How Strumio encrypted sharing works

How does Strumio encrypt a message or file?

Strumio uses the Web Crypto API and AES-256-GCM to encrypt message and file content in your browser. Only ciphertext and the data needed to deliver it are uploaded.

Where is the decryption key stored?

The random key is placed in the URL fragment after the # symbol. Browsers do not send URL fragments in normal HTTP requests, so the key is not included in Strumio server logs or message records.

Can I share a SecretLink or chat invitation with a QR code?

Yes. When the complete access link is available on your device, Strumio can create a QR code locally in your browser. The QR code contains that complete link, including its fragment key, but not the plaintext message, file contents, or password. Treat the QR code as sensitively as the complete link.

What happens if I lose the complete link?

Strumio does not store decryption keys. If the complete link, every browser-local recovery copy, and every exported recovery file are lost, Strumio cannot recover the ciphertext for you.

What does One-Time View mean?

A one-time message can be retrieved once. Strumio atomically marks it as consumed so a second request cannot retrieve the encrypted payload. The first viewer can still copy or capture the decrypted content.

Can I add a password or expiration date?

Yes. You can require an access password, set an expiration time, or combine those controls with one-time viewing.

What can I share with Strumio?

Strumio is designed for passwords, recovery codes, API keys, private notes, access instructions, and encrypted file attachments that should not remain readable in email or chat history.

Does Strumio support private chats?

Yes. Anyone can create a temporary encrypted text room for two participants without an account. Invited guests join with the complete room link, a display name, and the room password when one is required. Signed-in creators can also use file-enabled direct and group rooms.

What can I do in an account-free temporary room?

Choose a 10-minute, 1-hour, or 24-hour lifetime, add an optional password, share the complete link or locally generated QR code, exchange browser-encrypted text, and end the room early. Group chat, attachments, and Dead Drops require a signed-in room.

Can I create group conversations?

Yes. A Strumio group room supports up to 20 participants. New participants with valid room access can decrypt the active encrypted conversation history.

How are Strumio conversations protected?

Chat messages are encrypted and decrypted in participants' browsers with AES-256-GCM. The room key stays in the URL fragment, while the service processes ciphertext and the limited operational data needed to run temporary rooms. Creators can add a password, and rooms expire after at most 7 days.

What is the difference between a SecretLink and a chat?

A SecretLink is designed for a focused delivery with controls such as one-time access, expiration, encrypted files, or one encrypted reply. Chat is for temporary back-and-forth text conversations with two people or a group of up to 20.

What does Panic Close do?

Panic Close immediately requests revocation of your current participant session and clears that room's in-memory and session data on your device. It does not end the room for other participants or erase content that anyone already copied, downloaded, or captured.

How does Dead Drop file sharing work?

A chat participant can send a browser-encrypted attachment with an access limit. Each successful claim counts toward that limit. The final permitted claim locks the attachment against later access and queues its stored ciphertext for deletion.

What happens when a conversation ends?

The creator can end a room, and every room also has an expiration time. Ending or expiration makes the room unavailable and starts cleanup of its records and stored encrypted attachments. It cannot erase copies already saved outside Strumio.

Where can I learn about private chat controls?

Read the private chat, group conversation, Panic Close, and Dead Drop guide for a practical explanation of room links, optional passwords, participant access, attachment limits, and deletion boundaries.

What is Private Mail?

Private Mail gives you a temporary email address to protect your primary inbox from spam and unverified senders. Incoming messages are encrypted at rest after ingestion.

Can I reply to messages in Private Mail?

No. Private Mail is receive-only. However, you can convert a received message into a Secure Chat invitation to reply through an encrypted channel.

Does Strumio support multi-party access?

Yes. Strumio Split-Key Secrets let you distribute a payload across multiple fragments (like 2-of-3 or 3-of-5). The secret can only be reconstructed in the browser when the required threshold of fragments is combined.

Next steps

Create a free Strumio account to send your first encrypted message.

For step-by-step advice and realistic limitations, browse the secure sharing guides.

Need an encrypted back-and-forth conversation? Start a temporary private room without creating an account.

Learn how room access, expiration, Panic Close, and file limits work in the private chat and Dead Drop guide.