Create a private message link

End-to-end encrypted by design

This link uses the browser's Web Crypto API with hybrid encryption: RSA-OAEP wraps a per-message AES-GCM key, and AES-GCM encrypts the actual message. The server only stores ciphertext and the wrapped key.

You can optionally persist the private key in local storage on this device. That is convenient, but less secure than keeping it only in the current tab.

If you do not persist it, the private key stays in this tab only.