Messages are encrypted directly in your browser using AES-256-GCM. The server never sees your unencrypted content.
Passwords are used only to derive encryption keys in your browser. They’re never transmitted or stored.
You choose how long they last — 30 minutes to 30 days. Once opened, they are deleted instantly.
No. Messages are strictly one-time read. After decryption, the encrypted blob is deleted.
We can't. All encryption happens on your device. We store only the encrypted version, and not for long.
Yes — the design is responsive and works great on smartphones and tablets.