Users’ devices, e.g., smartphones or laptops, are typically incapable of securely storing and processing cryptographic keys. Tandem is a novel set of protocols for securing cryptographic keys with support from a central server.