Browser-Side AES-256-GCM Encryption
Messages and files are encrypted locally with the Web Crypto API before upload, so Strumio stores ciphertext instead of readable content.
Private handoffs, encrypted in your browser
Strumio encrypts messages and files before upload, then gives you a private link with practical delivery controls. Share passwords, recovery codes, API keys, documents, and confidential notes without placing plaintext in email or chat history.
Strumio combines browser-side encryption with controls for sending, receiving, replying, requesting, and managing sensitive information. Complete links remain sensitive, and operational metadata is still processed to run the service.
Messages and files are encrypted locally with the Web Crypto API before upload, so Strumio stores ciphertext instead of readable content.
The random decryption key stays after the # in the complete link, a fragment browsers do not send in normal web requests.
Turn a complete SecretLink or active chat invitation into a scannable QR code in your browser, without sending the link to a remote QR service.
Require a separately shared password before encrypted content can be retrieved, adding another barrier if a link reaches the wrong person.
Choose how long encrypted content remains available. Expiration limits later retrieval but cannot revoke information already revealed.
Allow one successful encrypted-payload retrieval, then make it unavailable to later requests. The first viewer can still copy or capture plaintext.
Attach files that are encrypted in the sender's browser and decrypted for preview or download in the recipient's browser.
Recipients can preview supported files, download decrypted attachments, and copy message text without changing the encrypted delivery flow.
Let a recipient send one browser-encrypted reply to the original sender without moving the conversation into plaintext email.
Create a reusable request link so multiple people can submit separate encrypted messages and files back to you.
Send a narrower, one-time encrypted message without creating an account when you need a quick private handoff.
Signed-in senders can review message history, manage active shares, and delete messages or account data from one dashboard.
Keep eligible recovery keys in your browser or export a recovery file, and opt into local guidance that never sends draft or decrypted content to an AI service.
Start a two-person encrypted text room without an account, choose a short expiration, and share its complete invitation link or local QR code.
Signed-in creators can add encrypted files or create a temporary group conversation for up to 20 participants, with browser-side message encryption.
Quickly revoke your current participant session and clear that chat's in-memory and session data on your device without closing the room for everyone else.
Generate a temporary receiving address for service signups and unverified contacts. Incoming messages are encrypted at rest and mailboxes expire automatically.
Share a browser-encrypted chat attachment with a download limit. When its final permitted access is claimed, Strumio locks it and queues the stored ciphertext for deletion.
Distribute a single payload across multiple fragments (e.g., 2-of-3 or 3-of-5). The secret is only reconstructed when enough distinct viewers combine their pieces in the browser.
Temporary encrypted conversations
Start a two-person encrypted text room immediately, or sign in when you need group conversations, encrypted files, Dead Drops, and more room controls.
Create a direct text room for two participants without providing an email address, profile, or permanent username.
Invite up to 20 participants to a temporary encrypted room using one complete invitation link.
Messages are encrypted and decrypted in participants' browsers with AES-256-GCM. The room key stays in the invitation URL fragment.
Room access uses the complete invitation link, participant capabilities, and an optional password derived in the browser.
Show or download a QR code for the complete active-room invitation. Strumio creates the code in your browser rather than sending the invitation to a QR service.
Account-free rooms last 10 minutes, 1 hour, or 24 hours and are deleted when the creator ends them or server-enforced expiration occurs.
A participant can immediately revoke their own session and clear local room data. Other participants can continue unless the creator separately ends the room.
Send a browser-encrypted file with a limited number of permitted accesses. Reaching the limit locks the attachment and starts its deletion workflow.
Before inviting participants, review the private chat, Panic Close, and Dead Drop guide.
Create a secure message link in three straightforward steps. No encryption software or browser extension is required.
Enter the information you need to share and choose a password, expiration time, or one-time access.
Strumio creates a random key locally and sends only encrypted ciphertext and required delivery data to the server.
Your recipient opens the complete link and their browser decrypts the message locally.
Strumio is built for focused handoffs such as passwords, recovery codes, API keys, access instructions, private notes, and encrypted file attachments.
Encrypt a message or file in your browser, choose its delivery controls, and share the complete link through a channel you trust.
Get started