Features for Sharing Secrets That Self-Destruct
Stop sending passwords through Slack, email, or WhatsApp. Seal a secret to your recipient's post‑quantum key and send a token that burns after reading.
- Sealed in your browser to the recipient's key — we never see your data
- Auto-destructs after first view or custom expiry
- No account required — your keys live in a vault in your browser
- How the post‑quantum sealing works
How It Works
Set up your key vault once; after that, a secret takes under a minute
Write
SealedChoose the recipient (a contact, or yourself), paste your secret and set a passphrase. It is sealed to their key in your browser.
Share
OpenedSend the token, and the passphrase through a different channel. Opening it takes the passphrase and the recipient's private key.
Burn
DestroyedLink expires after first view or time limit. No trace left behind.
Why NoTrust.now?
True zero‑knowledge architecture. Your secrets are encrypted before they leave your browser.
- 100% Client-Side Encryption
- Secrets are encrypted in your browser before leaving your device. We never see your data.
- No Content Logs
- We can't read your secrets even if compelled. We keep only the encrypted blob until it is read or expires, never its content, your passphrase or a private key.
- Bound to the Recipient
- Each secret is sealed to the recipient's ML‑KEM‑768 public key, so only their private key, together with the passphrase, can open it. ML‑KEM resists quantum attacks, so a copy recorded today stays sealed.
- Auto-Destruct
- Secrets automatically delete after being viewed or when time expires. No persistent storage risk.
- Secret and passphrase entered in your browser
- ML‑KEM‑768 encapsulation to the recipient's public key
- Key = scrypt(passphrase) combined with the shared secret
- ChaCha20‑Poly1305 encryption
- Optional ML‑DSA‑65 signature with your private key
- Ciphertext sent to the server
- Server stores only ciphertext
- Passphrase and private keys never leave your browser
- Burned after reading or on expiry
Who Uses NoTrust.now?
Built for developers and ops teams
- Developers
- Share API keys, database credentials, and environment variables with team members securely.
- Sysadmins & MSPs
- Send server passwords and access credentials to clients without email exposure.
- Teams
- Onboard new employees securely. Share WiFi passwords, VPN configs, and access tokens.
Post‑Quantum, Every Time
There is one mode. Every secret is sealed to its recipient with ML‑KEM‑768 and still needs its passphrase to open.
Quantum‑Safe
The only modeThe secret is encrypted under a key that combines two factors: a shared secret that only the recipient's private key can recover, and a key derived from the passphrase. The server holds neither.
What it changes: AES‑256 and ChaCha20 are not broken by quantum computers. Key exchange is the exposed part — RSA and elliptic curves fall to a large enough quantum computer. ML‑KEM‑768 takes that step, so a secret recorded today stays bound to its recipient's private key.
Creating a secret needs a key vault in your browser. Setting one up generates your ML‑KEM‑768 and ML‑DSA‑65 key pairs, and the create page guides you through it.
- ML‑KEM‑768 (FIPS 203) seals the key to the recipient
- Passphrase as a second factor, derived with scrypt
- ChaCha20‑Poly1305 authenticated encryption
- Optional ML‑DSA‑65 (FIPS 204) signature from the sender
Ready to Share Secrets Securely?
Set up your key vault and seal your first secret in a couple of minutes. No account required.
No account required • Free forever for basic use