Contact
- Email: hello@sealbreak.app
- Bugs and feature requests: GitHub Issues
Requirements
- An OpenBao server, or a compatible HashiCorp Vault server, that uses a Shamir seal.
- An HTTPS endpoint for that server with a certificate your iPhone trusts.
- An iPhone with Face ID and a device passcode set.
- iOS 26 or later.
Frequently asked questions
Where is my unseal share stored?
In the iOS Keychain on your iPhone. It is bound to that device, is not synced to iCloud, and is released only after Face ID. It never leaves the device except when Sealbreak sends it to the server you configured.
Can I export my share or move it to a new iPhone?
No. There is no export by design. On a new iPhone, import the share again from your own recovery copy.
What happens if I lose my iPhone?
The share on that iPhone may become unusable. The same can happen after Face ID changes, a device reset, or deleting the app. Sealbreak is not a backup. Always keep an independent recovery copy of every unseal share and a separate way to unseal your server.
Does Sealbreak send my share anywhere else?
No. Sealbreak connects directly to your server over HTTPS. There is no Sealbreak relay, and the app collects no data. See the privacy policy and the threat model for details.