Skip to content

Talk

Encrypted chat room, no signup

Open a private room, send the link, and talk. Messages are encrypted in your browser, so the server only relays ciphertext.

End-to-end encryptedNo accountPhotos and files up to 800 KB

Start a room

A new room with a random key. You'll get an invite link to send.

Shown to people in the room. Stored in this browser.

Disappearing messages

You can change this later in the room.

Opens the room and makes an invite link.

Join a room

Paste the invite link someone sent you. Older password rooms work too.

The key stays in this browser.

How it works

How the encrypted chat works

  1. Open a room

    Your browser makes a random room ID and a 256-bit key. The invite link carries both, with the key after the #.

  2. Share the invite

    Anyone with the full link can join. Messages, photos and files are encrypted in each browser before they're sent.

  3. Check, talk, leave

    Compare the five safety words to confirm you share the key. When everyone leaves, the messages are deleted.

When to use it

For conversations that shouldn't leave a trail

A quick private talk
Talk with someone who doesn't use your messaging app, without swapping phone numbers or usernames.
Incidents and handoffs
Pass credentials and details during an incident in a room you burn when it's over.
A short-lived group
Bring a few people together for one task, with messages that disappear on a timer.
Screenshots and files
Share a photo or a small file inside the encrypted message instead of a cloud link.

Limits and storage

What the server sees, and when it forgets

Encryption
AES-256-GCM in each browser with the key from the invite link. The server gets a hash to check membership, never the key.
Server keeps
Encrypted messages with their times and timers, the room's auth hash and default timer, a hash of each message's delete token, and presence: a random per-tab ID, a typing flag and when it was last seen.
Never sent
Message text, photos, files, the room key, and your display name, which travels inside the encrypted messages.
Attachments
Photos and files up to 800 KB each, encrypted inside the message.
Timers
Disappearing messages are off by default, or from 30 seconds to 1 week. The server deletes each message when its timer ends.
Deletion
Messages go once nobody is left in the room, when their timer ends, or when anyone burns the room. An idle room is forgotten after 7 days.

Older rooms opened with a password still work. Every stored field is listed on the privacy page.

FAQ

Encrypted chat questions

Is this chat anonymous?

There's no account, phone number or email, and your display name is optional and travels encrypted. But like any website, our hosts see IP addresses and request times. If you need to hide where you're connecting from, use a tool built for that, such as Tor.

Can ProtectedShare read the messages?

No. Messages are encrypted in each browser with a key that lives after the # in the invite link, which browsers don't send to servers. The server stores and relays ciphertext it can't decrypt.

What are the safety words?

Five words derived from the room key. If everyone in the room sees the same five words, you all hold the same key and nobody swapped the invite. Compare them on a call or in person.

How long are messages kept?

Until everyone has left the room, a disappearing timer runs out, or someone burns the room, whichever comes first. Cleanup happens on the room's next request or within 30 minutes, not to the second.

Can people in the room save messages?

Yes. Anyone in the room can copy, screenshot or save what they see, and nothing on a web page can stop that. Disappearing messages and burning the room control the copy on our server only.

What does burning the room do?

It deletes every message and the room itself from the server, for everyone, straight away. People still in the room see that it was burned. It can't be undone.

Do I need to install anything?

No. It runs in the browser on desktop and mobile. You can turn on browser notifications, which show the sender's name only, never the message.

Related tools and comparisons