Encrypted message board.
Share a strong password with another person. Enter the exact same password here to send and read messages in the same room. Your browser encrypts messages before uploading them.
Use a separate shared passphrase, ideally five or more randomly chosen words. Never enter your private-key passphrase or reuse an account password.
Enter a shared password to open a room.
Messages in your room
Refresh to receive new messages. Reenter the password after reloading. The service shows up to the latest 100 messages, with fewer when large messages reach the 8 MB loading budget, and keeps up to 200 per room for seven days. Posting limits apply, including limits shared by people using the same Tor exit.
How encryption works and what it protects
The browser derives keys with PBKDF2-HMAC-SHA256 (600,000 iterations) and separates room-discovery and encryption keys with HKDF. Messages and names use AES-256-GCM with a fresh random nonce and authentication checks. Only encrypted data, a password-derived room identifier, random message identifiers, and timestamps are stored on Cloudflare.
The password is kept only while opening the room; derived keys remain in memory until you lock or leave the page. Lock clears the visible messages and draft. This page does not save passwords, keys, or plaintext in browser storage; a browser extension or password manager may behave independently.
Use a strong password: a captured room identifier or encrypted message allows offline password guessing. Anyone with the shared password can read and write in the room and use any name. This does not verify a sender or provide forward secrecy. A different password opens a different room, so an empty room cannot tell you whether you mistyped.
This is browser password encryption, separate from the OpenPGP guide; its ciphertext is not an OpenPGP message. It relies on the browser, your device, and the code served by this website. A compromised host could change that code. Cloudflare can see room activity, timing and message sizes, and may log requests. Encrypted storage does not make the service anonymous or suitable for high-risk secrets.