> These safes are certified for classified use and they are safe.
The website says "10 minutes against forced entry". That's not safe.
No safe is safe against a state level actor. No safe is safe against "hit you with a crowbar until you open the safe".
Whatever secrets you have, it's better to hide them than to put them in such a conspicuous place. The only reason one should use a safe is as a plausible decoy...
Yea but you have multiple pieces of the secret to restart your Vault instance. Now you need to go to everyone’s office or home to get this secret to restore it.
I am referring to Shamir algorithm that Vault uses
Ideally, you connect Vault to a HSM if you need that kind of security that’s being described. HSMs are electronic safes