Privacy for everyone

Encrypt anything in seconds. Publish nothing but the cipher.

h4sh.org is a non-profit public utility dedicated to global privacy. Encrypt your words entirely in your browser, keep your seed phrase, and share a zero-knowledge link anywhere.

Encrypted snapshotZero knowledge

Ciphertext

QmFzZTY0LkFsbC4uQ2lwaGVycw==

IV

9jBq1+H0qNs=

Salt

mhy2wZ5R1r4=

“Only the encrypted payload ever leaves your browser.”

Encrypt & publish in one move

Your message is encrypted locally with AES-256 GCM and a key derived from your seed phrase using PBKDF2. h4sh.org stores only the encrypted payload.

StrengthWeak

Aim for at least 12 characters with mixed cases, numbers, and symbols.

  • Use at least 12 characters.
  • Add uppercase letters.
  • Add lowercase letters.
  • Include numbers.
  • Sprinkle in special characters.

This seed phrase looks weak. Consider adding more words, numbers, and symbols to increase entropy.

One-time reveal

Delete the encrypted payload after the first successful decrypt.

Leave empty to keep the default expiry: Dec 8, 2025, 7:48 PM.

Transparency check

  • Client-side encryption

    AES-256 GCM runs entirely in your browser using the Web Crypto API. We never see your seed phrase.

  • Minimal storage

    We store only the ciphertext, IV, salt, and timestamp in our database. Nothing else. Don't trust us? Check out the codebase.

  • Instant share

    Once published, share the unique URL. Anyone with the seed phrase can decrypt instantly.

Our mission

A commons for encrypted communication.

Privacy is a right, not a luxury. We design public tools that amplify trust and protect speech. h4sh.org removes barriers to encryption so every message—activists, journalists, friends, and families—can stay safe.

  • Built as a non-lucrative public organization with no ads and no tracking.
  • Open source and auditable on GitHub—our roadmap belongs to the community.
  • We pledge zero data retention beyond what is required to deliver encrypted payloads.

Encrypt

Write your message and craft a powerful seed phrase. Everything happens in your browser.

Publish

We store only the encrypted blob. You receive a unique hash URL ready to share anywhere.

Reveal

Anyone with the link and seed phrase can decrypt instantly—no accounts, no friction.