A method for securing keys for a non-secure computing-environment, the method comprising the steps of: a) upon receiving from a user system an encryption request for protecting a secret item (22, 58, 94, 148) in the computing-environment, creating an encrypted item by encrypting said secret item with each of a set of N location-specific secure-keys, wherein N is a positive whole number greater than one, and wherein at least one said location-specific secure-key undergoes previous initial concealment (16, 56, 86, 138) in order: i) to prevent said at least one location-specific secure-key and at least one respective secure-key value from ever being known in an unconcealed form on any computing resource in any computing-environment during said encrypting; wherein each said location-specific secure-key of said set corresponds to an exclusive, respective encryption location, wherein said locations are regions of memory located in different, physically-distinct computing resources operationally connected to the computing-environment; and wherein said at least one location-specific secure-key and said at least one respective secure-key value were initially transmitted in concealed form, during said previous initial concealment of said at least one location-specific secure-key, from at least one entity selected from the group consisting of: a user system that initially encrypted a plain form of said at least one location-specific secure-key and a plain form of said at least one respective secure-key value during an initialization phase, and a trusted computing resource. a) upon receiving from a user system an encryption request for protecting a secret item (22, 58, 94, 148) in the computing-environment, creating an encrypted item by encrypting said secret item with each of a set of N location-specific secure-keys, wherein N is a positive whole number greater than one, and wherein at least one said location-specific secure-key undergoes previous initial concealment (16, 56, 86, 138) in order: i) to prevent said at least one location-specific secure-key and at least one respective secure-key value from ever being known in an unconcealed form on any computing resource in any computing-environment during said encrypting; wherein each said location-specific secure-key of said set corresponds to an exclusive, respective encryption location, wherein said locations are regions of memory located in different, physically-distinct computing resources operationally connected to the computing-environment; and wherein said at least one location-specific secure-key and said at least one respective secure-key value were initially transmitted in concealed form, during said previous initial concealment of said at least one location-specific secure-key, from at least one entity selected from the group consisting of: a user system that initially encrypted a plain form of said at least one location-specific secure-key and a plain form of said at least one respective secure-key value during an initialization phase, and a trusted computing resource. i) to prevent said at least one location-specific secure-key and at least one respective secure-key value from ever being known in an unconcealed form on any computing resource in any computing-environment during said encrypting;