Secure distributed transmission and recombination of secrets

A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for secure and distributed provisioning of a secret required to access a secure resource, the operations comprising:

• identifying a request for a user to access a secure resource, wherein the user's access to the secure resource is conditioned on a secret being made available at a computing device being accessed by the user;
• accessing, in response to the request, at least a first portion and a second portion of the secret from a credentials repository, wherein the secret can be formed based on a combination of at least the first portion and the second portion of the secret;
• encrypting the first portion and the second portion of the secret using a cryptographic key of the computing device;
• providing the encrypted first portion of the secret to the computing device;
• and
• providing at least the encrypted second portion of the secret to an auxiliary device physically accessible to the user, wherein the encrypted second portion of the secret is configured to be conveyed through an action by the user from the auxiliary device to the computing device to be decrypted and combined with at least a decrypted version of the encrypted first portion of the secret to form the secret;
• wherein the decrypted first portion and the decrypted second portion of the secret, after being combined to form the secret, are at least partially determinative of whether to grant the request.