sealedscrambleSealed on a trusted device.
An explicitly enrolled Android phone or Windows computer encrypts the message and generates a random secret code.
A QUIETER WAY TO SHARE WORDS
Private words.
Separate secrets.
An encrypted message in one channel.
Its secret code in another.
A little more intention in what you share.
For recipients with both parts. No public signup.
01 / THE PROTOCOL
Two parts.
One private message.
A deliberate pause between creating, sharing, and opening.
Keep the two parts apart.
The sender shares the encrypted text, then sends the code through a different trusted channel.
Bring them together here.
Confirm this website’s address with your sender. Paste both parts to ask the service to open the message.
Only signatures from enrolled senders are accepted. Messages expire after seven days, and a revoked device’s messages can no longer be opened through this service.
The service processes your code and decrypted text. It is not end-to-end encrypted against the server. A recipient can save or forward revealed text; expiry cannot erase copies.
This implementation has not received an independent security audit. Device validation and deployment checks must be completed before sensitive use.
03 / FIELD NOTES
Before you open.
Where do I get the secret code?
Ask your sender to share the random 32-character code separately from the encrypted message, preferably through a different trusted channel. A six-digit PIN will not work.
Can I send messages from this website?
Sending is limited to privately distributed native apps on explicitly enrolled devices. Installing an app does not enroll a sender. There is no public signup or download.
Does opening a message leave a record?
The supplied service does not keep a message database or log request bodies. Your code and message are sent to the server for decryption. The host, reverse proxy and Cloudflare configuration may record connection metadata; the operator must verify retention settings. Your device, clipboard and recipients may keep copies.
Why won’t my message open?
Confirm both complete parts with the sender. A wrong code, changed message, expired message or revoked sender has the same failure response. Earlier SEALED.v1 messages are unsupported.