Send files nobody else
can read.
Messages and files are locked in your browser before they reach us. Only the people you send them to can open them. We can't.
How it works
Three steps
You lock it
Your file is scrambled in your browser before it goes anywhere. We only ever receive the scrambled version.
We carry it
We pass it along without being able to look inside. Everyone you sent it to gets their own key.
They unlock it
Only the people you chose can open it, using a key that never leaves their own device.
Features
What you get
The privacy is structural, not a setting you turn on.
We can't read your files
Everything is locked on your device first. We only ever store scrambled data.
Works between companies
Send to people at other organizations without either side giving up control.
A record of everything
Who sent what, who opened it, and when. Including your own admins.
A separate key per person
Everyone gets their own way in, so one leak can't unlock the rest.
Nothing leaves unlocked
Encryption happens in your browser, before anything is uploaded.
Use it anywhere
Your master password unlocks your messages on any device you sign in from.
Full disclosure
What we can and can't see
Encryption hides content, not the fact that you sent something. Here is the honest split.
What we can see
- Your email address
- Who you send messages to
- When you sent them
- How large a file is, and its type
- Who belongs to your organization
What we can't
- Subject lines
- Message text
- File contents
- File names
- Your master password
The right column isn't a policy we promise to follow. It's a consequence of not holding the keys.
The difference
Against sending an attachment
Questions
Common questions
Your recovery key is the only way back in. We can't reset the password, because we never had it — it never leaves your browser. Save the recovery key somewhere safe when you sign up.