This disclosure relates to techniques for performing encryption and decryption operations and that provide fully non-custodial data management, i.e., where end-users have control over their data—rather than a third party. Specifically, the techniques disclosed herein are configured to allow end-users to have the ability to recover and/or maintain access to data stored on third-party systems—even if one or more third-party entities storing the data are no longer in compliance with a predetermined set of operational criteria. In other implementations, novel split private key generation techniques are disclosed, wherein a newly-generated private key may be split into at least three shards, e.g., an authentication service provider shard, a shard for another entity, and a “recovery” shard. In still other implementations, an iFrame may decrypt separate shards of a private key using a delegated key management system (DKMS) and then use the reconstructed private key to sign a digital transaction.