- 03
Recover
The user authenticates according to the policy and reconstructs the secret.
Capabilities
What is available today.
Client-side protection
Secrets are encrypted before anything leaves the user's device. The recovery layer never receives the plaintext secret.
Independent providers
Recovery material is distributed across providers that can be operated by different organisations in different jurisdictions.
Policy engine
Recovery conditions are expressed as policies combining providers and authentication methods, with redundancy where it is needed.
Multiple authentication methods
Email, SMS, security questions, physical mail and in-person verification can all participate in a policy, depending on the deployment.
Reference clients
A command-line client and a GTK desktop client demonstrate the full protection and recovery flow end to end.
Integration surface
Documented protocols and open implementations make it possible to embed recovery into an existing wallet, platform or product.
Why Anastasis
What makes this different from a backup.
Distributed trust
No single provider needs to hold enough information to reconstruct the protected secret. Trust is spread across independent parties chosen by the user or the organisation.
Privacy-preserving recovery
The protocol is designed to minimise what recovery providers learn — about the secret, about the person recovering it, and about the other providers involved.
Flexible recovery policies
Combinations of providers and authentication methods can be configured to match an organisation's risk model, regulatory context and operational reality.
Open architecture
Anastasis is built on documented protocols, Free Software and interoperable components, so integrations can be reviewed and audited rather than taken on faith.
No centralised custody
Recovery does not require handing the original secret to a single trusted custodian, so the recovery path does not become the weakest link.
See the architecture before you commit to anything.
The full protection and recovery flow, the privacy model and the threat model are documented and open.