Drop Secret

Welcome

DropSecret is the web service to safely send and receive short messages with another user without the web service (me) knowing what you sent.

You are moments away from being able to start receiving secrets from your co-conspirators. All you need to do is create a page by filling in a page name and a secure password. Mind that you cannot change your password later so make it secure early on.

If you are here to drop a secret to an ally just fill in their page name in the goto field.

Pass Phrase Warning

Mind to have a good pass phrase right away.

Really good!

Your pass phrase is used directly to decrypt the key giving you access to your secrets; we don't validate your pass phrase.

Changing to a better pass phrase later does not let you get back the security you've lost by starting with a weak pass phrase. So it does not make sense for us to let you change your pass phrase later.

I suggest using a multi-word pass phrase that only has meaning to you and includes non-alphanumeric characters. If you use a well known expression you are most likely vulnerable. If you use a dictionary word or trademark you are definitely vulnerable.

Page names

Your drop page name can be any combination of lowercase letters and numbers that have not been used before.

Disclaimer

We promise nothing.

Page generation takes a while. Right now your browser is working hard to generate a set of secure encryption keys.

You may want to take this time to jot down your pass phrase somewhere. If you forget it then it is gone. We don't know your pass phrase so no matter how much we want to help we won't be able to tell you what it is.