1. A method comprising: receiving, on a computing device, a registration password, the registration password provided to a plurality of client instances for registering the client instances to participate in a secure storage facility on a shared data store, the secure storage facility implemented using a key encryption scheme; generating or receiving, on the computing device, a first encryption key to be used in the key encryption scheme; calculating a key encryption key to be used to encrypt the first encryption key, the key encryption key calculated based at least in part on the registration password; encrypting the first encryption key with the key encryption key; creating a key element comprising the encrypted first encryption key; storing the key element on the shared data store; storing the key encryption key on a local persistent data store of the computing device.