⚙️ Encryption & Security
Dead Drop Notepad — Self-Destructing Encrypted Notes
Create encrypted notes that self-destruct after being read. AES-256 encryption in the browser — nothing is stored on any server.
Dead Drop Notepad
Create encrypted, self-contained messages that can be shared via a single link. All encryption happens in your browser.
How It Works
Dead Drop Notepad uses AES-256-GCM encryption via the Web Crypto API. Your message never leaves your browser unencrypted.
- A random 256-bit AES key is generated in your browser
- Your message is encrypted with AES-GCM (authenticated encryption)
- The key, IV, and ciphertext are encoded into the URL fragment (#)
- URL fragments are never sent to the server — only the recipient's browser sees them
- No data is stored anywhere — the link IS the message
TIP
For maximum security, share the link through an encrypted channel (such as Signal or a Tor-based messenger). Anyone with the link can decrypt the message, so treat it like a password.
❓ Frequently Asked Questions
How does the dead drop notepad work?+
Your message is encrypted with AES-256-GCM in your browser using a random key. The encrypted text is encoded into a URL fragment. The decryption key never leaves your browser — it's embedded in the shareable link.
Is this really secure?+
The encryption is strong (AES-256-GCM), and the key stays in the URL fragment which is never sent to servers. However, anyone with the link can read the message, so share links securely.
What happens after the note is read?+
Since the note exists only in the URL, there's nothing to delete on a server. The 'self-destruct' concept means you should share the link through an ephemeral channel (disappearing messages, verbal exchange).