How it works and why it's safe
Encrypt.One encrypts your secret right in your browser. Only encrypted data goes to the server, while the key stays in the link and never leaves the devices of the sender and the recipient.
The server sees only ciphertext
The secret is encrypted before it is sent and decrypted only by the recipient. In between, the data always stays encrypted.
-
Sender's browser
Creates a random key and encrypts the text and the file with AES-256-GCM using the browser's built-in Web Crypto API.
Wi-Fi: Kyiv_Office_5G
Пароль: N7#qkV2m!Lp9xW4z -
Encrypt.One server
Receives and stores only encrypted bytes. Without the key nobody can read them — not us, not anyone who gets into the server.
q8Zt0V3nR1xKpL6m2EwYc9HbT4sJfA7u… -
Recipient's browser
Downloads the ciphertext, takes the key from the link and decrypts the secret locally. The server deletes the data right after that.
Wi-Fi: Kyiv_Office_5G
Пароль: N7#qkV2m!Lp9xW4z
The key lives after the #
A link has two parts. The first one points to where the encrypted data is stored. The second one, after the #, is the decryption key.
Goes to the server. The address of the encrypted data: without the key it is just random bytes.
Stays with you. The decryption key. Browsers never send anything after the # to the server.
Never sent to the server
Browsers don't include the part after # in requests. So the key is neither in the server logs nor at any network hop in between.
New for every link
The key is generated randomly on your device. It cannot be brute-forced.
The full link is the access
Whoever has the full link can open the secret. Send it only to the recipient, and add a password for sensitive data.
What the server stores and when it deletes it
The server keeps a secret exactly as long as the recipient needs to open it.
Stored on the server
- The encrypted text and file
- The storage time you chose
- A counter of wrong password attempts
Never reaches the server
- The decryption key from the link
- The password for opening
- The secret in plain text
After it is opened
As soon as the recipient opens the secret, the data is deleted. The link won't work a second time.
When it expires
If the link isn't opened within the storage time you chose, the secret deletes itself.
When you say so
The “Destroy now” button on the link page deletes the secret immediately.
After three wrong passwords
If the password for opening is entered wrong three times, the secret is deleted for good.
A second lock for sensitive data
A password protects the secret even if the link is intercepted. Without it the recipient sees only the input field.
Share it separately
Give the password another way: by voice, in a different messenger or in person. Then intercepting one message gives nothing away.
Three attempts
After three wrong attempts the secret is deleted. Guessing the password by brute force won't work.
Don't make one up
Click “Suggest” in the form or take a phrase from the password generator: it is easy to read out loud.
Check it yourself
All of Encrypt.One's code is on GitHub. Anyone can see how the encryption works and make sure the key never goes to the server.
