A user registers with a server system and provides user data (e.g., personal information). The server system divides the user data into multiple components. Each device in a set of devices receives a component of the user data for storage. When the user accesses a web page through a host device that includes one or more data fields into which user data can be entered, the host device receives the components of the user data from the devices in the set. The host device reassembles the user data based on the received components. When an authorization gesture is performed by the user with a storage device from the set of devices, the host device inserts the user data in the data field.