Shamir Secret Sharing

A cryptographic scheme that splits a secret (such as a recovery seed) into N shares so that any T of them reconstruct it while fewer than T reveal nothing. Standardised for seed backups as SLIP-39 and implemented on Trezor. A 2-of-3 split lets you survive losing one share and survive a single share being found, directly breaking the loss-versus-theft tension in seed backup.