How Ghost Message Works – Secure Sharing Explained
Ghost Message provides a zero-knowledge platform for sharing sensitive information through encrypted, self-destructing links. Our service ensures your confidential data remains private with one-time access and client-side encryption.
Your sensitive information is encrypted directly in your browser using AES-256, a military-grade encryption standard. The encryption key is generated locally and stored in the URL fragment (the part after the # symbol), which is never sent to our servers. This means even we cannot read your secret – only someone with the complete link can decrypt and access your information.
Ghost Message operates on a zero-knowledge principle. We never see, store, or have access to your unencrypted data. Only encrypted information is transmitted to our servers, and the decryption key remains solely with you and your intended recipient through the secure URL fragment.
Once your recipient views the secret or the expiration time is reached, the encrypted data is permanently deleted from our system. This "burn after reading" approach ensures your confidential information doesn't linger in inboxes, chat logs, or on our servers.
Enter your sensitive information (password, API key, private note, etc.) into the secure form. Your browser immediately encrypts this data using a randomly generated encryption key.
Choose how long your link should remain valid (from 5 minutes to 7 days) and how many times it can be viewed (once by default, or multiple times if needed).
When you click "Create Secret Link," we store only the encrypted version of your message on our servers. A unique URL is generated that contains both the location of the encrypted data and the decryption key (in the URL fragment).
Send the complete URL to your recipient through your preferred communication channel. Only someone with this exact URL will be able to decrypt and view your secret.
When the recipient opens the link, their browser retrieves the encrypted data from our server and uses the decryption key from the URL fragment to decrypt and display the message.
After the secret is viewed (or when it expires), it's permanently deleted from our servers. The link becomes invalid, and the information cannot be recovered by anyone.
Your encrypted data is stored temporarily in secure, volatile memory. We don't use persistent storage for secrets, minimizing the risk of data exposure.
If you need to revoke access before the link is viewed or expires, you can manually "burn" the secret, immediately removing it from our system.
Ghost Message doesn't require registration or accounts, preserving your anonymity and privacy. No personal information is collected or associated with your encrypted data.
Ghost Message's temporary, self-destructing links are ideal for many scenarios where security and privacy are paramount:
Ready to share your first secure, self-destructing message?
Create a Secret Link Now