How does EnvGuard encrypt payloads?

EnvGuard uses Web Crypto API AES-256-GCM directly in your browser. The decryption key never leaves your device and is embedded in the URL hash fragment.

What is the Burn After Reading feature?

If enabled, the encrypted payload will be permanently deleted from the database immediately after the recipient views it once.

Secure Payload

PROTOCOL: AES-256-GCM / 128-BIT SALT

.env

Expiration Settings

Time to Live (TTL)

Burn After Reading

Access Control

Access Password (Optional)

SECURITY TIP: Providing a password adds a secondary layer of PBKDF2 derivation to the encryption key.

Secure Payload

Expiration Settings

Access Control

Payload Secured

CRITICAL RECOVERY NOTICE