Send secret messages safely.
Ruby HTML CSS CoffeeScript Gherkin JavaScript
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
.github
app
bin
config
db
features
lib
log
public
script
spec
vendor/assets
.gitignore
.rspec
.ruby-version
.travis.yml
CODEOWNERS
Gemfile
Gemfile.lock
Procfile
README.md
Rakefile
config.ru

README.md

Vuash

GitHub release

Vuash is a simple web app that lets you share plain text through a single access link.

All encryption is done by the browser, no secret keys touch the server, and only the encrypted message is stored in the database.

How it works

Sender side

  1. Browser encrypts the message and generates a secret key
  2. Browser discards unencrypted message
  3. Browser passes secret key along via URL fragment (not contained in the request)
  4. Server stores encrypted message in the database
  5. Browser shows message link by concatenating the encrypted message's unique URL with the secret key

Receiver side

  1. Server sends encrypted message
  2. Browser decrypts message with the secret key in the URL fragment
  3. If key is valid, show contents
  4. If key is invalid, show warning
  5. Server destroys the message

Hosted app

The app running at http://vua.sh is hosted on Heroku, with automatic deploys from this master branch. Production code is always paired with this repository.

Support the project

We currently pay for Vuash's domain from our own pocket. Please consider donating 🎈

Buy Me a Coffee